Privacy Policy

The Short Version

Paintledger is an offline-first workshop ledger for miniature painters. Your projects, units, stage photos, paint recipes, and inventory live on your device and only on your device. There is no account, no cloud sync, and no server that stores your painting data. The only thing that leaves your device is a stream of anonymous usage events, described in detail below.

Data Stored On Your Device

All of the content you create in Paintledger is written to your device's local storage using Apple's SwiftData framework and the app's Documents directory:

- Projects, units, stages, and status - Paint recipes and custom paints you add - Paint inventory and quantities - Stage photos you capture or import - Backup files you export

None of this is uploaded. None of it is scanned. None of it is analyzed on our side, because there is no "our side" for this data. If you delete the app, this data is gone.

Anonymous Usage Analytics

Paintledger uses Mixpanel to collect anonymous product analytics so we can see which features get used and where the app falls short. This is the only outbound data stream in the app.

What Mixpanel receives:

- **Behavioral events**: actions like app opened, project created, unit created, stage logged, unit finished, recipe card shared, PDF exported, backup exported or imported, paywall shown or dismissed, purchase started or completed, restore attempted, and rating prompt shown. - **Device and app metadata**: app version, build number, operating system version, device model family (for example "iPhone" or "iPad"), and an environment label (simulator, debug build, TestFlight, or App Store). - **A random anonymous identifier**: a UUID generated the first time the app launches and stored locally in UserDefaults. It is not linked to your name, email, Apple ID, phone number, advertising identifier, or any other personal detail.

What Mixpanel does **not** receive:

- No names, emails, phone numbers, or other personal information. - No IDFA (advertising identifier). - No paint names, hex values, or recipes. - No project names, unit names, or notes. - No photos or photo metadata. - No location data.

Analytics data is associated only with the random anonymous identifier. Mixpanel is configured for product analytics and app functionality, not advertising, and we do not share this data with any third party for advertising purposes. You can read Mixpanel's privacy practices at mixpanel.com/legal/privacy-policy.

In-App Purchases

Paintledger offers a single optional one-time purchase (Paintledger Pro) that unlocks unlimited units per project, unlimited custom paints, and PDF export. Purchase transactions are handled entirely by Apple through the App Store using StoreKit. Apple receives standard transaction metadata. We do not have access to your payment information, and there is no third-party payment processor in the app.

Photos

Photos you take or attach are saved to the app's local storage on your device. They are not uploaded, shared, or analyzed by the app or any third party. When you choose to share a recipe card, PDF, or backup file, iOS's standard share sheet hands the file to whichever app you select. That moment is under your control.

Data Retention and Deletion

Your painting data lives on your device for as long as the app is installed. Backups are user-initiated exports to files you control. To delete everything, delete the app. Because there is no server-side copy of your painting data, uninstalling is the deletion.

Analytics events that have already been sent to Mixpanel are retained according to Mixpanel's policies. To stop sending analytics events, delete the app before its first launch event fires, or use the Debug settings toggle available in TestFlight and debug builds.

Children

Paintledger is designed for the tabletop miniature hobby and is rated for ages 9 and up. It does not knowingly collect any data from children under 13, and nothing in the app is directed at that audience.

Your Rights

Paintledger is developed by 9592 Solutions UG (haftungsbeschrankt), based in Germany. Under the GDPR you have the right to access and erase any personal data a controller holds about you. Because no personal painting data is transmitted or stored on our servers, exercising the right to erase is as simple as deleting the app. For the anonymous analytics stream, contact us at support@9592.tech and we can request deletion of the events associated with your anonymous identifier on a best-effort basis.

Contact

If you have questions about this privacy policy, email support@9592.tech.