Privacy Policy
Last updated: May 2026
This Privacy Policy explains how Wallcube ("we", "us", "our") collects, uses, and protects your information when you use our mobile applications and related services (the "Service"). By using the Service, you agree to the practices described below.
1. Who We Are
Wallcube operates this Service. For privacy-related inquiries, contact: info@wallcube.com
2. Information We Collect
2.1 Information you provide
Sign in with Apple: When you sign in with your Apple ID we receive a stable, opaque user identifier from Apple, plus the email address and full name you choose to share. You may use Apple's "Hide My Email" feature; in that case we receive a private relay address (@privaterelay.appleid.com) and emails we send are forwarded to your real address by Apple. We do not receive your real address.
Username: If you choose a public handle (@username) after sign-in, we store it.
2.2 Information collected automatically
Device data: When you sign in or relaunch the app, we receive a device identifier (Apple's identifierForVendor, which is unique to our app on your device and resets if you uninstall), your bundle identifier, app version, OS version, and device locale.
Push notification tokens: If you grant notification permission, your device shares an APNs push token with us so we can deliver notifications you have opted in to. The token rotates periodically; we update our copy on each app launch.
Server logs: Each API request is logged with the request path, response status, timestamp, and the IP address from which it was made. Logs are retained for 30 days for debugging and abuse-prevention.
2.3 Information we do NOT collect
We do not collect: precise location, microphone or camera access, contacts, calendar, photos beyond what you explicitly upload, advertising identifiers (IDFA), behavioral profiles, or any data we do not need for the Service. We do not embed third-party SDKs that track you across other apps.
3. How We Use Your Information
We use your data to: provide and operate the Service, authenticate you, deliver push notifications you have opted in to, prevent abuse and fraud, and debug technical issues. We do not sell your personal data and we do not share it with advertising networks.
4. Third-Party Services
Apple: Sign in with Apple, Apple Push Notification service (APNs), and the App Store. Apple's privacy policy applies to these services: apple.com/legal/privacy.
All-Inkl (KAS): Our hosting and transactional-email provider, operating servers in Germany. Server logs and email delivery are handled by them: all-inkl.com.
5. In-App Account Deletion
You can delete your account from inside the app at any time (App Store guideline 5.1.1(v)). On confirmation we: revoke all of your API tokens, clear your push tokens so no further notifications are sent, soft-delete your user record, and best-effort tell Apple to revoke our authorization grant for you. Your data is removed from active systems immediately. Backups age out within 30 days, after which deletion is irreversible.
6. Your Rights
GDPR (EU/EEA/UK residents): You have the right to access, correct, delete, restrict, port your data, and object to processing. The legal basis for processing is contract performance (providing the Service) and legitimate interest (security, debugging). You may lodge a complaint with your local data protection authority.
CCPA (California residents): You have the right to know what personal information we collect, to delete it, and to opt out of its sale. We do not sell personal information.
To exercise any right, email info@wallcube.com or use the in-app Delete Account control.
7. Children
The Service is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect data from such children. If you believe a child has provided us with data, contact info@wallcube.com and we will delete it.
8. Data Retention
Active account data is retained while your account exists. Server logs are retained for 30 days. Push tokens are retained until the device unsubscribes or you delete your account. Deleted account data is purged from backups within 30 days.
9. International Transfers
Our servers are located in the European Union (Germany). Apple's services may process your data in the United States and other regions under Apple's safeguards.
10. Security
All communication uses TLS 1.2 or higher. API authentication uses long-lived bearer tokens stored in your device's Keychain (iOS) or EncryptedSharedPreferences (Android). We do not store passwords because we do not use them.
11. Changes to This Policy
We may update this policy. The date at the top reflects the most recent revision. Material changes are surfaced in the app on next launch. Continued use after changes constitutes acceptance.
Contact
Email: info@wallcube.com
