Privacy Policy
The short version. Your photos never leave your device. The app has no analytics, no advertising code and no tracking. You can buy and use BrushLens without an account. The only personal information the app can send us is an email address, and only if you choose to sign in with a subscription you bought on brushlens.app.
Who we are
BrushLens is made by SU Studio (Soren Ulsig), a sole proprietorship registered in Denmark, CVR 46441311, Aarhus. We are the data controller for the information described here. Contact: hello@brushlens.app.
What stays on your device
- Reference photos, swatch photos and camera pictures. Every tool (values, notan, temperature, chroma, mixing recipes, Swatch Scanner, Proportion Check) runs on your iPhone or iPad. Pictures are not uploaded, and we cannot see them.
- Your studies. Saved studies, sampled colors, base mixes and crops are stored in the app's own storage on your device. Deleting the app deletes them.
- Camera. The camera is used only when you photograph paint swatches or use Proportion Check. The picture is processed on the device and is not recorded or sent anywhere.
- Photos. The app adds an image to your photo library only when you tap Save to Photos. It never reads your library: choosing a photo goes through Apple's own picker, which hands the app only the picture you picked.
Your palettes and iCloud
Your paint palettes are kept on your device and, if you use iCloud, synced between your own devices through your iCloud account. That storage is run by Apple and belongs to you. We have no access to it.
Purchases
Subscriptions and the Lifetime purchase are handled by Apple through the App Store. We never receive your name, card or billing details. The app reads your purchase status from Apple on your device to unlock the tools. Apple sends us sales reports that do not identify you. Apple's handling of your payment is covered by Apple's own privacy policy.
Optional: signing in with a brushlens.app subscription
If you already subscribe on the brushlens.app website, you can sign in so the app honors that subscription. This is optional and is the only time the app sends us personal information. When you do:
- The email address you type is sent to our sign-in service. We use it to email you a six-digit code and to look up whether that address has an active brushlens.app subscription. We use it for nothing else.
- The code is stored in scrambled (hashed) form for ten minutes and then deleted.
- To stop abuse of the sign-in form, the service counts requests per email address and per IP address. These counters are deleted after one hour.
- A sign-in token is stored in the Keychain on your device. Sign out in Settings and it is removed and made invalid.
- If you choose "Bring over my web palettes", the palettes saved on your brushlens.app account are downloaded to the app. Nothing is sent back to the website.
The legal basis is performing our contract with you (giving you the access you paid for) and our legitimate interest in keeping the sign-in service secure. Your brushlens.app account itself is covered by the privacy policy on that website.
Who processes data for us
Only for the optional sign-in described above: Vercel (hosting of the sign-in service), Upstash (database for codes, counters and subscription status) and Resend (delivery of the code email). Some of these providers are based in the United States. Transfers are covered by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
What the app does not do
- No analytics, no crash reporting service, no advertising or social media code.
- No tracking across apps or websites, and no advertising identifier.
- No selling or sharing of personal information.
Your rights
Under the GDPR you can ask for access to, correction of, or deletion of your personal information, object to our use of it, and ask for a copy of it. Write to hello@brushlens.app. To delete a brushlens.app account and everything tied to it, write from the address the account is on. You can also complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.
Children
BrushLens is not directed at children under 13, and we do not knowingly collect personal information from them.
Changes
If the app starts handling information differently, this page changes first and the date at the top changes with it.