ClayCray Privacy Policy
Last updated and effective: 15 September 2026
1. Scope and who is responsible
This Privacy Policy explains how the operator of ClayCray (“ClayCray,” “we,” “us,” or “our”) handles information when you use the ClayCray mobile application, visit claycray.app, or contact support. ClayCray is the data controller for the personal data described in this policy.
ClayCray has no user-account system or studio-data cloud service. You can contact the controller at hello@claycray.app.
2. Studio data stored on your device
The app stores your optional name or studio name, pieces, glaze records and recipes, combinations, notes, measurements, tags, timelines, photos, preferences, onboarding state, and terms-acceptance record locally on your device. Structured studio records use SQLite; photos are kept in ClayCray’s private app storage; small preferences use on-device key-value storage.
ClayCray does not operate a server that receives this studio database for accounts, sync, or hosting. Studio data leaves the app only when you direct a backup, import, share, gallery save, or similar device action, or if limited information is incidentally included in diagnostic data as described below.
3. Information handled by ClayCray and its providers
Subscription information: RevenueCat generates and stores a random anonymous App User ID because ClayCray does not provide it with your name, email address, or an account ID. RevenueCat and Apple App Store or Google Play process the product selected, purchase or receipt information, entitlement status, renewal and expiration information, storefront or currency information, and related transaction events. ClayCray does not receive your full payment-card or bank-account details.
Diagnostics and performance information: Sentry may receive crash reports, handled and unhandled errors, stack traces, app logs, navigation and performance traces, screen and interaction context, app version and environment, device model, operating-system information, network request metadata, timestamps, and IP address. The current app samples 10% of ordinary sessions for replay and sessions in which an error occurs. Sentry’s default mobile replay settings mask text, images, and vector graphics. Masking reduces, but cannot guarantee the elimination of, incidental information capture.
Support information: if you email us, we receive your email address and the message, attachments, and troubleshooting information you choose to provide. Do not send a backup file or sensitive studio content unless support specifically asks for it and you are comfortable doing so.
Website information: the marketing website does not include advertising pixels or a first-party analytics script in the current code. Hosting and network providers may nevertheless process ordinary request data such as IP address, date and time, requested page, referrer, browser or user-agent, and security logs to deliver and protect the site.
4. Camera, photos, files, and sharing
ClayCray asks for camera or photo-library permission only when you use a related feature. Selected or captured images are resized and copied into the app’s private storage. When you confirm a camera photo and grant the required permission, ClayCray also attempts to save the original to your system photo library so you keep a separate copy.
Backup import uses the system document picker. Backup export uses the system share sheet and creates a JSON file containing studio records and embedded photos. The destination you choose—for example Files, cloud storage, email, or another app—handles that copy under its own privacy terms. Temporary import and export files may remain in app-managed cache until the operating system or app clears them.
You can refuse or revoke camera and photo permissions in device settings, although the affected feature will not work. ClayCray does not request contacts, microphone, precise location, or advertising-tracking permission in the current version.
5. Why we process information and our legal bases
We process local app and subscription information as necessary to provide the app, the Free tier, paid features, purchase restoration, backups, and support you request, and to perform our contract with you. We process limited purchase analytics, diagnostics, security information, and website logs for our legitimate interests in operating, securing, debugging, and improving ClayCray, preventing fraud, and understanding subscription performance, provided those interests are not overridden by your rights.
We may process information to comply with legal obligations or establish, exercise, or defend legal claims. Where applicable law requires consent, we rely on your consent, including through device permission prompts, and you may withdraw it through device settings without affecting earlier lawful processing.
ClayCray does not use personal data for automated decision-making that produces legal or similarly significant effects. The app does automatically apply the number of saved pieces on your device and RevenueCat entitlement status to decide whether you can add pieces or save piece changes. Viewing, deletion, and backup import and export remain available on the Free tier.
6. Who receives information
We use RevenueCat to validate purchases, maintain subscription entitlements, prevent purchase fraud, and provide aggregate subscription analytics; Sentry to monitor crashes, errors, performance, logs, and masked session replays; Apple or Google to distribute the app, process payments, and manage subscriptions; and website hosting, network, and email providers to deliver the site and support email.
We may also disclose information when required by law, to protect rights or safety, or in connection with a merger, financing, acquisition, reorganization, or sale of all or part of the app, subject to appropriate protections and notice where required. A destination you select through the device share sheet receives the data you choose to send.
ClayCray does not sell personal information, rent personal information, serve third-party advertising, use advertising identifiers, or share personal information for cross-context behavioral advertising.
7. Third-party privacy information
RevenueCat’s privacy information is available at revenuecat.com/privacy. Sentry’s privacy information is available at sentry.io/privacy. Apple and Google separately control the account, payment, and store information they process under their own privacy policies.
These providers may change their services and privacy practices independently. ClayCray remains responsible for selecting and configuring processors used on our behalf, but is not responsible for data that Apple, Google, or a user-selected sharing destination processes for its own purposes.
8. International data transfers
RevenueCat, Sentry, app stores, and infrastructure providers may process information outside your country, including in the United States or European Economic Area. Where required, transfers rely on an adequacy decision, standard contractual clauses, or another lawful transfer safeguard. Contact us if you want more information about safeguards relevant to your data.
9. How long information is kept
Studio records and ClayCray-managed photos remain on your device until you delete individual records, use Settings → Backups → Erase studio, clear app storage, or uninstall the app. Erase studio removes the SQLite studio records and ClayCray-managed photos, but it does not remove exported backups, copies already saved to your system photo library, data held by a sharing destination, local preference records, store purchase history, or provider-side diagnostics and subscription records.
Local preferences, onboarding state, and the terms-acceptance record remain until changed by the app, app storage is cleared, or the app is uninstalled. Cache files remain until cleared by the app or operating system. RevenueCat subscription records, Sentry diagnostic data, website security logs, and support correspondence are kept only for the periods configured or reasonably necessary for the purposes above, legal compliance, dispute resolution, fraud prevention, and enforcement, after which they are deleted or anonymized where feasible.
10. Security and backup responsibility
We use reasonable technical and organizational safeguards and limit the studio data intentionally sent to providers. No storage or transmission method is completely secure. Device security, operating-system backups, and the security of any destination to which you export are outside ClayCray’s control.
Because the studio is local-first, device loss, app deletion, storage clearing, or hardware failure can permanently remove it. All users can export a portable JSON backup from Settings → Backups. Protect exported files because they can contain every studio record and photo in readable or encoded form.
11. Your choices and privacy rights
You can inspect studio data, export it in a portable JSON backup, delete individual records, and erase the entire studio at any time. Saving piece changes follows the Free tier allowance or your paid entitlement; glazes and combinations remain editable on Free. You can manage app permissions in device settings, subscription choices in your app-store account, and copies in Photos, Files, cloud storage, email, or other destinations directly with those services.
Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, and information about recipients or transfer safeguards. You may also complain to your local data-protection authority. We will not discriminate against you for exercising a privacy right. Email hello@claycray.app to make a request. Because there is no ClayCray account, we may need limited identifying details to locate provider-side data, and in some cases we may be unable to link diagnostic data to you.
12. California privacy notice
In the preceding 12 months, ClayCray may have processed identifiers and internet/network information such as an anonymous RevenueCat ID and IP address; commercial information such as subscription and purchase history; app activity and diagnostics such as interactions, logs, crash, performance, and replay data; and correspondence you send to support. Sources are you, your device and app, Apple or Google, RevenueCat, Sentry, and website infrastructure. These categories are used and disclosed for the business purposes described in Sections 5 and 6.
ClayCray has not sold personal information or shared it for cross-context behavioral advertising, does not have actual knowledge that it sells or shares the personal information of anyone under 16, and does not offer a financial incentive in exchange for personal information. Where California law applies, residents may request to know, access, correct, or delete covered personal information and may exercise rights without discriminatory treatment by emailing hello@claycray.app.
13. Children’s privacy
ClayCray is not directed to children under 13, and we do not knowingly collect personal data from a child under 13. If local law sets a higher age for valid consent to online services, a child below that age should use ClayCray only with a parent or guardian’s authorization. Contact us if you believe a child provided personal data without appropriate authorization.
14. Changes to this policy
We may update this policy when ClayCray’s features, providers, or legal obligations change. We will update the date above and provide additional in-app or website notice when a change is material or consent is required. A new purpose incompatible with the original purpose will not be applied without the notice or legal basis required by law.
15. Contact and complaints
For privacy questions or requests, email hello@claycray.app. If you are in the European Economic Area or United Kingdom, you may also lodge a complaint with the data-protection authority where you live or work or where you believe an infringement occurred. We would appreciate the opportunity to address your concern first.