Privacy policy

1. Who we are

WidgetHeaven is made by Quassum MB, Vilnius, Lithuania ("we", "us"). We are the data controller for the personal data described here. You can reach us at [email protected].

This policy covers the WidgetHeaven iPhone app (iOS 18 and later) and the widgetheaven.app website.

2. Data that stays on your iPhone

Several widget kinds show information from your device: Calendar, Reminders, Health, Photos and Battery. The app reads that data on the device, using the permissions you grant in iOS, and draws it directly into the widget.

None of it is sent to us or to anyone else. We have no servers that receive calendar events, reminders, health samples, photos or battery levels. Revoking a permission in iOS Settings stops the corresponding widget immediately.

3. Data we fetch for you

Some widget kinds need data from the internet. Your phone asks our servers; our servers ask the provider, cache the answer for a short time and return it. Providers see requests from our servers, not from your device, and never receive your identity. What each request contains:

• Places: Weather, Sun and Air Quality (Open-Meteo), Tides & Surf (Open-Meteo Marine), Aurora (NOAA) and nearby Earthquakes (USGS) send the coordinates of the place a widget is set to, or your approximate location if you chose "follow my location". We round coordinates for caching and do not keep a history of where you have been.
• What a widget lists: Crypto (CoinGecko) and Stocks (Twelve Data) send the coins or tickers; Currency (European Central Bank rates via Frankfurter) the currencies; Service Status the public status pages of the services you pick; Holidays (Nager.Date) the country; GitHub Repo (GitHub) the repository name; Sports (TheSportsDB) the team name; Flight (AeroDataBox) the flight number and date; Rocket Launches (The Space Devs), Formula 1 (Jolpica) and Wikipedia (Wikimedia) send no personal input beyond the options you pick.
• News from the RSS feeds you pick, including any custom feed URL you add.
• Quotes and Word of the Day from curated sets we host ourselves.

Cached responses are shared between users who ask for the same thing and are not linked to an account.

4. Your account

Anonymous by default

On first launch the app creates an anonymous account: a random identifier and a session token stored in your iPhone's keychain. It carries no name, email or device identifier. It exists so your widget settings can be saved and so Pro can be tied to something.

Optional sign-in

If you sign in with Apple or Google we receive the email address and name those providers share (with Sign in with Apple you can hide your email). Signing in upgrades your anonymous account in place so your widgets and Pro follow you to a new phone. We use your email only to identify your account, to send the occasional service message (for example a welcome note or help recovering your widgets), and never for third-party marketing. Every such email has an unsubscribe link.

Widget settings

What you configure in a widget is saved to your account so it can be restored: the kind, variant, size, style choices, and the parameters you type in, such as a countdown title and date, a city name, coin tickers, feed URLs or a reminders list name. Pick settings you are comfortable storing; the device data those settings point at (the reminders themselves, the photos) is never uploaded.

5. Subscriptions

Pro is sold through Apple's App Store. Apple handles payment; we never see your card details. We use RevenueCat to validate purchases and keep track of whether a subscription is active. RevenueCat receives your anonymous account identifier and the App Store receipt, and sends us subscription status events (started, renewed, cancelled, expired) so the app can unlock Pro.

6. Product analytics and logs

We record a small number of product events, such as "app opened", "widget created" (with the kind), "widget placed", "paywall shown" and "purchase", tied to your anonymous account identifier. We use Mixpanel for this so we can see which widgets people use and where they get stuck. We do not use advertising identifiers, ad networks, fingerprinting or cross-app tracking.

Our servers keep standard technical logs (request path, status, timing, errors) for a short period to keep the service running. Crash reports reach us only through Apple if you have enabled sharing with developers in iOS.

The website sets no analytics or advertising cookies. The admin area used by our team sets a session cookie after signing in.

7. Who processes data for us

We use a small number of service providers, each bound by a data processing agreement: Railway (hosting, United States), Apple and Google (optional sign-in), RevenueCat (subscriptions), Mixpanel (product analytics) and Resend (service email). Where data leaves the European Economic Area we rely on the EU Standard Contractual Clauses or an adequacy decision. We do not sell personal data and we do not share it with advertisers or data brokers.

8. Legal basis and your rights

For people in the EEA, the United Kingdom and Switzerland: we process account and widget data to provide the service you asked for (contract); product analytics and service logs under our legitimate interest in running and improving the app; optional sign-in and service email on the same basis, and anything else only with your consent. You can ask us to access, correct, export, restrict or delete your data, object to processing, or lodge a complaint with your supervisory authority (in Lithuania, the State Data Protection Inspectorate). Email [email protected].

9. Deleting your data

Open the app, go to Account and choose Delete account. Your account, widget settings and analytics identifier are removed after a short grace period in case you change your mind. Deleting the app from your iPhone removes everything stored locally, including the anonymous session. If you cannot use the app, email us from the address you signed in with and we will delete it for you. Apple handles subscription cancellation and refunds in your Apple ID settings.

10. Retention

Account and widget data is kept while your account exists. Cached cloud data expires within hours. Technical logs are kept for up to 30 days and analytics events for up to 12 months. Subscription records are kept as long as required for accounting.

11. Children

WidgetHeaven is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

12. Changes

When we change this policy we update the date at the top and, for material changes, tell you in the app. The current version always lives at widgetheaven.app/legal/privacy. See also our terms of service.