Privacy Policy
Last updated: 15 September 2026
tinwidget is a small app for decorating a tin with stickers and putting it on your iPhone Home Screen. It is made by Kernbase Studio.
Who we are
tinwidget is made and operated by Kernbase Studio, based in India. For data protection law, Kernbase Studio is the data controller for the little we handle. You can reach us at support@tinwidget.app, and we will reply within two working days.
The short version
- tinwidget has no account, no sign-up, and no login.
- tinwidget has no server of its own. Your tins are stored on your iPhone and in your own iCloud account through Apple’s CloudKit.
- tinwidget does not collect analytics, does not track you, and does not show ads.
- tinwidget contains no third-party SDKs.
What the app stores
| Data | Where it lives | Why |
|---|---|---|
| Your tins (stickers, backdrop, tin name) | On your iPhone and in your private iCloud database | So your tins sync between your devices and survive a reinstall |
| Photos you choose to turn into stickers | On your iPhone and in your private iCloud database, as part of the tin | So the sticker appears in the tin and the widget |
| Rendered widget images | In an app-private container on your iPhone | So the Home Screen widget can show your tin |
| Whether you bought the one-time unlock | Managed by the App Store; a copy of the yes/no flag is kept on your iPhone | So the unlock works offline |
We never see any of this data. It is encrypted in transit and at rest by Apple’s iCloud, and it is only readable by you and by anyone you explicitly invite to a shared tin.
Sharing a tin
If you invite another person to a tin, the tin is shared through Apple’s iCloud sharing. That person can see everything in the tin, including the photo stickers. You can stop sharing at any time from inside the tin, which removes their access.
Photos and camera
tinwidget asks for access to your photo library only when you tap Photos inside the add panel. You can grant access to only selected photos. Photos are processed on your device to lift the subject; nothing is uploaded anywhere except into your own iCloud as part of a tin you save.
tinwidget asks for access to the camera only when you tap Take a photo. The picture goes straight into the same on-device cutout step and is never sent anywhere except into your own iCloud as part of a tin you save. tinwidget does not record video or audio.
Purchases
tinwidget offers a single one-time purchase that unlocks every sticker pack, every backdrop, and unlimited tins. Payment is handled entirely by Apple. We do not receive your payment details.
Your rights, and how to use them
Because tinwidget keeps your content in your own iCloud rather than on a server of ours, most rights you have under data protection law — including the GDPR and India's Digital Personal Data Protection Act — are things you can exercise yourself, immediately, without asking us:
- See your data. Everything the app holds is visible inside the app, in your tins.
- Delete your data. Delete a tin to remove it everywhere, or delete the app and remove tinwidget from iCloud settings to remove all of it.
- Take your data elsewhere. Publish a tin and save the image, or take a screenshot; your photos remain in your own photo library throughout.
- Correct your data. Edit or rename a tin at any time.
If you would rather we did something on your behalf, or you want to object to processing or withdraw consent for photo or camera access, write to support@tinwidget.app. We answer within two working days and act within thirty days.
How long things are kept
We keep nothing, because we hold nothing. Your tins stay in your iCloud for as long as you keep them and disappear when you delete them. The yes-or-no record of your purchase is held by Apple under Apple's own retention rules. Rendered widget images live on your iPhone and are replaced each time you publish.
If you want to complain
Please write to us first — most things are quicker to fix directly. If you are not satisfied, you can complain to a data protection authority. In the European Union or the United Kingdom that is the supervisory authority where you live. In India, you may approach the Data Protection Board after raising the matter with our grievance contact below.
Grievance contact
For India's Digital Personal Data Protection Act, privacy grievances go to support@tinwidget.app, marked “Privacy grievance”. We acknowledge within two working days and respond within thirty days.
Children
tinwidget is not directed at children under 13 and does not knowingly collect information from them.
Changes
If this policy changes, the new version will be posted at the same address and the date at the top will be updated.
Contact
Questions about privacy: support@tinwidget.app