Privacy Policy
Effective September 29, 2026
viva stitches your year into one embroidery hoop, using your photos. Your photos never leave your phone. There's no account, no sign-in, and no advertising, and we never ask for your name, email, or phone number.
1. What stays on your phone
- Looking through photos: the names of things in your photos (like "cafe" or "cup") are read only by your phone's own features (iOS Vision, Android ML Kit). Photo pixels, files, and locations are never uploaded.
- Calendar: events are read, never changed. People's names in event titles are removed on your phone first.
- Instagram export: the zip file you hand over is opened on your phone only.
- Photo IDs, event titles, and event locations are kept only in the app's folder on your phone and are removed when you delete the app.
2. What leaves your phone
Our server (Cloudflare)
What Short words — a list of things in a photo, event titles with names removed, Instagram captions. One line per moment
Why · how long To pick each patch's design. Sent only while stitching with a subscription. We don't store the text — only an irreversible hash and the chosen design, so the same words aren't asked twice. Turn off "Send words" in Settings and viva uses on-phone rules only
OpenRouter (US) → model provider
What The words above, one line at a time (sent by our server)
Why · how long To pick a patch design. Your ID, IP address, and purchase number are not included. Providers may keep requests briefly for abuse monitoring under their terms
Our server (Cloudflare D1)
What Your stitched hoop — patch types, layout, moment summaries (date, design, category, source, distance, duration; a neighborhood name only for photo, Instagram, and workout sources), counts, and edition number
Why · how long So you can open your hoops again on another phone. Kept until you ask us to delete them. No photo IDs, event titles, event locations, or people's names
RevenueCat (US), Apple, Google
What Purchase and subscription records and a random anonymous ID
Why · how long To confirm purchases and subscriptions. We never learn your name, email, or Apple ID
Our server (Cloudflare Workers Analytics Engine)
What Usage events — a random device ID (made on your phone the first time you open viva; different from the purchase ID), the name of the screen you opened (like "/snapshots"), the name of the feature you used (like "checkout started" or "shared"), app language, and your country (from Cloudflare's IP lookup; the IP address itself isn't kept)
Why · how long To see where people get stuck and improve the app. Sent only from release builds, never with photos, words, or names. Deleted automatically after about 3 months. There's no separate switch; "Delete data on this phone" in Settings or deleting the app starts a new device ID
Requests to our server carry a random anonymous ID (created by RevenueCat). To prevent abuse we count daily usage by that ID and by IP address (hashed only; the network part for IPv6), and delete those counts within two days.
Our web pages (viva.bang9.dev — home, terms, privacy, support) load their fonts from Google Fonts (US) and jsDelivr (a font delivery network), so the visitor's IP address and browser details also reach those companies, only to deliver the fonts.
3. Service providers and international transfers
Cloudflare, Inc. (US, global data centers)
Task Server, database
What moves Everything server-side in section 2
OpenRouter, Inc. (US) and its model providers
Task Picking patch designs from words
What moves Short words
RevenueCat, Inc. (US)
Task Purchase and subscription checks
What moves Anonymous ID, purchase and subscription records
Google LLC (US) · jsDelivr (font delivery network)
Task Serving fonts for the web pages
What moves Visitor's IP address and browser details
Transfers happen over encrypted connections each time you use the feature. If you'd rather your words not move, turn off "Send words" — stitching still works. Usage events work as described in the table in section 2.
4. Deletion and your rights
"Delete data on this phone" in Settings removes what's on your phone (what's on our server stays). To see or delete hoops on our server, email support@bang9.dev. Including your app version and purchase receipt (order number) helps us find your anonymous ID. You can ask to access, correct, delete, or stop processing your data, and we'll reply within 10 days.
Deleted data can't be recovered. Purchase records required by law are kept by the stores (Apple, Google).
5. Children
viva is not directed at children under 13 (under 14 in Korea) and does not knowingly collect their information.
6. Contact
winterlog studio · Business registration no. 577-24-02412 (Republic of Korea) · 5-12 Gwangmyeong-ro 347beon-gil, Jungwon-gu, Seongnam-si, Gyeonggi-do, Republic of Korea
Privacy officer: the representative of winterlog studio · support@bang9.dev
7. Changes
If this policy changes, we'll update the date above and publish the new version here. If more data would leave your phone, we'll tell you in the app first.