Privacy Policy
Last updated: October 2026
This Privacy Policy explains how Matthias Hausberger ("we", "us", "Provider") collects, uses, shares, and protects information when you use the Walldrop iOS app (the "App").
If you do not agree with this Privacy Policy, please do not use the App.
1Summary
- The App lets you upload and store images, share them in invitation-only spaces, and apply AI edits using predefined styles.
- We process your information to operate the App, provide AI features, improve reliability, and keep the App safe.
- We use third-party service providers, including WorkOS (accounts and authentication), Cloudflare (hosting/storage), OpenAI and Google (Gemini) (AI processing), PostHog (analytics), RevenueCat (subscription management), Apple (sign-in and App Store purchases), and Expo (app delivery and updates). Section 5 lists what each one receives.
- If you delete your account, we delete your account data and images within 90 days, subject to limited exceptions (e.g., legal obligations and security).
2Information we collect
2.1 Information you provide
Account information
- Email address and/or other identifiers you provide to create and access your account.
- Optional profile information (if available in the App).
User content
- Images you upload.
- Images you create or modify using the App's features (including AI-edited outputs).
- Space membership and invitations (e.g., which spaces you create, join, and who you invite).
Subscription and purchase information
- If you purchase a subscription, we receive your subscription status, product identifier, purchase and renewal dates, and the store used (e.g., Apple App Store).
- We do not receive or store your payment card details. Payments are processed by Apple under Apple's own terms and privacy policy.
Support communications
- Messages you send to us (e.g., support requests), including attachments.
2.2 Information collected automatically
Device and app usage data
- Basic device and app information (e.g., device model, iOS version, app version, language, region).
- Approximate location derived from IP address (coarse, e.g., country/region), which may be processed by infrastructure providers.
Analytics data (PostHog)
- App interaction events (e.g., screens viewed, feature usage, crashes/errors if enabled).
- A pseudonymous Walldrop account identifier used to measure usage and improve the App. We do not intentionally send your email address or name to PostHog for product analytics.
- Analytics preference information, including whether you have enabled or disabled product analytics on this device.
Log and security data
- Server logs and security events necessary to operate and protect the App (e.g., timestamps, request metadata, IP address).
We do not intentionally collect precise location data, contacts, SMS/phone number, or sensitive identifiers (like government IDs).
3How we use your information
We use information for the following purposes:
- 1.Provide and operate the App (account creation, authentication, storage, sharing spaces).
- 2.Provide AI editing features and generate outputs based on your selected style.
- 3.Maintain security and prevent abuse (detecting fraud, enforcing rules, protecting infrastructure).
- 4.Improve the App (analytics, performance monitoring, debugging, feature planning).
- 5.Communicate with you (support replies, important notices, policy updates).
- 6.Comply with legal obligations (responding to lawful requests, enforcing our rights).
4Legal bases for processing (EEA/UK)
If you are in the European Economic Area (EEA), UK, or similar jurisdictions, we process personal data under these legal bases:
- Contract: to provide the App and its features to you.
- Legitimate interests: to secure, maintain, and improve the App (e.g., preventing abuse, analytics, reliability).
- Consent: where required for certain analytics or tracking configurations or other optional processing. Product analytics is enabled by default when you accept our Terms of Service during registration, and you can withdraw that choice at any time in the App’s Preferences.
- Legal obligation: to comply with laws and lawful requests.
5How we share information
5.1 Service providers (processors)
We use vendors that process data on our behalf, including:
- WorkOS (authentication and account management) — receives your email address, sign-in identifiers, and authentication metadata to create and secure your account.
- Cloudflare (hosting, content delivery, storage, security) — used to store and deliver App content (including images), and processes request metadata such as IP address.
- OpenAI and Google (Gemini) (AI processing) — receive the image you submit for an AI edit and the predefined style selected, in order to generate and return the output. Which of the two is used depends on the feature and style.
- PostHog (product analytics and error monitoring) — receives app interaction events, a pseudonymous Walldrop account identifier, and device/app metadata. We do not intentionally send account email addresses or names to PostHog for product analytics. PostHog data for the App is hosted in the European Union.
- RevenueCat (subscription management) — receives your account identifier and subscription/purchase status to determine your entitlements.
- Expo (app delivery and over-the-air updates) — receives device and app runtime information when the App checks for and downloads updates.
These providers are permitted to process personal data only to perform services for us and must protect it.
Apple
Apple provides Sign in with Apple and processes any App Store purchases. For these activities Apple acts as an independent controller under its own privacy policy, not as our processor. We receive only the account identifier and purchase status described in Section 2.1.
5.2 Sharing with other users
If you join a space or share content in a space, other invited users can view and (depending on features) download or share that content.
Other members of a space you create or join can also see your name, the email address associated with your account, and your profile photo if you have set one. This includes people who join through an invite link or code.
5.3 Legal and safety
We may share information if we believe it is reasonably necessary to:
- comply with law, regulation, legal process, or government request;
- enforce these policies and our Terms;
- protect the rights, property, and safety of users, the public, or the Provider.
5.4 Business transfers
If the App is transferred (e.g., sale of assets), data may be transferred as part of that transaction. We will provide notice where required.
6International data transfers
We are based in Germany, and our service providers may process data in other countries.
If you are in the EEA/UK and your data is transferred outside these areas, we use appropriate safeguards where required (for example, Standard Contractual Clauses and/or other lawful transfer mechanisms).
7Data retention
We keep personal data only as long as needed for the purposes described in this Privacy Policy.
- Account deletion: When you delete your account, we delete your account data and images within 90 days, except where we need to retain certain information for legal, security, fraud-prevention, backups, or dispute resolution.
- Logs: Operational/security logs may be retained for a limited period to maintain and protect the service.
8Security
We use reasonable technical and organizational measures to help protect your information. However, no method of transmission or storage is 100% secure.
9Your rights and choices
Depending on where you live, you may have rights such as:
- Access: request a copy of your personal data.
- Correction: request corrections to inaccurate or incomplete data.
- Deletion: request deletion of your data (including account deletion).
- Objection / restriction: object to or restrict certain processing.
- Portability: receive certain data in a portable format.
- Withdraw consent: where we rely on consent.
To exercise rights, contact us at privacy@walldropapp.com.
9.1 Analytics opt-out
Product analytics is enabled by default when you accept the Terms of Service during registration. You can withdraw this choice at any time by opening Settings → About and turning off “Help us improve the product.” This preference is stored on the device and remains in effect after logout and for later accounts using the device. Turning analytics off does not affect your account or access to the App.
10Children's privacy
The App is intended for users aged 13+. We do not knowingly collect personal data from children under 13.
If you believe a child under 13 has provided personal data, contact us and we will take steps to delete the information.
11Third-party links
The App may link to our website (e.g., policy pages). We are not responsible for third-party websites or services not operated by us.
12Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (e.g., in the App or on our website). The updated policy will be effective as of the posted effective date.