Privacy Policy
Last updated: 30 October 2026
tinwidget is a small app for decorating a tin with stickers and putting it on your iPhone Home Screen. It is made by Kernbase Studio.
Who we are
tinwidget is made and operated by Kernbase Studio, based in India. For data protection law, Kernbase Studio is the data controller for the little we handle. You can reach us at support@tinwidget.app, and we will reply within two working days.
The short version
- tinwidget has no account, no sign-up, and no login.
- Your tins are stored on your iPhone and in your own iCloud account through Apple’s CloudKit. They never reach a server of ours.
- Only three things reach us: feedback you choose to send from inside the app, your answer to “How did you find us?” if you give one, and records of purchases, none with your name or email on them.
- The app does not collect analytics about how you use it, does not track you across other apps or websites, and does not show ads.
- tinwidget contains one third-party SDK: RevenueCat, used only to count where new people come from and what they buy.
What the app stores
| Data | Where it lives | Why |
|---|---|---|
| Your tins (stickers, backdrop, tin name) | On your iPhone and in your private iCloud database | So your tins sync between your devices and survive a reinstall |
| Photos you choose to turn into stickers | On your iPhone and in your private iCloud database, as part of the tin | So the sticker appears in the tin and the widget |
| Rendered widget images | In an app-private container on your iPhone | So the Home Screen widget can show your tin |
| Whether you bought the one-time unlock | Managed by the App Store; a copy of the yes/no flag is kept on your iPhone | So the unlock works offline |
We never see any of this data. It is encrypted in transit and at rest by Apple’s iCloud, and it is only readable by you and by anyone you explicitly invite to a shared tin.
Sharing a tin
If you invite another person to a tin, the tin is shared through Apple’s iCloud sharing. That person can see everything in the tin, including the photo stickers. You can stop sharing at any time from inside the tin, which removes their access.
If you share a tin to Instagram Stories, the picture of your tin is handed to the Instagram app on your iPhone. What happens to it after that is covered by Instagram’s own privacy policy.
Feedback you send us
The app has a Send feedback form in Settings, and asks once in a while whether you’re enjoying it. Nothing is sent unless you write something and tap Send. When you do, we receive:
- whether it’s an idea or a problem, and the message you wrote;
- your email address, only if you chose to give one so we can reply;
- the app version, the iOS version and the iPhone model, so a problem can be matched to a device.
It is stored in a small database on Cloudflare, which runs our website, and only we can read it. To stop the form being flooded, your internet address is turned into a short code that changes every day; the address itself is not stored. We use feedback only to reply and to improve tinwidget, and we never sell or share it. We delete it once we no longer need it, and at most twelve months after it arrives. Write to us and we will delete yours sooner.
Photos and camera
tinwidget asks for access to your photo library only when you tap Cutout, through Apple’s own photo picker. You can grant access to only selected photos. Photos are processed on your device to lift the subject; nothing is uploaded anywhere except into your own iCloud as part of a tin you save.
tinwidget asks for access to the camera only when you tap Take a photo. The picture goes straight into the same on-device cutout step and is never sent anywhere except into your own iCloud as part of a tin you save. tinwidget does not record video or audio.
How you found tinwidget
At the end of the welcome screens, tinwidget asks “How did you find us?” You can pick an answer (TikTok, Instagram, Threads, the App Store, a friend, or elsewhere), and for Instagram or Threads, whose post it was. You can also skip it. The answer is kept on your iPhone and sent to RevenueCat with a random identifier that tinwidget makes up for this purpose. It is not your name, your email, your Apple Account or your device’s advertising identifier, and it is not linked to anything else about you. We use it only to see which places and creators bring people to tinwidget, and how many of them later buy the unlock.
Purchases
tinwidget offers a single one-time purchase that unlocks every sticker pack, every backdrop, and unlimited tins. Payment is handled entirely by Apple. We do not receive your payment details.
When someone buys the unlock, Apple sends us a record of the sale: what was bought, when, the price, the App Store country, and Apple’s own transaction number. It does not include your name, your email address, your Apple Account or anything about your device, and nothing in it tells us who you are. We use a service called RevenueCat to receive and add up these records so we can see how tinwidget is selling. When you buy inside the app, it also passes a copy of that purchase to RevenueCat under the same random identifier as your “How did you find us?” answer, so a sale can be counted towards the place you found us. Nothing in it identifies you. How RevenueCat handles data is covered by its own privacy policy.
Your rights, and how to use them
Because tinwidget keeps your content in your own iCloud rather than on a server of ours, most rights you have under data protection law — including the GDPR and India's Digital Personal Data Protection Act — are things you can exercise yourself, immediately, without asking us:
- See your data. Everything the app holds is visible inside the app, in your tins.
- Delete your data. Delete a tin to remove it everywhere, or delete the app and remove tinwidget from iCloud settings to remove all of it.
- Take your data elsewhere. Publish a tin and save the image, or take a screenshot; your photos remain in your own photo library throughout.
- Correct your data. Edit or rename a tin at any time.
If you would rather we did something on your behalf, or you want to object to processing or withdraw consent for photo or camera access, write to support@tinwidget.app. We answer within two working days and act within thirty days.
How long things are kept
Feedback you send us is kept for at most twelve months, as described above. Your “How did you find us?” answer and purchase records are kept by RevenueCat for as long as we use it to count sales; write to us and we will delete them. Everything else stays with you: your tins stay in your iCloud for as long as you keep them and disappear when you delete them. The yes-or-no record of your purchase is held by Apple under Apple's own retention rules. Rendered widget images live on your iPhone and are replaced each time you publish.
If you want to complain
Please write to us first — most things are quicker to fix directly. If you are not satisfied, you can complain to a data protection authority. In the European Union or the United Kingdom that is the supervisory authority where you live. In India, you may approach the Data Protection Board after raising the matter with our grievance contact below.
Grievance contact
For India's Digital Personal Data Protection Act, privacy grievances go to support@tinwidget.app, marked “Privacy grievance”. We acknowledge within two working days and respond within thirty days.
Children
tinwidget is not directed at children under 13 and does not knowingly collect information from them.
Changes
If this policy changes, the new version will be posted at the same address and the date at the top will be updated.
Contact
Questions about privacy: support@tinwidget.app