Privacy Policy
This policy explains how WallsPy ("we", "us", "our") collects, uses and discloses information when you use the WallsPy mobile app. Your privacy matters to us; the goal of this page is to be honest about exactly what data we touch and why.
- 1. Information we collect
- 2. How we use information
- 3. WallsPy AI Studio & third-party AI services
- 4. Authentication & sessions
- 5. Subscriptions, credits & billing data
- 6. Advertising & analytics
- 7. How we share information
- 8. Data retention
- 9. Your rights & choices
- 10. International transfers
- 11. Children's privacy
- 12. Security
- 13. Changes to this policy
- 14. Contact
1. Information we collect
Information you give us
- Account identity. When you sign in with Google we receive your email, name and a profile picture URL. We store your email and name to identify your account. Your profile picture is shown live from Google and is not stored on our servers.
- Activity. Which wallpapers you view, download, favourite, or apply ("set"), the categories you browse, and a per- month usage tally (AI generations, parallax generations, premium downloads) so we can show your history and enforce subscription quotas.
- AI prompts. Text prompts you submit through WallsPy AI Studio (see §3) and the style and quality options you chose.
Information collected automatically
- Device metadata. App version, device model, platform string (Android version), and a per-install identifier. Used for diagnostics and to help prevent abuse; never linked to advertising IDs.
- Network metadata. Your IP address is visible to our servers while requests are in flight and may appear briefly in request logs. We don't retain IP addresses as part of your account record.
- Authentication state. Sign-in tokens and a refresh token are stored to keep you logged in across sessions (see §4).
2. How we use information
- To provide, maintain, and improve the Service.
- To personalise the home screen (e.g. "recommended for you" based on your favourites and downloads).
- To process subscriptions and credit-pack purchases through Google Play Billing.
- To detect and prevent abuse and keep the Service reliable.
- To respond to support requests.
- To send essential service announcements (e.g. account, billing or security notices).
3. WallsPy AI Studio & third-party AI services
WallsPy AI Studio lets you generate wallpapers from a text prompt and, optionally, turn them into a 3D effect. To do this we use trusted third-party AI providers, which process the data we send them under their own privacy policies.
What is sent to the AI providers
- The text prompt you submitted (please don't put personal information into prompts).
- The image, so it can be generated, described (title and category), and, if you choose, turned into a 3D effect.
What is not sent
- Your email, name, account ID or any other identifier.
- Your activity history.
We retain the generated image, the inferred metadata (title, category, tags, dominant colours), and a content safety rating ("safe", "questionable", "explicit") so we can filter the gallery and comply with platform policy. We also retain a copy of your prompt as part of the generation record for abuse detection and for the per-user usage history surface.
4. Authentication & sessions
When you sign in, the app keeps you securely logged in across sessions. Signing out from the in-app menu ends all of your active sessions. Your sign-in does not store personal information beyond what is needed to keep you signed in.
5. Subscriptions, credits & billing data
Subscriptions and credit-pack purchases are processed through Google Play Billing. Google handles all payment-card and payment-method details; we never see your card number or billing address.
What we store for each purchase you make:
- A purchase reference from Google Play, used to validate and manage your subscription.
- Your current plan and its status (for example active, cancelled, or expired).
- A record of credits granted and used, to show your credit balance.
See our Subscription Terms for the full billing and cancellation flow.
6. Advertising & analytics
Analytics
We use Google Analytics for Firebase for usage analytics and Firebase Crashlytics for crash reporting. These tools collect aggregate, anonymised diagnostic information (e.g. session counts, feature use, crash stack traces) to help us prioritise fixes and improve the Service.
Advertising
Free-tier users may see advertisements served via Google AdMob and Facebook (Meta) Audience Network. These networks may use device advertising identifiers (e.g. Android Advertising ID) to serve interest-based ads. You can limit this from your Android settings, see §9 for instructions. Paid-plan users are ad-free.
7. How we share information
We do not sell your personal information. We share data only in these narrow cases:
- Service providers we use to run the app: cloud hosting and storage, AI providers (§3), sign-in (Google), billing (Google Play), analytics and crash reporting (§6), and advertising (§6).
- Legal compliance: if we receive a lawful demand from a competent authority, or to protect the rights, property or safety of WallsPy, our users or the public.
- Business transfer: if WallsPy is acquired or merges with another entity, your information would transfer as part of that deal; you'd be notified before any change of control.
8. Data retention
- Account record: retained for as long as your account is active.
- Activity (downloads, favourites, usage counters): retained while your account is active; deleted with your account.
- AI generation history (prompt + image): retained indefinitely so you can re-view past generations; deleted with your account.
- Subscription & credit ledger: retained indefinitely for audit and tax purposes even after account deletion, in a form not linked to your other personal data.
- Request logs: typically 30 days, then deleted.
9. Your rights & choices
Access, correction, deletion
You can permanently delete your account and all linked data through the delete-account page. The flow is email-verified and removes your account along with your favourites, downloads, generations and credit balance (subject to the audit retention noted in §8).
EU / EEA & UK residents (GDPR)
If you are in the EU, EEA, or UK you have the following rights:
- Right of access to your personal data.
- Right of rectification of inaccurate data.
- Right of erasure ("right to be forgotten").
- Right to restrict or object to processing.
- Right to data portability.
- Right to lodge a complaint with your national data-protection authority.
To exercise any of these, use our contact page. Our legal basis is contract performance for the core Service, legitimate interest for security and abuse prevention, and consent where required (e.g. interest-based advertising).
California residents (CCPA / CPRA)
You have the right to know what categories of personal information we collect, to request a copy, to request deletion, and to opt out of any "sale" or "sharing", though as noted in §7, we don't sell personal information.
Personalised ads
You can opt out of personalised advertising from your device: Android Settings → Privacy → Ads → Reset advertising ID / Opt out of Ads Personalisation. Ads will still be shown to free-tier users but will not be personalised based on your advertising ID.
10. International transfers
We are based in Germany, but our infrastructure and our third-party processors operate globally. Your information may be transferred to and processed in countries outside your home country where data-protection law may differ. We rely on Standard Contractual Clauses with our processors and apply reasonable safeguards to ensure your data is protected at the same level it would be in the EU.
11. Children's privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such data, contact us and we will delete it.
12. Security
We use industry-standard measures to protect your data: encrypted connections for traffic in transit and encrypted storage at rest. No system is perfectly secure, however. We commit to notifying affected users in the event of a confirmed breach involving their personal data, in line with applicable law.
13. Changes to this policy
We may update this policy as the Service evolves. We will post the revised text here and update the "Last updated" date at the top. For material changes, we will additionally surface a notice in-app on next launch.
14. Contact
Questions, requests, or complaints? Use our contact page.
This policy explains how WallsPy ("we", "us", "our") collects, uses and discloses information when you use WallsPy on iPhone and iPad. It is written to say plainly what data the App touches and why.
- 1. Information we collect
- 2. What stays on your device
- 3. How we use information
- 4. WallsPy Premium & App Store purchases
- 5. Advertising, consent & tracking
- 6. Notifications
- 7. How we share information
- 8. Data retention
- 9. Your rights & choices
- 10. International transfers
- 11. Children's privacy
- 12. Security
- 13. Changes to this policy
- 14. Contact
1. Information we collect
Without an account
You can browse, save and favourite wallpapers without signing in. The App connects to our servers with an anonymous guest session that holds no name, email or device identifier.
With an account (optional)
- Account identity. When you sign in with Apple or Google we receive your name and email address and store them, with an account ID, to identify your account. With Sign in with Apple you can choose Hide My Email; we then only receive Apple's private relay address. If you use the same email on Android, the two sign-ins are linked to one WallsPy account.
- Library. Which wallpapers and live wallpapers you favourite or save, so your Library follows your account to your other devices.
Information collected automatically
- Device information. Device model, iOS version and App version, stored with your sign-in session. Used to show your signed-in devices, diagnose problems and understand which devices use the App. Never linked to advertising identifiers by us.
- Searches. What you search for is sent to our servers to return results. It is not stored in your account.
- Network metadata. Your IP address is visible to our servers while requests are in flight and may appear briefly in request logs. We don't keep it in your account record.
What we don't collect
- Your photos. Saving a wallpaper asks for permission to add to your Photos. WallsPy can only add images and Live Photos; it can't see, read or upload your photo library.
- Your precise location, contacts or phone number.
- Analytics or crash-reporting SDKs: the iPhone and iPad App does not include Google Analytics for Firebase or Crashlytics.
2. What stays on your device
Your Library (and, when signed out, your favourites and saves), favourite categories, recent searches, your appearance and notification settings, and caches of images and wallpaper lists are stored on your iPhone or iPad. Deleting the App deletes them. Favourite categories and recent searches never leave your device.
3. How we use information
- To provide the App: show wallpapers, save them to Photos, and sync your Library with your account.
- To unlock WallsPy Premium for your WallsPy account (signing in is required to subscribe or restore) and the Apple Account that bought it.
- To send new-wallpaper notifications if you turn them on.
- To show ads to free users (§5).
- To detect and prevent abuse and keep the service reliable.
- To respond to support requests.
4. WallsPy Premium & App Store purchases
WallsPy Premium is sold through Apple's App Store. Apple handles payment; we never see your card number, billing address or Apple Account password. To unlock Premium we receive from Apple, and keep with your account, the purchase details for your subscription: the plan, transaction IDs, purchase and expiry dates, and renewal or refund status. Apple tells our servers when a subscription renews, lapses or is refunded. See our Subscription Terms for billing and cancellation.
5. Advertising, consent & tracking
Free users see ads served by Google AdMob: in the wallpaper grids, before some saves, and when you choose to watch an ad to unlock a Premium wallpaper. WallsPy Premium has no ads. Ads are limited to content suitable for teens.
To show and measure ads, AdMob may collect your IP address (to estimate your general location), device identifiers, which ads you see and tap, and technical data such as crash and performance information. Google's use of this data is described in the Google partner-sites policy.
- Consent (EEA, UK and Switzerland). Where the law requires it, Google's consent form asks for your choices before any ad is requested. You can change them at any time in the App: Settings → Privacy Choices.
- Tracking (App Tracking Transparency). WallsPy asks for Apple's permission to track. Only if you allow it may AdMob use your device's advertising identifier (IDFA) to personalise ads and measure them across other companies' apps and websites. Without it, ads still appear but aren't personalised with the IDFA. Change it any time in iOS Settings → Privacy & Security → Tracking.
6. Notifications
If you allow notifications, we tell you when new wallpapers or live wallpapers arrive. They are delivered by Apple Push Notification service through Firebase Cloud Messaging (Google): your device gets a push token and joins a "new wallpapers" topic. No account information is attached. Turn them off in the App (Settings → Notifications) or in iOS Settings.
7. How we share information
We do not sell your personal information. We share data only in these narrow cases:
- Service providers we use to run the App: cloud hosting and storage, Apple (Sign in with Apple, the App Store, push notifications), and Google (Google Sign-In, Firebase Cloud Messaging, AdMob).
- Legal compliance: if we receive a lawful demand from a competent authority, or to protect the rights, property or safety of WallsPy, our users or the public.
- Business transfer: if WallsPy is acquired or merges with another entity, your information would transfer as part of that deal; you'd be notified before any change of control.
8. Data retention
- Account record and Library: kept while your account is active; deleted with your account.
- Sessions and their device information: kept while the session is active; ended when you sign out.
- Purchase records: kept for audit and tax purposes even after account deletion, in a form not linked to your other personal data.
- Request logs: typically 30 days, then deleted.
- On your device: until you delete the App.
9. Your rights & choices
Access, correction, deletion
You can delete your account and its data in the App: Settings → your account → Delete Account, or through the delete-account page. Deleting your account doesn't cancel an App Store subscription; cancel it in iOS Settings → your name → Subscriptions.
EU / EEA & UK residents (GDPR)
You have the rights of access, rectification, erasure, restriction, objection and data portability, and the right to lodge a complaint with your national data-protection authority. To exercise them, use our contact page. Our legal basis is contract performance for the core service, legitimate interest for security and abuse prevention, and consent where required (for example, personalised advertising and tracking).
California and other US states
You have the right to know what categories of personal information we collect, to request a copy, to request deletion, and to opt out of the "sale" or "sharing" of personal information for advertising. Where it applies, the opt-out is in the App under Settings → Privacy Choices, and you can always deny tracking in iOS Settings.
10. International transfers
We are based in Germany, but our infrastructure and our third-party processors operate globally. Your information may be transferred to and processed in countries outside your home country where data-protection law may differ. We rely on Standard Contractual Clauses with our processors and apply reasonable safeguards to ensure your data is protected at the same level it would be in the EU.
11. Children's privacy
The App is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such data, contact us and we will delete it.
12. Security
We use industry-standard measures to protect your data: encrypted connections for traffic in transit and encrypted storage at rest. On your device, sign-in tokens are kept in the iOS Keychain. No system is perfectly secure, however. We commit to notifying affected users in the event of a confirmed breach involving their personal data, in line with applicable law.
13. Changes to this policy
We may update this policy as the App evolves. We will post the revised text here and update the "Last updated" date at the top. For material changes, we will additionally surface a notice in the App.
14. Contact
Questions, requests, or complaints? Use our contact page, or Settings → Report a Problem in the App.