One Big Widget — Privacy Policy

Hello Good Day LLC (Florida, United States) is the data controller for the limited processing described below.

1. The short version

• No accounts, no advertising, and no tracking. We do not build a profile of you, do not use the advertising identifier (IDFA), and do not follow you across other companies' apps or websites. The app therefore never asks for App Tracking Transparency permission.
• Your photos, widget designs, calendar and reminder data stay on your device, inside the app's private storage on your device.
• The app is local-first, but it is not offline-only. A few features reach the internet — always because you asked them to, or to send us anonymous usage counts:
  1. The Web Widget loads the web page whose address you typed.
  2. At a Glance can ask Apple for the weather, and for travel time to your next event.
  3. Purchases go through Apple's App Store.
  4. Feedback you type and send reaches our own support inbox.
  5. Anonymous analytics — a count of app opens, purchases, and daily subscription status, keyed to a random ID that is not you — reach our own analytics service so we can see how many people use the app and whether purchases work.
• No cookies, no advertising IDs, no cross-company tracking, and no data sold or shared with anyone else.

That is the entire picture. The sections below explain each piece exactly.

2. What stays on your device

Photos are selected through Apple's PhotosPicker, a sandboxed system component: the app never receives general access to your photo library, only the specific items you choose. Live Photos are converted to still frames on device.

The container is shared only between this app and its own extensions. No other app can read it. We cannot read it.

Permissions are individually opt-in. At a Glance ships with every data source switched off except battery and the night state. The app does not request calendar, reminders, contacts, or location access until you turn that specific source on.

3. The things that leave your device

3.1 The Web Widget

When you enter a web address, the app loads that page inside the app so it can capture a picture of the region you chose. Your device therefore makes an ordinary web request to that site, exactly as a browser would, and that site will see what any site sees — your IP address and your device's user-agent string.

Two deliberate choices:

• Pages load in a non-persistent browser session. No cookies, logins, or history are shared with Safari or retained afterwards. Content behind a login therefore generally will not appear.
• The widget extension never loads web pages and makes no network requests whatsoever. It only displays the image the app already saved.

We never see the addresses you choose. They are stored on your device so the widget can refresh.

3.2 Weather and travel time (Apple services)

If you enable the weather or next-event modules in At a Glance:

• WeatherKit receives an approximate location to return a forecast. The app requests reduced accuracy, not your precise position.
• MapKit estimates travel time to a calendar event's location.

Both are Apple services, governed by Apple's Privacy Policy. We receive nothing from either.

3.3 Purchases

In-app purchases are handled entirely by Apple via StoreKit. We never see your payment details. We receive only the anonymous, aggregated sales reports Apple provides to every developer.

3.4 Feedback you send

If you open the in-app Send Feedback form and tap Send, the message you typed — plus your app version, build number, device model, OS version and locale (so we can reproduce a bug) and an optional email address you enter so we can reply — is sent to our own support inbox. This is entirely optional and only happens when you submit it. Nothing is sent from anyone who never uses the form, and no widget content (photos, web addresses, captures) is ever attached.

3.5 Anonymous usage analytics

The app includes a small first-party analytics component (PulseKit, operated by us) that reports three things to our own analytics service:

• App opens — once per day per install, so we can count roughly how many people use the app.
• Purchases — when you buy, the Apple-signed transaction (which product, when) so we can see revenue in real time. Payment details are never included; Apple handles those.
• A daily subscription-status snapshot — if the app offers a subscription, once a day PulseKit also reports whether a subscription is currently active and which plan, keyed to the same random install identifier and never linked to your identity, so we can count active subscribers in aggregate. If the app has no subscription, nothing is sent here.

Both are keyed to a random identifier generated on your device the first time the app runs. It is not the advertising identifier (IDFA), not the device's vendor identifier, is tied to no account, and is deleted if you remove the app. There is no behavioural event stream — just "this install opened today," "this install made a purchase," and "this install's subscription is active." This data is used only for our own aggregate analytics, is never linked to your identity, is never used to track you across other apps or websites, and is never sold or shared with anyone else.

4. What we do not do

• No account or sign-up. (You may optionally enter an email in the feedback form so we can reply; that is the only place we ever ask for one.)
• No advertising, no advertising identifier (IDFA), and no cross-company tracking of any kind.
• No crash-reporting or ad SDKs. The only non-Apple component is our own first-party analytics (PulseKit, §3.5), which collects the anonymous app-open, purchase, and daily subscription-status counts described above and nothing else.
• No selling or sharing of personal information with third parties, under any definition, including the CCPA's.
• No profiling and no automated decision-making.

Because the app performs no tracking as Apple defines it, it does not request App Tracking Transparency permission.

5. Deleting your data

Deleting a widget removes its saved record and the files that belonged to it — its web snapshot, its photos, and any album or animation frames.

Deleting the app removes everything else the app stored on your device. Since none of it ever reached us, there is nothing for us to delete on our end and no request you need to send.

6. Children

The app is not directed at children. Because the Web Widget can display any website you point it at, the App Store age rating reflects unrestricted web access.

7. Your rights

Privacy laws such as the GDPR and CCPA grant rights to access, correct, delete, and port personal data. Those rights are directed at whoever holds the data. We hold none of it — it is on your device, under your control, and you may inspect or delete it at any time without asking us.

If you have a question regardless, we will answer it.

8. Changes

If this policy changes in a way that affects how data is handled, we will update this page and the date above. Material changes will also appear in the app's release notes.

9. Contact

Hello Good Day LLC — hellogoodday.com/contact