Privacy, in plain language.

Local mode stores image copies, collection settings, and generated wallpapers on your Mac. Original source files stay where they are. Optimized imports remove embedded metadata and normalize images; original imports preserve the bytes and may retain location metadata. We do not receive your image library on our servers.

If enabled, collections and image copies are stored in the signed-in Apple account’s private CloudKit database and use its storage quota. The local-only library remains separate. Apple provides the storage and network service under its policies. Private iCloud is not a promise of unconditional end-to-end encryption. A minimal generation marker remains after Delete Everywhere to prevent stale offline uploads.

Pinterest is not yet active publicly. When activated, the system browser requests read access to the authenticated user’s boards and Pins. Our authentication service processes authorization codes and access/refresh tokens only to complete or renew that connection. It stores pending sign-in state encrypted on the server for up to ten minutes, and encrypted token handoff records for up to one minute. Expired records cannot be used and are periodically deleted while the service runs. Access and refresh tokens are stored in this Mac’s non-synchronizing Keychain.

Board metadata and image previews are requested directly from Pinterest and held in app memory. Persistent image copies and wallpaper derivatives require provider approval and your right to use the images. Imported copies retain their source Pin ID and stay outside private iCloud. Disconnect removes local credentials; revoke provider access in Pinterest account settings. See Pinterest’s privacy policy.

The app contains no advertising or analytics SDKs. Apple may provide TestFlight or App Store crash and beta feedback information according to your Apple settings and its service terms. If you email support, we receive what you choose to send and use it to respond. Do not send passwords, API keys, private images, or whole library exports by default. Ask us to delete support correspondence when it is no longer needed.

The website uses locally hosted artwork and system fonts, with no analytics tracker or image upload form. Your appearance choice is saved in browser local storage when available. The hosting server and, when configured, Cloudflare process ordinary connection information such as IP address, requested path, and browser headers to deliver and protect the site. OAuth callback query strings and token bodies must not be retained in application logs; rate-limit identifiers are stored as short-lived hashes. Cloudflare and Apple provide their own privacy information.

Settings → Library & Data provides export, import, removal of unused copies, removal of synchronized downloads, and separately labeled local or cloud deletion controls. Applied wallpaper files may remain so the desktop keeps working. Uninstalling the app does not itself delete private iCloud content or support email. Use the in-app controls first, or contact us for help.

For privacy questions, email [email protected]. Controller and publisher: Cristal Code Middle East L.L.C-FZ, United Arab Emirates. Material changes to these practices will be reflected on this page.