Privacy Policy

1. Controller

The controller responsible for the processing described in this policy is:

Where Apple or Cloudflare process data under their own responsibility, their privacy information applies in addition.

2. Data on your iPhone

Homescreen Studio stores what you create and set up in the app on your iPhone: widgets and setups with their settings, your content such as habits, countdowns, tasks, quotes and counters, saved locations, selected photos and cached weather data. The app and its widgets share one storage area on the device for this.

There is no user account. We run no server for this data and do not receive it.

Where the GDPR applies, the legal basis is Article 6(1)(b) GDPR: the processing is necessary to provide the app features you request.

3. Access you allow

Some widgets show data from other apps. Homescreen Studio accesses it only after you have allowed it in iOS. The data is processed on your iPhone and not sent to us. You can withdraw any permission at any time in iOS Settings, Health permissions in the Health app under Profile › Apps; the related feature is then no longer available.

• Calendar: events for calendar widgets. The app changes nothing in your calendar.
• Reminders: tasks for task widgets. The app checks off or adds tasks when you do so in the widget or in the app.
• Contacts: names and birthdays for the birthdays widget.
• Health: steps, activity, workouts, heart, sleep and mindfulness for health widgets – read only; the app writes nothing to Health.
• Location (while using the app): for weather, sun times and the moon, and for the travel time to your next event. Without permission, widgets use the locations you set in the app.
• Photos: you pick individual images in the iOS photo picker; only these are stored in the app, resized. The app does not need access to your whole photo library.

4. Weather, place search and travel time through Apple

For weather the app uses Apple WeatherKit, for place search and travel time Apple MapKit. The information each request needs is sent to Apple: for weather the coordinates of your location or of a saved place, for place search your search term, for travel time your current location and the location of the event. Apple processes these requests under its own responsibility; we do not receive them.

Weather data is cached on your iPhone so that widgets can show it without a new request. The legal basis is Article 6(1)(b) GDPR.

Apple Weather data sources

5. Purchases through the App Store

Pro is available as a monthly subscription or as a one-time purchase (Lifetime). Purchases are offered and processed through Apple’s App Store and StoreKit. Apple processes your Apple Account, payment method, billing and the payment; we receive no card or bank details.

To unlock Pro, the app checks the purchase entitlement verified by Apple and stores on your iPhone the product and transaction identifier, the expiration or grace period and the renewal status; the widgets read this information too. The legal basis is Article 6(1)(b) GDPR.

You can restore purchases in the app under Settings › “Restore Purchases”. You manage and cancel the monthly subscription in your Apple Account’s subscription settings. Deleting the app does not cancel a subscription.

Apple Privacy Policy

6. Feedback and support by email

Settings › “Send Feedback” and “Suggest a Widget” in search open an email draft in your mail app. The draft contains a subject and, for feedback, the versions of the app and of iOS. Nothing is sent unless you tap “Send” yourself.

Mail to support@homescreenstudio.app is first received by Cloudflare Email Routing, which forwards it to our business mailbox, hosted by Google. Cloudflare and Google may also process data outside the EEA in doing so. When you write to us, we process your email address, your message and anything else you tell us in order to deal with your request. The legal basis is Article 6(1)(b) GDPR where it concerns a contract or pre-contractual questions, otherwise Article 6(1)(f) GDPR – our legitimate interest in answering enquiries.

7. Retention and deletion

• Data in the app stays on your iPhone until you delete it in the app or remove the app.
• Depending on your iOS settings, app data may be included in device backups (iCloud Backup or a backup on a computer). You manage these backups through Apple.
• Apple keeps App Store transaction data under its own legal obligations and rules.
• We delete support emails once we no longer need them for your request, unless statutory retention duties or the establishment, exercise or defence of legal claims require longer storage.

Because we have no access to data that exists only on your iPhone, we cannot export or delete it for you. You manage it yourself in the app.

8. No advertising, no tracking, no analytics

Homescreen Studio contains no analytics, advertising or tracking components. We create no profiles, do not use Apple’s advertising identifier, sell no data and share no data for advertising.

9. Recipients and transfers to third countries

We run no backend of our own for the app. Recipients are Apple for weather, maps and purchases and, if you write to us, our support mailbox (Cloudflare Email Routing and Google).

For users in the EEA, Apple names Apple Distribution International Limited in Ireland as the controller for personal data at Apple. Apple states that international transfers are covered by Standard Contractual Clauses. The exact Apple entity and terms may vary by country and service.

10. Hosting and delivery

The website homescreenstudio.app is a static site without a server of our own, without a database and without user accounts. It is delivered through Cloudflare Workers Static Assets by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, United States, which acts as our processor.

To deliver a page, Cloudflare necessarily processes the data your browser sends with the request and the data of the connection:

• your IP address
• the date and time of the request
• the page requested
• the referring page, where your browser sends it
• your browser and operating system identification (user agent)
• technical connection and TLS metadata

Cloudflare states that it processes such metadata in data centres in the United States and in Europe, so processing outside the EEA cannot be ruled out. Cloudflare’s terms incorporate a data processing addendum with the EU Standard Contractual Clauses as the transfer mechanism.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is making the website available reliably and securely.

11. Cloudflare security functions

Cloudflare protects the website against attacks and automated misuse. If it has to check a request for this, Cloudflare may show a security check and then set a cookie named cf_clearance – a first-party cookie for homescreenstudio.app, marked HttpOnly and Secure. Its lifetime is set by Cloudflare’s security configuration. Our website code does not read this cookie; we do not use it for reach measurement, analytics, profiling or advertising.

We have switched off Cloudflare’s error reports under the browser standard Network Error Logging (NEL) for this website. Your browser is therefore not asked to send reports about failed connections to Cloudflare.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is protecting the website.

12. Logs

We have not set up logging of individual requests for this website (Workers Logs and Workers Traces are switched off, no Logpush). Cloudflare processes the connection and security data described in sections 10 and 11 within its own infrastructure to deliver and protect the site and states that it does so for a limited period. Cloudflare does not publish a fixed period; we do not set it and have no access to it.

13. No cookies, nothing stored in your browser

Our own code sets no cookies and stores nothing in your browser’s local or session storage. The widgets you can try on the home page remember your input only while the page is open. The only exception for cookies is Cloudflare’s security cookie in the cases described in section 11.

14. No third-party content, no analytics

Fonts, images and scripts are loaded from our own domain only. There is no web analytics, no tracking pixel, no advertising network, no social media plugin, no external font service and no external CDN.

15. Links to the App Store

References to the App Store are ordinary links. While you are on our website nothing is sent to Apple – no pixel, no tracker, no preloading. Apple receives data only once you follow such a link; Apple’s privacy terms then apply.

16. Contact by email

The website has no contact form. Email links only open your own email program. Section 6 applies to messages to support@homescreenstudio.app.

17. Your rights

Where the legal requirements are met, you have in particular the following rights:

• access to the personal data we process (Article 15 GDPR)
• rectification of inaccurate data (Article 16 GDPR)
• erasure (Article 17 GDPR)
• restriction of processing (Article 18 GDPR)
• data portability (Article 20 GDPR)
• objection to processing based on legitimate interests (Article 21 GDPR)

Where we rely on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. To exercise your rights, a message to support@homescreenstudio.app is enough. There is no automated decision-making within the meaning of Article 22 GDPR.

You may also complain to a data protection supervisory authority, in particular in the EU member state of your habitual residence, your place of work or the alleged infringement. The authority responsible for us is:

18. Changes to this policy

We update this policy when the app, the website, their data flows or the legal requirements change. The version published here, with its date, applies.