TEMPLATEThis page is a structure with placeholders, not legal advice. Fill every “To supply” block, keep it matched to the App Store privacy label and the shipped build, and have counsel review it before you publish.
Privacy Policy
Effective [effective date] · Last updated [date]
- The short version
- Your photos
- What we collect
- Email waitlist
- Who we share with
- Your rights
- Children
- Contact
The short version
- Trashy sorts your photos on your iPhone. It never uploads your photos to us.
- There's no account to make.
- Your progress (decisions, stickers, level and coins) syncs through your own iCloud, which we can't read.
- Apple handles payments. [RevenueCat] helps us check what you've bought.
- We count how the app is used with anonymous totals only, through [analytics tool]. No ads, no tracking across other apps, and we never sell or share your personal information.
- If you join the launch waitlist, we email you at most twice (pre-orders, launch), with no tracking pixels, then delete the list.
Every bullet above must match the shipped build and the App Store privacy label (“Data Not Linked to You” / “Data Not Collected”). If any part of the build changes (a crash reporter, an account, a server), update this page and the label together.
Who we are
Trashy is made by [legal entity name], [street address, city, state, ZIP, country] (“we”, “us”). You can reach us about privacy at support@trashyapp.co.uk.
Your photos
Trashy asks iOS for access to your photo library so it can show you your photos one at a time. Sorting happens on your iPhone. When you decide to delete photos, Trashy asks iOS to delete them, iOS asks you to confirm, and the photos move to your Recently Deleted album.
- Confirm that no photo, thumbnail or photo metadata ever leaves the device, including in analytics events and crash reports.
- Describe any on-device analysis (for example, finding screenshots or similar photos) and confirm it runs on the device only.
- Say what happens with Limited Photos access, and that people can change access in iOS Settings.
What we collect, and why
Stored on your iPhone and in your own iCloud
Your decisions, stickers, level, coins, the items Trashy owns and wears, and your settings are stored on your iPhone. If iCloud is on, they sync through your own iCloud account (Apple's CloudKit and iCloud key-value storage), so a new iPhone picks up where you left off. This data is stored in your iCloud, not on our servers, and we can't read it.
Purchases
Apple processes every payment. We don't see your card details. To check which plan or items you've bought, the app shares purchase records with [RevenueCat, Inc.], linked to a random app ID that isn't your name or Apple Account.
The exact purchase data RevenueCat receives, its retention, and a link to its privacy policy and data processing terms.
Anonymous usage counts
We count things like how many decisions are made and which screens are opened, as anonymous totals, to make Trashy better. These counts aren't linked to you or your device.
The analytics tool's name and link, the list of events, how long counts are kept, and confirmation that no device identifier, IP address or advertising ID is stored. (Project rule: privacy-first and counts only; never Firebase.)
Reminders
Trial reminders and the optional daily nudges are local notifications, scheduled on your iPhone. You choose whether to allow them, and you can turn them off in Settings at any time.
When you contact us
If you email us, we get your email address and whatever you write, and we use it only to reply.
The support email provider, and how long support emails are kept.
This website
This website uses no cookies, no analytics and no ads. The waitlist form sends your email address to [VENDOR] only when you submit it; the page loads no script of theirs.
The hosting provider and what its server logs record (usually IP address and time), with retention. Self-host the fonts before launch so the site makes no requests to Google.
Email waitlist
What we collect. The email address you give us in the “Email me at launch” form, and when you submitted and confirmed it. We keep a dated record of the sign-up wording, so the date you signed up shows exactly what you agreed to. We don't ask for your name, and we don't link this address to anything in the Trashy app; the app has no accounts and never sees it.
Why. To email you up to two times: once if App Store pre-orders open before launch, and once when Trashy launches. We use your address for nothing else.
How sign-up works. After you submit the form, we send one message with a confirmation link. You're added to the list only after you use it. If you don't, we delete the address after 7 days.
Who handles it. [VENDOR] ([city, country]) stores the list and sends the emails for us. It may use your address only to provide that service to us, under a written contract. Its privacy policy is at [URL]. The list is stored in [region].
Legal basis (visitors in the EU, EEA and UK). Your consent (Article 6(1)(a) of the GDPR and the UK GDPR). You give it when you submit the form and confirm by email. You can withdraw it at any time, as easily as you gave it, and that doesn't affect anything we did before.
How long we keep it. We delete the whole list [30] days after we send the launch email. If we haven't launched [18] months after you sign up, we delete your address then and send nothing.
Unsubscribe or delete. Every email has a one-click unsubscribe link, and you can reply “stop”. You can also ask us to delete your address at any time at support@trashyapp.co.uk. We act within [3] business days and remove it from [VENDOR] too.
No selling or sharing. We don't sell, rent or share this list, and we don't use it for advertising.
No tracking pixels. Our emails have no tracking pixels and no open or click tracking, so we can't tell whether you opened an email or which links you tapped. The confirm and unsubscribe links are unique to your address so they work only for you; they tell us nothing else.
Who can sign up. This list is for people 13 or older. In the EU and EEA, you need to be old enough to consent where you live, which is between 13 and 16 depending on the country. If we learn someone younger has signed up, we delete the address and send nothing. Parents can write to support@trashyapp.co.uk.
California. For this list we collect one category of personal information, an identifier (your email address), for the purpose above, and we don't sell or share it.
- The vendor's name, location, privacy-policy URL, storage region and any transfer safeguard; a signed DPA.
- Before relying on “No tracking pixels”: send both emails to a test inbox and read the raw source. No 1×1 images, no open or click tracking URLs, no redirect domain. Re-test after any vendor setting change.
- Counsel: the age floor is 13, a US-first stance (founder's call, 16 Oct 2026); confirm the EU and EEA sentence and the COPPA position. Also whether to keep a minimal consent log after the list is deleted, and whether a launch email needs an EU representative.
Who we share with
We share data only with the service providers above, only to run Trashy: Apple (payments, iCloud, notifications), [RevenueCat] (purchase checks), [analytics tool] (anonymous counts) and, if you join the waitlist, [VENDOR] (the launch emails). We don't sell your personal information, we don't share it for targeted advertising, and we don't track you across other companies' apps or websites.
Any legal disclosures (for example, when the law requires it), and what happens to data if the business is sold.
How long we keep data, and deleting it
Data on your iPhone is removed when you delete Trashy. To remove Trashy's data from your iCloud, open Settings › your name › iCloud › Manage Account Storage (or Manage Storage) › Trashy.
Retention for purchase records and analytics counts, and how someone asks us to delete what we hold.
Your rights
Depending on where you live, you may have the right to know what personal information we hold about you, to get a copy, to correct it, to delete it, and to opt out of its sale or sharing (we don't sell or share it). To use any of these rights, email support@trashyapp.co.uk. We won't treat you differently for using them.
- US state privacy laws that apply (California CCPA/CPRA and others), including the categories-of-information disclosures California requires, and how we verify requests.
- If Trashy is offered in the EU, UK or Switzerland: the legal bases for processing, international transfers, an EU/UK representative if required, and the right to complain to a regulator.
Children
The age rating and the COPPA position. Trashy isn't meant for children under 13 and doesn't knowingly collect their personal information; counsel should confirm this, given the cartoon mascot, and say what happens if we learn a child's data was collected.
Security
How data is protected in transit and at rest with the service providers above.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change is significant, we'll also tell you in the app before it takes effect.
Contact
[Legal entity name], [address]. Email support@trashyapp.co.uk.