TIN&ED APP PRIVACY POLICY

Plasmotopia – Privacy Policy
⁠Last updated: 23 May 2026
⁠
⁠This policy explains what information Tin&Ed Pty Ltd ("Tin&Ed", "we", "us") collects when you use our mobile app Plasmotopia ("the App"), why we collect it, and the choices you have. It is written to align with our Apple App Store privacy disclosures.
⁠If you have any questions, contact us through the email address on the Contact page.
⁠—

Who we are
⁠Tin&Ed Pty Ltd
⁠Melbourne, Australia
⁠Tin&Ed is the data controller for personal information collected through the App.
⁠—

What we collect and why
⁠The App does not require an account or sign-in to use. We try to keep data collection minimal. The App collects only the following:
⁠
Device identifier (analytics installation ID)
⁠A persistent, randomly-generated ID created by Unity Gaming Services when the App first runs. This ID lets us count unique installs and attribute usage and purchase events to a single device over time. It is not your Apple ID, name, email, or phone number.
⁠Used for: analytics, app functionality.
⁠
Purchase history
⁠When you buy or restore an in-app purchase, the App records which product was purchased and the outcome of the transaction. Payment itself is handled entirely by Apple – Tin&Ed never sees your payment card, billing address, or Apple ID.
⁠Used for: delivering the content you purchased, restoring purchases on re-install, and measuring which packs are popular.
⁠
Product interaction
⁠Aggregated events about how the App is used – for example: app launches, screens viewed, packs opened, drawings started, errors encountered. We do not record the contents of your drawings or any text you enter.
⁠Used for: understanding which features are used and improving the App.
We do NOT collect directly identifying information such as your name, email address, phone number, contacts, photos, microphone audio, the contents of your drawings, your precise location, health or financial information, or any cross-app browsing or advertising data.
⁠—

Camera, AR and face data
⁠Some packs use your device's camera for augmented reality (AR):

⁠- Environment AR (rear camera): lets you view and place 3D objects in your real-world surroundings. This uses the rear camera as a live background; it does not use face tracking or any face data.

⁠- Face AR (front camera): in packs such as "World Masks", lets you place playful 3D objects over your face using Apple's ARKit face-tracking technology. On supported devices this uses the TrueDepth camera.

For the Face AR feature, ARKit produces real-time face data on your device – a face mesh (geometry), facial-expression (blendshape) values, and the position and orientation of your head – used solely to align and display 3D objects over your face on screen, in real time. We do not use Face ID and do not perform facial recognition or identification.

For both AR experiences, all camera and face data is processed entirely on your device. It is never uploaded to our servers, stored by us, or shared with any third party. Face data exists only momentarily in device memory while the face-AR feature is active and is discarded immediately afterwards; we do not retain it. If you save a screenshot or screen recording, only the final image or video is written to your Photos library – no camera frames, face-mesh, or depth data are saved.

iOS asks for camera permission the first time the camera is used. You can revoke it at any time in Settings → Privacy & Security → Camera.
⁠—

⁠Your drawings and creations stay on your device
Anything you draw or create inside the App is stored only in the App's local storage on your device. Tin&Ed has no servers that hold your creations, no cloud-save feature, and does not access or view what you create.

The only times your drawing leaves the App are when you choose to.
Save it to your Camera Roll – handled by iOS; the image goes to your Photos library on your device.
⁠If you delete the App, your drawings are deleted with it. We cannot recover them.
⁠⁠—

Children's privacy
The App is rated 4+ on the App Store and is intended for general audiences. It is not directed specifically to children under 13 (or 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at the address above and we will delete it.
⁠—
⁠

Your choices and consent
⁠The App's analytics collection is opt-in or opt-out depending on where you are:

EEA, United Kingdom, and Switzerland: on first launch, the App asks whether you want to share anonymous usage data. Until you choose, no analytics events are sent. You can change your choice at any time from Info → App Settings → Privacy & Data.

Everywhere else: analytics start with implied consent under this policy. You can opt out at any time from the same in-app settings screen.

Your consent choice is stored locally on your device. It is not transmitted to our servers and not associated with any account.

To request deletion of analytics data already collected, tap Delete my data in the same settings screen. Unity Gaming Services will purge the records associated with your installation within 30 days. We do not retain a separate copy.

The App does not collect or transmit anything else covered by this policy until you have made a consent choice (in EEA/UK) or opened the App (elsewhere). In particular, your drawings, camera feed, and AR scenes never leave your device regardless of your analytics choice.
⁠⁠—

Third-party processors
⁠We use the following service providers to process the data above on our behalf:
⁠
Unity Technologies – Unity Gaming Services Analytics | Aggregated usage analytics | Device installation ID, product interaction events, purchase events, basic device info (OS version, model, country derived from IP) | https://unity.com/legal/privacy-policy

⁠Unity Technologies – Unity In-App Purchasing | In-app purchase plumbing on iOS | Apple product IDs purchased, transaction outcome | https://unity.com/legal/privacy-policy |

⁠Apple Inc. – App Store / StoreKit | Processing your payment and delivering the App | Handled by Apple under their own policy | https://www.apple.com/legal/privacy/ | We do NOT use third-party advertising networks, attribution SDKs, data brokers, or behavioural-advertising partners.
⁠—

Tracking and the App Tracking Transparency (ATT) prompt
⁠The App does NOT track you across other companies' apps and websites. We do not use the iOS advertising identifier (IDFA), and we do not share data with advertising networks. Because of this, the App does not display the ATT permission prompt.
⁠—

Where data is processed and stored
⁠Analytics and purchase event data processed by Unity Gaming Services may be stored on servers in the United States, the European Union, and other regions where Unity operates. Unity acts as our data processor under written terms that include the appropriate safeguards (Standard Contractual Clauses where applicable).
⁠—

How long we keep data
⁠We retain analytics events for as long as necessary to evaluate product performance, in line with Unity Gaming Services' default retention period (typically up to 13 months for raw events, longer for aggregated reports). Purchase records are retained for as long as your entitlement to the purchased content needs to be honoured, plus any period required by tax or accounting law.
⁠—

Your rights
The App provides an in-app shortcut for the most common request, deletion: open Info → App Settings → Privacy & Data → Delete my data. This sends a deletion request to Unity Gaming Services, which will purge our analytics records associated with your installation within 30 days. For other rights (access, correction, restriction), contact us via the email address on the Contact page.

Depending on where you live, you may have the right to:

• request a copy of the personal data we hold about you,
• ask us to correct or delete it,
• object to or restrict our processing of it,
• withdraw any consent you have given,
• complain to your local data protection authority.

To exercise any of these rights, contact us through the email address on the Contact page.

EU/UK residents: our lawful bases are consent (analytics and product improvement – collected only after you tap "Share anonymous usage data" on first launch; you may withdraw consent at any time in Info → App Settings) and contract performance (delivering in-app purchases).

California residents: we do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA.
⁠—

Security
⁠We use industry-standard measures to protect data in transit (TLS) and rely on Unity's security controls for storage. No system is completely secure; if we ever became aware of a breach affecting your data, we would notify affected users and the relevant regulator where required.
⁠—

Changes to this policy
⁠If we make material changes to this policy, we will update the "Last updated" date above and, where appropriate, notify you in the App. Your continued use of the App after the change takes effect constitutes acceptance of the revised policy.
⁠⁠—