Privacy Policy

1. App Use and Photo Access

To do its job, Chunky Time (“the App”) asks iOS for permission to access your photo library. You choose whether to grant (1) full access, (2) limited access to selected photos, or (3) no access at all. Photo access levels can be changed at any time in Settings → Privacy & Security → Photos → Chunky Time.

After you grant the App photo access:

• TinyCone and third parties do NOT receive your photos, videos, or embedded metadata (i.e. dates and location tags embedded by your camera) .
• Your photos, videos, and their metadata are read and processed entirely on your device.
• Albums, groupings, and any organizational data the App creates are stored locally on your device.
• Because your data lives only on your device, deleting the App deletes the App’s local data along with it. We have no copy to delete and no way to recover it for you.

2. Information We Collect

The information we collect is either automatically sent to us by your device(s) in the course of using the App or is limited information that you have voluntarily and knowingly provided us.

2.1. Automatically Collected Information

Through the use of the App, TinyCone automatically collects the below information for App analytics and improvements:

Device Information

• Technical information about the device(s) used to access the App
• Crude location (time zone, country, continent) and date of the App’s download
• Mobile device identifiers, such as Apple IDFA - which are technical identifiers developed by mobile operating systems for advertising purposes which remain under your control and can be reset or erased at any time in your device settings)

Diagnostics Information

• Two anonymous App installation IDs, one for performance and another for subscription tracking, not tied back to any identifying information
• Crash reports (stack traces, error messages, device state at time of crash)

App Usage Information

• Data in relation to preferences and activities on the App, such as your App settings configurations and interactions with the App
• Subscription status (whether a subscription is active, your plan type, transaction identifiers from Apple)

2.2. Voluntarily Provided Information

Aside from granting photo access, you are not required to provide Chunky Time additional access or information in order to use the App. We collect the below information ONLY if you choose to provide it to us in the below scenarios:

When Using the Feedback Board

• The username / display name provided when using the Feedback Board in the App. This does NOT have to be your real / legal name.
• The device vendor identifier provided when using the Feedback Board in the App. This links anonymous user sessions.

When Using the Contact Support Form

• The email and additional diagnostic details you choose to provide through the in-app “Contact Support” button.

3. Information We Do Not Collect

TinyCone does not collect via third party service providers or directly through the App:

• Your photos, videos, or any thumbnails, embeddings, or content derived from them.
• Your name, address, phone number, date of birth.
• Your precise location. The App does not request location permission.
• Your contacts, calendar, microphone, or health data.
• Payment card numbers or billing details — those go to Apple, not to us.
• Your Apple Account email or identifier.
• Personal information for cross-context behavioral advertising.
• Any other sensitive personal information (such as your social security or passport number, driver’s license, financial account credentials, biometric data, etc.)

4. Who We Share Information With and Why

Third-Party Service Providers

We use third-party services for: usage analytics, crash and diagnostic reports, subscription processing and management, feedback management, and chunkytime.app (the “Site”) management. These services may access the limited data described in Section 2.1 solely when performing the above tasks for the purposes we specify. We do not give them permission to disclose or use any of our data for any other purpose.

We do not otherwise share or sell information to third parties, including marketers (see Section 5).

Per Legal Requirements

We may preserve and/or disclose information where necessary and appropriate to comply with legal process, such as for a valid government or law enforcement request, or as required by law.

We may also disclose information under the good faith belief that such action is necessary to protect and defend the rights, safety, and/or property of TinyCone, LLC; to protect the safety of the public and any person; to prevent a crime; or to prevent what we reasonably believe to be illegal, legally actionable, or unethical activity.

5. How Long We Keep Information

We do not store any personal information, user photos, and videos. For app usage data, we keep it for one year.

6. Tracking and Advertising

The App contains no advertising and no third-party ad SDKs. We do not track you across other companies’ apps or websites, so the App does not present Apple’s App Tracking Transparency prompt. We do not respond to browser “Do Not Track” signals because we do not track across sites; on our Site we honor Global Privacy Control signals where technically feasible.

7. Security

We limit any data we collect to the minimum amount necessary to operate the App. The data stored locally on your device by the App is protected by iOS, including device-level encryption when you have a passcode or biometric lock enabled. Information sent to our Service Providers travels over encrypted connections (TLS/HTTPS). No method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute data security.

8. For Users in the United States

This section of the Policy applies to Chunky Time users that are located in the United States.

In certain U.S. states, users have additional rights afforded to them under applicable state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), the Colorado Privacy Act, the Connecticut Data Privacy Act, the Utah Consumer Privacy Act and the Virginia Consumer Data Protection Act.

8.1. Categories of Personal Information collected

For details about the personal information TinyCone has collected in the past year, please see Section 2 “Information We Collect.” For details on how we use that information, who we share it with, and how long we keep it, please also see Section 4 “Who We Share Information With and Why” and Section 5 “How Long We Keep Information.”

8.2. Rights With Respect to Personal Information

The aforementioned state privacy laws generally give resident users varying rights with respect to the personal information we collect, including the right to (subject to applicable law and certain limitations):

• Request access to the personal information TinyCone has collected about you;
• Request that TinyCone delete your personal information;
• Request that TinyCone correct inaccurate personal information;
• Appeal decisions where we deny your rights request.

You may also have the right to opt out of the sale of your personal information and the sharing of personal information for cross-context behavioral advertising. However, TinyCone does NOT collect and share or sell personal information for cross-context behavioral advertising or other purposes.

8.3. Exercising your rights

You can exercise your rights and make a request by contacting us at team@chunkytime.app. We may need to ask for additional information to verify your request. We will not discriminate against you for exercising your statutory rights.

In addition to contacting us with requests for information reports, deletion, and corrections, you can halt further collection of information by:

• Revoking photo access in iOS Settings
• Deleting the App (this will stop further collection of information tied to the anonymous installation identifier).

9. For Users in Europe

This section of the policy applies to TinyCone users that are located in the European Economic Area (EEA) or United Kingdom (UK).

9.1. Controller's details

For the purposes of the GDPR and UK GDPR, TinyCone, LLC is the data controller of your personal data that we process in connection with your use of the App. TinyCone, LLC’s registered address is at 8401 Mayland Dr Ste A, Richmond, VA 23294-4648, USA. We can be contacted using the details provided in Section 12 (“Contact Us”) below.

9.2. Legal Bases

If you are in the EEA or the UK, we process the data described in Section 2 on these legal bases

• Legitimate interests — for crash reporting, security, and basic product analytics, to keep the App working and improve it. We do not rely on this lawful basis where our legitimate interests are overridden by your rights and interests.
• Contractual necessity — to provide the App’s service to you, fulfil our obligations to you under our Terms of Use, and to deliver the subscription features you purchased.
• Consent — you consent to us, and our third party partners, using your information in a certain way. You may withdraw consent at any time.
• Legal obligation — where we must retain or disclose data for compliance with our legal obligations.

9.3. Rights With Respect to Personal Data

If you are in the EEA or UK, you have the rights to:

• Access, update or to delete the personal data we have on you.
• Have your information rectified if that information is inaccurate or incomplete.
• Object to our processing of your personal data.
• Request that we restrict the processing of your personal information.
• Be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
• Withdraw your consent at any time where we relied on your consent to process your personal information.

You can exercise your rights and make a request by contacting us at team@chunkytime.app. We may need to ask for additional information to verify your request. We will not discriminate against you for exercising your rights.

You also have the right to complain to a Data Protection Authority about our collection and use of your personal data. For more information, please contact your local data protection authority .

9.4. Cross-Border Data Transfers

We only transfer data within jurisdictions subject to data protection laws that reflect our commitment to protecting the privacy of our users. We operate from the United States, and our service providers may process data in the United States and other countries. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. Contact us for a copy of the safeguards we use.

10. Children’s Privacy

Chunky Time is not primarily directed to children under 13. Core features work without collecting any personal information. Optional features through which users may voluntarily provide information (see Section 2.2) are intended to be used by an adult, or by a child only with a parent or guardian’s involvement and consent.

We do not knowingly collect personal information from children under 13 without the appropriate consent. If we become aware that we have collected personal information from children without verification of parental consent, we take steps to remove that information. If you are a parent or guardian and believe your child has provided us with personal information without your consent, email team@chunkytime.app and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. If a change materially affects how we handle your information, we will notify you in the App or by other reasonable means before it takes effect.

12. Contact Us

Questions, requests, or concerns about your data privacy? Email team@chunkytime.app, or write to TinyCone, LLC, 8401 Mayland Dr Ste A, Richmond, VA 23294-4648, USA.