Privacy Policy

1. Information handled by the app

• Account information: your email address, account identifier, authentication information and the display name you choose. Supabase provides account authentication and related storage.
• Profile photo: the image you select for your profile is resized or compressed and uploaded to our Supabase storage. Selecting a photo does not require uploading your entire photo library.
• Saved items and settings: wallpaper identifiers, language, download preferences and related settings. Guest information can be stored on your device; signed-in information can be associated with your account for synchronization.
• Requests and correspondence: your email address, device description, request details and status when you submit custom art, bug reports, feature requests or support messages.
• Download and reward records: the requested wallpaper or theme, platform, account identifier, reward attempt and verification status, transaction identifier, timestamps and access grants. These records help deliver authorized downloads and prevent repeated or fraudulent reward claims.
• Technical information: our hosting and advertising providers can process IP addresses, request times, device and operating-system information, app version and error information to deliver and secure their services.

Please avoid including sensitive personal information in artwork descriptions or support messages unless it is necessary for your request.

2. Why this information is used

Information is used to authenticate accounts, display profiles, remember preferences, synchronize saved items, respond to requests, deliver previews and authorized files, verify earned rewards, troubleshoot errors and prevent abuse.

Widgets can display the device's current time and date. A month-calendar design does not by itself require access to your personal calendar events. Icon shortcuts use the app you choose as their destination.

3. Service providers and disclosures

• Supabase: account authentication, database records, profile-photo storage and server functions. Supabase privacy information.
• Cloudflare: wallpaper and theme artwork delivery through R2, and hosting of this policy page when deployed on Cloudflare Pages. Cloudflare privacy information.
• Google AdMob: advertising and reward verification when ads are enabled. Google Privacy Policy and how Google uses information from partner apps.
• Email services: messages you send to our support address are forwarded through Cloudflare Email Routing to our email inbox. Cloudflare and the receiving email provider process these messages so we can receive and answer them.

Relevant information is also accessible to the ThmeFit operator when handling support, managing requests or securing the service. Information may be disclosed where required by applicable law or necessary to address fraud, abuse or a security incident.

Providers may process information in countries other than your own. Their linked notices explain their processing practices. ThmeFit remains responsible for its own handling of information described in this policy.

4. Advertising and rewarded downloads

When AdMob advertising is enabled, Google can process advertising identifiers, IP addresses, device information and ad interactions for ad delivery, measurement and fraud prevention. Personalized advertising depends on applicable requirements and your privacy choices.

Rewarded ads are initiated when you choose to watch an ad for the stated reward. Watching an ad and choosing personalized advertising are separate decisions. Closing an ad before earning its reward does not unlock that reward.

For protected downloads, ThmeFit uses a server-verified reward record. The verification process passes an account identifier and a reward-attempt identifier; the app does not need to send your profile photo or artwork-request text for this verification.

Where an advertising privacy message is displayed, it explains the available choices and providers. Use the app's advertising privacy controls when available to revisit those choices. You can also review Google's ad settings and your device's advertising controls.

5. Local storage, cookies and this page

The app uses local storage for functions such as preferences, saved items, authentication sessions and notification-read state. Removing app data can remove locally stored information but does not automatically delete information stored in your account.

This policy page contains no advertising scripts, analytics scripts or forms. Its hosting provider can still process normal network requests and security logs. External links open services with their own privacy practices.

Advertising SDKs in the app can use device identifiers or similar technologies. This is separate from this static policy page.

6. Retention and security

Retention depends on the type of information and the purpose for which it is used, including account operation, request handling, reward verification, security and any applicable legal obligations. An expiring download link or access grant does not automatically delete its associated database records.

Contact us to ask about retention or request removal of information associated with your account. Relevant backup, security or legally required records may need separate handling.

The app uses HTTPS connections and access controls for protected services. No storage or transmission method can guarantee absolute security.

7. Your choices and deletion requests

You can use the available app controls to edit your profile, remove your profile photo, manage saved wallpapers and change preferences.

To request access, correction or deletion of your account or other personal information, email support@thmefit.com. For an account-deletion request, use the subject ThmeFit account deletion and identify the account email and the information you want removed. We may need to verify account ownership. Do not send your password.

Uninstalling the app does not itself delete cloud account information. Depending on where you live, you may have additional rights, including objection, restriction, portability or the right to complain to your local data-protection authority.

8. Children's information

If you are a parent or guardian and believe a child has provided personal information through ThmeFit, contact us using the address below so we can investigate and handle the request. Applicable age and consent requirements must be respected when using account or advertising features.

9. Updates and contact

This policy may be updated as ThmeFit's features and providers change. The date at the top identifies the latest revision. Significant changes may also be explained in the app.

For privacy questions or requests, contact ThmeFit at support@thmefit.com.