Privacy Policy

Introduction

This privacy policy applies to the website at remnantworkshop.com and all mobile applications published by Remnant Workshop. Individual apps may use different features described in this policy (such as analytics or advertising).

Remnant Workshop, Inc. is a Delaware corporation with a principal place of business in the United States. Remnant Workshop is the data controller responsible for the data described in this policy.

Data Stored on Your Device

Some of our apps store data locally on your device to provide their core functionality. This data never leaves your device and is not accessible to us. Examples include:

• Workout logs and exercise preferences
• Vinyl record collections
• Drawings and sketches
• Edited images
• Voice recordings
• App settings and preferences

You can delete this data at any time by clearing the app's data in your device settings or by uninstalling the app.

Website Information

When you visit our website, standard web server logs may collect usage data such as your IP address, browser type, and pages visited. We use this information to improve our website and respond to inquiries.

Analytics

Some of our apps collect pseudonymous usage analytics to help us understand how people use the app and improve the experience. This data is not linked to your identity and is not used to identify you.

Analytics data may include:

• Anonymous device identifier — a random ID generated on your device, used only to count unique users. This is not your Apple ID, advertising ID, or any other system identifier.
• App usage events — which features you use (e.g., session duration, content selections, settings adjustments). These events contain no personal information.
• In-app search queries — text typed into in-app search boxes (e.g., gear-browser searches). Used to understand what users look for and improve search results.
• User-named titles — names you give to content you save in the app (for example, saved configurations, lists, sessions, or projects). We collect these to understand naming patterns and surface popular content. Note content (free-form notes you write inside the app) is not collected — only whether notes exist.
• Device context — device type, operating system version, app version, color scheme, and language setting.
• App lifecycle events — when the app is opened, backgrounded, installed, or updated.

We use PostHog to process analytics data. PostHog acts as a data processor on our behalf and does not sell or share your data with third parties. Privacy policy: posthog.com/privacy.

We do not call PostHog's identify function — analytics data is pseudonymous and is not used to identify you.

Crash and Error Reporting

Apps that use analytics also report uncaught exceptions and unhandled errors so we can identify and fix stability issues. Crash and error data is processed by the same PostHog pipeline as analytics data, under the same consent rules described in the Analytics section above.

When a crash or error occurs, the following may be collected:

• Stack traces and error messages
• Device type and operating system version
• App version and build
• The anonymous device identifier described under Analytics

Crash reports do not contain names, email addresses, or user identifiers. We do not call PostHog's identify function for crash events, so they are pseudonymous.

In GDPR regions, crash reporting is gated by the same consent prompt as analytics — no crash data is sent unless you opt in.

Advertising

Some of our apps display ads served by Google AdMob. To deliver ads, Google may collect:

• Advertising data — ad interaction data (impressions, taps) used to serve and measure ads.
• Coarse location — approximate location derived from your IP address, used by Google to serve regionally relevant ads. We do not request precise location access.
• Device identifier — on iOS, if you grant tracking permission via the App Tracking Transparency prompt, Google may use your advertising identifier to deliver personalized ads. If you decline, ads are still shown but are not personalized.

When an ad-supported app launches, you may be shown a consent form (powered by Google's User Messaging Platform) asking about your ad personalization preferences.

Google's privacy policy: policies.google.com/privacy.

Children's Privacy

Barnyard Babble is designed for young children. In this app:

• Ads are served in child-directed mode with no personalized advertising or behavioral targeting.
• No analytics data is collected.
• Voice recordings (if used) are stored only on the device and are never transmitted.
• We do not knowingly collect personal information from children under 13.

Our other apps are general-audience applications not directed at children.

What We Do Not Collect

Across all of our apps, we do not collect:

• Names, email addresses, or contact information
• Account credentials or login information
• Precise location data
• Health or clinical data
• Photos, files, or note content (these stay on your device — although in apps with analytics, the titles you give to saved content are collected as described in the Analytics section above)
• Data from other apps on your device
• Microphone, camera, or contacts data

Data Sharing

We do not sell, rent, or share your personal data for monetary or cross-context behavioral advertising purposes. We do not track users across apps or websites owned by other companies unless you explicitly allow advertising tracking. We share data only with the following third-party services, and only as described in this policy:

• PostHog — pseudonymous usage analytics, crash and error reporting
• Google AdMob — advertising

These services act as data processors on our behalf. We have data processing agreements in place with our service providers where required. Analytics, advertising, and crash reporting data may be processed on servers located in the United States or other countries where our service providers operate.

Data Retention

Analytics, crash, and error data is retained for up to one year, after which it is automatically deleted. Data stored locally on your device persists until you clear it or uninstall the app.

Data Deletion Requests

You can ask us to delete the analytics, crash, and error data we have associated with your device at any time.

• By email: contact privacy@remnantworkshop.com with the subject line Data deletion request. We will confirm receipt and complete the deletion within 30 days.
• From the app: every app of ours that uses analytics carries a Send analytics toggle in Settings → Privacy. Turning it off stops new data collection immediately and persists across app launches. Note that opting out does not delete previously-collected data — use the email path above to request deletion of past data.
• By uninstalling: uninstalling the app deletes all data stored locally on your device. Data already sent to our analytics processor is not automatically deleted by uninstall — use the email path above for that.

Because all of our analytics data is pseudonymous (tied to a random device-generated identifier, never to your name or email), to fulfill a deletion request we need either the device identifier or enough context (app name, approximate dates of use) to locate the data. Your email request to privacy@remnantworkshop.com can include either.

GDPR (EU/EEA/UK Users)

If you are located in the European Union, European Economic Area, or the United Kingdom, the following additional information applies to you.

Legal bases for processing:

• Analytics — Consent. You must opt in before any analytics data is collected.
• Crash and error reporting — Consent. Gated by the same opt-in prompt as analytics; no crash data is sent unless you opt in.
• Personalized advertising — Consent, collected via Google's User Messaging Platform (UMP) consent form.

Data residency: Analytics data for GDPR-region users is processed via PostHog's EU instance located in Frankfurt, Germany.

Data subject rights: Under the GDPR, you have the right to:

• Access your personal data and request a copy of the data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Data portability — receive your data in a structured, commonly used format.
• Object to processing based on legitimate interest.
• Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@remnantworkshop.com.

Supervisory authority: You have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully.

Your Rights

Regardless of your location, you can:

• Opt out of personalized ads by declining the App Tracking Transparency prompt on iOS, or adjusting ad preferences in your device settings.
• Delete local data by clearing app data in your device settings or uninstalling the app.
• Request deletion of analytics data by contacting us at privacy@remnantworkshop.com.
• Request access to your data — ask us what data, if any, we hold about you.
• Request data portability — receive any data we hold in a structured format.
• Withdraw consent for analytics or personalized advertising at any time.

For GDPR-specific rights (rectification, erasure, right to object, complaint to a supervisory authority), see the GDPR section above.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale or sharing of personal information

We do not sell personal information. To exercise any of these rights, contact us at privacy@remnantworkshop.com.

PIPA (South Korea Users)

If you are located in South Korea, the Personal Information Protection Act (PIPA / 개인정보 보호법) applies to our handling of your personal information. A Korean-language version of this policy is available at remnantworkshop.com/privacy.ko.html (한국어).

Purposes of processing. We process the limited categories of data described in this policy to operate our websites and apps, deliver advertising (in apps that show ads), measure usage in aggregate, diagnose crashes, and process in-app purchases. We do not use Korean users' data for any purpose not described in this policy.

Categories of data and retention periods. See the Analytics, Crash and Error Reporting, Advertising, and Data Retention sections above. In summary: pseudonymous analytics and crash data are retained for up to one year. Subscription transaction records (where applicable) are retained for five years as required by Korean Commercial Act (상법) §33.

Third-party provision (제3자 제공). We do not provide your personal data to third parties for their independent use.

Processor outsourcing (처리위탁). We use the processors listed in the Data Sharing and Advertising sections above (PostHog, Sentry, Google AdMob, and RevenueCat for apps with in-app purchases). Each acts only on our instructions under a data processing agreement; none has the right to use Korean users' data for its own purposes.

Overseas transfers (개인정보 국외 이전). Korean users' personal data is transferred to and processed by service providers located outside South Korea, including the United States and the European Union. Transfers are made via secure (TLS) network connections for the purposes described above, for the retention periods described above. The recipients are:

• Amazon Web Services, Inc. (United States) — website hosting
• PostHog, Inc. (United States and Germany) — analytics and crash reporting
• Google LLC (United States) — Google AdMob advertising
• RevenueCat, Inc. (United States) — subscription and in-app purchase entitlement management, where applicable

By using our apps and websites, Korean users are informed of and may object to these transfers. To object, stop using the service and contact our Chief Privacy Officer below.

Data subject rights (정보주체의 권리). Korean users may request access to, correction of, deletion of, or suspension of processing of their personal data. We respond to such requests within the time limits set by PIPA. Contact privacy@remnantworkshop.com with the subject line PIPA request.

Security measures (안전성 확보조치). We apply administrative, technical, and physical measures to protect personal information, including access controls on processor consoles, encrypted transport (TLS), pseudonymization of analytics identifiers, and minimum-necessary access by our personnel.

Chief Privacy Officer (개인정보 보호책임자).

• Name: Jeffrey Klug
• Position: Chief Executive Officer, Remnant Workshop, Inc.
• Email: jeff@remnantworkshop.com

Children (만 14세 미만). Our general-audience apps are not directed at children under 14, and we do not knowingly collect personal information from Korean users under 14 without verifiable parental consent. Barnyard Babble (see Children's Privacy above) is designed for young children and collects no personal data.

Grievance procedures (권익침해 구제방법). If you believe your rights have been violated, you may contact the following Korean authorities:

• Personal Information Protection Commission (개인정보보호위원회): 1833-6972, pipc.go.kr
• KISA Personal Information Infringement Reporting Center (개인정보침해신고센터): 118, privacy.kisa.or.kr
• Supreme Prosecutors' Office Cybercrime Investigation Department (대검찰청 사이버수사과): 1301
• Korean National Police Agency Cyber Bureau (경찰청 사이버수사국): 182, ecrm.police.go.kr

Third-Party Links

Our website and apps may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

Changes to This Policy

We may update this policy from time to time. Updates will be posted here with a revised date.

Contact Us

If you have questions about this privacy policy, contact us at privacy@remnantworkshop.com.