THE DETAILS, CLEARLY

Privacy Policy

Last updated: October 31, 2026

Who this policy covers

This policy covers CarPlay Widgets Studio, the iOS app linked on this website, and this support website. “We” means the application provider identified on the app’s App Store listing. Contact us at [email protected] or through the support form for questions or data requests. This policy describes the app’s implemented features; availability depends on your version, permissions and subscription.

Your widgets, photos and audio

Widget configurations, selected photos, custom audio and your saved playlist are stored on your device. The app shares selected widget files and settings with its widget extension through an Apple App Group. Photos and audio are not intentionally included in analytics events or uploaded by our app to our own content server. If you export or share content, the service you choose processes it under its own policy. Microphone access is requested for recording your own sound; photo selection uses Apple’s system picker.

Location, trips and weather

Starting a trip requests location permission and uses location, speed and time to calculate trip statistics. During an active trip, location updates can continue in the background and while the phone is locked. Stop the trip in Drive to end tracking. The implementation stores trip summaries, not a saved route-coordinate history. Weather uses a separate location request with your permission and sends rounded coordinates to Open-Meteo (or a configured forecast endpoint) to retrieve a forecast. Recent weather location and forecast data are cached locally and shared with widgets. Manage permissions in iOS Settings.

IPTV and AirPlay

When you provide a playlist, the app contacts its server to download the playlist and contacts channel providers when you play video. Those providers may receive your IP address, request information and credentials included in a link. The playlist and its links are saved locally; we do not supply or host channels. AirPlay uses Apple’s services and your chosen receiver. Avoid sharing private playlist URLs with support. Your provider and receiver have their own privacy practices.

A persistent app identifier

The app creates a random User ID and stores it in Apple Keychain using device-only accessibility after the first unlock. It is reused across launches and passed to Adapty, Amplitude, Firebase Analytics and Firebase Crashlytics to associate subscriptions, app events and diagnostics with the same app identity. The app also shares Amplitude’s device identifier with Adapty for their integration. This identifier is not a login account or a guarantee of cross-device identity. Keychain items can have a different lifetime from normal app files; deleting the app is not a guaranteed identifier reset.

Purchases, usage and diagnostics

Apple processes payments and App Store subscription management. Adapty processes subscription status, product and transaction information and app identifiers. Amplitude and Google Firebase process app/device information, screen views, interactions and purchase events; Crashlytics processes crash diagnostics and associated identifiers. We do not receive your full payment-card information. The app records confirmed transaction amounts when available and excludes raw receipts from its custom analytics events. Visible interaction text, form contents, photo/audio contents and playlist URLs are excluded from our custom analytics payloads. Provider-generated technical data is governed by their policies.

Advertising attribution and choices

Adapty can receive Apple Ads attribution through Apple AdServices. The app includes Apple’s App Tracking Transparency permission request where appropriate. You can change tracking permissions in iOS Settings. Declining ATT does not disable first-party product analytics, subscription processing or crash reporting; it does not authorize tracking across other companies’ apps or websites. A random app User ID must not be used to bypass your tracking choice.

Website and support data

The contact form collects your name, email, topic, message and affirmative consent to process the request. When opened from the app, the support URL also includes your app User ID, which is attached to your support message to help locate your app records. Messages are delivered through the Telegram Bot API to our support channel, and replies may be sent by email. Telegram, email and hosting providers may process this information outside your country. The form uses a necessary session cookie for CSRF protection. To reduce abuse, the server temporarily stores a hash of the connection IP address and request counters outside the public web directory; records expire after one hour and are cleaned up during subsequent requests. Hosting may keep ordinary access logs. This version of the website does not load Google Analytics, marketing pixels or a third-party web-font service.

Why we process data and how long

We use local content to provide features you request, purchase data to administer Premium, diagnostics to resolve failures, and support information to answer requests and prevent abuse. Where applicable, processing relies on performing the service, legitimate interests in security and maintenance, or your consent. Local content remains until you remove it or app data is removed. Support records are retained as needed to resolve requests and meet applicable obligations; external providers apply their own retention settings and policies. We do not promise that uninstalling the app deletes provider records, shared files or Keychain items.

Access, deletion and other rights

You can change permissions in iOS Settings, remove saved content in the app where controls are available, and manage subscriptions through your Apple Account. To request access, correction, deletion, restriction, portability or withdrawal of consent where applicable, email [email protected] or use the contact form and select Privacy request. Include only the non-sensitive information needed to locate your records, such as your app User ID if available. We may need to verify a request and retain information required by law. You may also have a right to complain to your local data-protection authority.

Security, children and changes

We use platform protections, HTTPS for the website and playlist imports, and limited form validation and abuse controls. No storage or transmission method guarantees absolute security. The app is not designed to solicit personal information from children. If a child has provided personal information, contact us so we can assess an appropriate response. We may update this policy as features or services change; the date above identifies the current version.