Privacy Policy — Irida

Effective date: 3 November 2026 App: Irida (live wallpapers) Developer / data controller: Kirill (independent developer), contact: [email protected]

1. Who we are

Irida is a mobile app that provides live and photo wallpapers, including curated images and video loops that we produce ourselves, some with the help of AI tools. The app does not let users generate images with AI. This policy explains what data we handle and why. We designed Irida to be privacy-light: we do not ask for your name, email, phone number, or create an account.

2. What we collect

a) Device identifier. On first launch we generate a random token (a UUID) that identifies your installation so we can track your sparks balance and unlocked content. It is not linked to your real identity. On our server we store only a one-way hash of this token, not the token itself.

b) Your own photos. The "Bring your own photo to life" feature lets you pick a photo with Android's system photo picker and apply a filter. The photo and the filtered result stay on your device: they are processed locally and are never uploaded to us or to any third party. The app does not accept text prompts or send user content to any AI service.

Earlier versions. Earlier versions of the app offered text-to-image and photo-restyle features. If you used them, prompts and generation records linked to your device identifier may still be stored on our server; they are removed when you delete your data (§10) or automatically after 24 months of inactivity (§8). Those features have been removed.

c) On-device preferences. Your chosen interests, language, favorites, and unlocked wallpapers are stored only on your device and are not sent to us.

d) Purchases. If you buy sparks, a starter pack or a subscription, the purchase is processed by Google Play Billing. We use RevenueCat, a purchase-management service, to confirm your purchase and restore it on a new phone: RevenueCat receives an anonymous app-user identifier, the product you bought and its purchase status. We receive a purchase token to grant your entitlement — we never receive or store your card details.

e) Install attribution (Android). So we can tell which advertising campaign an install came from, the app uses Tenjin, a mobile measurement partner. Tenjin receives your device's Google Advertising ID (a resettable identifier you control in Android Settings → Privacy → Ads), together with basic install and app-version information, and the fact that a purchase of a given product occurred. It does not receive your photos, the wallpapers you choose, or any payment details. You can reset this identifier, or switch it off entirely, in your Android settings at any time; the app keeps working either way.

f) Reports about content (earlier versions). Reports you may have sent about generated images in earlier versions (image identifier, reason, time, device identifier) are kept only to review and improve moderation, and are deleted when you delete your data.

g) Crash diagnostics. When the app crashes or hits an error, it sends us an error message and stack trace, the app version, Android version, and your device identifier. We use it only to fix bugs and delete it automatically after 30 days.

h) Push notifications (optional). If you allow notifications, the app sends your Expo push token to our server so we can deliver notifications such as new wallpaper packs. Delivery is handled by Expo and, on Android, Google's Firebase Cloud Messaging. You can turn notifications off at any time in Android settings.

i) Technical logs. Like any online service, our servers and Cloudflare process your IP address and request metadata to deliver the service and protect it from abuse. We do not use IP addresses to identify you.

We do NOT collect: your name, email, phone, contacts, precise location, or biometric data. We do not use advertising SDKs and we show no ads. The third-party SDKs in the app are the purchase service named in (d) and the attribution partner named in (e); there are no other analytics or advertising SDKs.

3. AI-assisted content

The catalog's curated wallpapers and video loops are produced by us; some are created with generative AI tools (for example fal.ai) by us, not by users. No user data is used for this, and we do not use your data to train AI models. Users cannot request AI-generated images in the app.

4. How we use data

To provide the wallpapers, deliver content packs, manage your sparks balance and purchases, prevent abuse/fraud, and comply with law. Where GDPR applies, our legal bases are performance of our service (to you) and legitimate interests (security and abuse prevention).

5. Who we share it with (processors)

We do not sell your data. We do not share your photos with anyone; they never leave your device. The advertising identifier described in §2(e) is shared only with our attribution partner, and only to measure where installs come from.

6. International transfers

Our backend is hosted in the United Kingdom (DigitalOcean, London). Some processors (for example Cloudflare, Expo, RevenueCat and Tenjin) may process data in other countries, including the United States. Where required, transfers rely on appropriate safeguards (such as the processors' standard contractual clauses).

7. Permissions we request

7a. Content safety

All content in the catalog is selected and published by us. If you see a wallpaper that is offensive or harmful, email [email protected] and we will review and remove it.

8. Data retention

Your device record (and any records from earlier versions) are kept until you delete them (see §10) or your installation is inactive for 24 months, after which they are removed automatically. Crash diagnostics are kept for 30 days.

9. Children

Irida is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect data from children. If you believe a child provided us data, contact us and we will delete it.

10. Your rights & how to delete your data

You can delete all data tied to your device at any time, in the app: Settings → Legal → Delete my data. This immediately removes your device record, balances, premium status, any generation history and reports from earlier versions, push token and crash diagnostics from our server, and clears local data on your device. Data already held by third parties (for example, the advertising identifier at Tenjin or purchase records at RevenueCat and Google Play) is governed by their policies; contact us and we will forward deletion requests where we can.

You can also email [email protected] with the subject "Delete my data". We action email requests within 30 days. See also our Data deletion page.

Depending on your region (EEA/UK — GDPR, California — CCPA/CPRA), you may have additional rights (access, correction, portability, objection, and the right not to have personal information sold — which we do not do). Contact us to exercise them.

11. Security

Traffic between the app and our server is encrypted in transit (HTTPS/TLS). Your device token is stored in your device's secure keystore, and only a one-way hash of it is stored on our server. No method is 100% secure, but we use reasonable technical measures to protect your data.

12. Changes

We may update this policy; material changes will be reflected by a new effective date at this URL.

13. Contact

Kirill (independent developer) — [email protected]