Signet · Privacy Policy

Last updated: October 11, 2026

1. What we do NOT collect

• Your photos, text, seal inscriptions, colophons — never uploaded
• Names, emails, phone numbers, or any personal identifiers
• Your location — weather and place are requested from Apple on your device only after you allow it, and are never uploaded to our servers (see section 3)
• Advertising identifiers; this app contains no ads and does not perform cross-app tracking or ad profiling

2. What we collect (anonymous usage stats, opt-out available)

To understand whether the product works well, the app sends a minimal set of anonymous events through two independent channels, both on by default and each can be turned off separately in Settings:

• Our own analytics service (no third parties involved): event names (e.g. "launch", "completed a stamp", "exported"), app version and iOS version, and a randomly generated anonymous device ID (unrelated to your identity; salted-hashed server-side, irreversible) — never including any content.
• PostHog (PostHog, Inc., added September 2026): data is relayed through our domain e.daylumen.com and stored on PostHog's servers in the United States. It sends: ① a randomly generated install identifier (not linked to your Apple account, name, or email; kept in the device Keychain and usually survives reinstalling); ② product-interaction events — the event name, a success-or-failure outcome, the category of any failure (for example "seal completed," "export failed") and permission results, never content details; ③ crash reports — technical information sent on the next launch after a crash, such as the call stack, exception type, device model, OS version, and app version, used to diagnose the problem; ④ device and environment info (app version, OS version, device model, system language, time zone, screen size, network type); and ⑤ an approximate region — PostHog estimates your country and city from your IP address, and the IP address itself is not stored. None of this includes your photos, text, seal inscriptions, or any other content. We don't record your screen. Only when rapid repeated taps are detected do we log, once, the approximate on-screen position of that tap, to find buttons that don't respond; we never record what was tapped. It is never used for ad targeting, sold, or combined with data from other apps. You can turn this off anytime in the app's Settings; once disabled, none of the data above is sent.

You can disable each of these two anonymous usage statistics channels independently at any time in the app's Settings. Once disabled, no data is sent through that channel.

3. How photo and location permissions are used

• Selecting photos: uses the system photo picker; the app only receives the photo you actively choose.
• Evening candidates (optional "Daily Moment" feature): evening candidates are picked on your phone, never uploaded, and no copy is saved.
• Reading capture date: so the seal preserves "the moment it was taken," the app reads the photo's capture date; the photo itself never leaves your device.
• Saving to library: only when you explicitly tap "Save," the finished sealed image is written to your photo library.
• Location and weather (optional): only if you turn on the switch that attaches place and weather to a stamp and grant location permission does the app read your location at that moment and request the local weather and city name from Apple (WeatherKit and geocoding), to be saved with that moment. The location is used only for that request and is never uploaded to our servers.

4. Data storage and deletion

All data is stored in the on-device local database. Deleting the app deletes all data (manage iCloud device backups separately if enabled). Deleting a moment or grinding away a seal within the app takes effect immediately and is irreversible.

5. Children

This app is not designed for children under 13 and does not knowingly collect any information from children. There are no accounts, no social features, and no public display of user-generated content.

6. Changes to this policy

If this policy changes materially, we will update the "Last updated" date at the top of this page. Changes that expand the scope of data collection will be clearly communicated within the app.

7. Contact us

For any privacy-related questions, write to us: signet@gatheon.com