Privacy Policy

At Pixel Fox Studio, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile applications and services. It applies to all Pixel Fox Studio apps.

Steps: Pocket Pedometer and Steps: Pocket Pedometer Free are iPhone apps that use Apple Health data to show your step history. No account is required.

Apple Health & On-Device Data

With your permission, Steps reads your step-count history from Apple Health. Your step totals, dates, goals, and health-derived summaries stay on your device and are never transmitted to Pixel Fox Studio or any third party. In particular, this Health data is never shared with Google or RevenueCat, never used for advertising, and never sold. You can revoke Health access at any time in the Health app or iOS Settings.

Paid Steps

The paid Steps app does not include advertising or RevenueCat. It stores your goal and display preferences locally and does not collect analytics, usage data, or crash reports on our behalf.

Steps Free Advertising

Steps Free displays banner advertisements through Google Mobile Ads after any legally required consent flow. Google may process coarse location, device identifiers, product interaction, advertising data, crash data, and performance data to provide ads, analytics, app functionality, fraud prevention, and service reliability. Each data type's classification is shown on the app's App Store privacy label. Steps Free has no analytics or crash-reporting service of its own.

Remove Ads Purchase

Steps Free offers an optional, one-time Remove Ads purchase. Apple processes the payment. RevenueCat receives a purchase record and entitlement status, held against a random app user ID that RevenueCat generates on your device, so the app can unlock and restore ad removal; it does not receive your Health data, step totals, name, email address, or payment-card information. RevenueCat also receives events for the ads the banner shows (that an ad loaded or failed to load, impressions, taps, and the estimated revenue each ad earned), linked to the same random app user ID, to measure ad income.

Personal Information

• Name and email address (when you contact us for support)
• Device information and usage analytics, in the apps that include analytics (not linked to your identity)
• App preferences and settings

Automatically Collected Information

• Device type and operating system version
• App version and usage statistics, in the apps that include analytics
• Crash reports and error logs, in the apps that include crash reporting (not linked to your identity; see Third-Party Services for the random install identifier Sentry creates)

Daily Bread collects minimal usage and crash data to improve your experience. Some of it is linked to your device through Tenjin, as described below. We are committed to privacy-first analytics and do not track users across apps or websites.

Usage Analytics

We collect information about how you use the app, including which verse categories you view, which features you use, and how you navigate the app. This data is collected through Aptabase, a privacy-focused analytics service. This data is not linked to your identity.

• Bible verse interactions (view, favorite, share)
• Category preferences and selections
• Feature usage patterns
• Screen navigation patterns
• Button tap events

Performance Data

We collect crash reports and performance metrics to maintain app stability. This includes app launch times, error logs, and technical diagnostics. Crash and error reporting is handled through Sentry, an error-tracking and performance monitoring service. This data is not linked to your identity. Sentry's SDK creates a random install identifier on your device; it is not your name, email address, or Apple ID.

• Crash logs
• App launch and load times
• API response times
• Error types and frequencies
• Memory and battery usage patterns
• Network connectivity status

Subscription Information

If you purchase a Daily Bread subscription, we process your subscription status through RevenueCat to provide you with premium features. This includes your subscription type, purchase date, and expiration date. Daily Bread creates a random app user ID for your install and gives it to RevenueCat, which holds your purchase history against it. That ID is not an account and is not your name or email address, but your purchase record is linked to it. This data is necessary to provide you with the service you purchased.

• Subscription status (active, trial, expired)
• Subscription type (weekly, monthly, annual)
• Purchase dates and expiration dates
• Restoration of purchases across devices

Apple Search Ads Attribution

Daily Bread asks Apple's AdServices service whether your install came from an Apple Search Ads campaign. If it did, Apple answers with the numbers that identify the campaign, ad group, and keyword, and Daily Bread sends those numbers to RevenueCat and Aptabase so we can see which ads lead to installs and purchases. If it did not, no campaign is recorded. The one-time token used for the request is exchanged for those numbers and is not stored or forwarded. Tenjin's SDK requests its own token separately (see Tenjin below). The numbers identify a campaign, not your name or contact details.

What We Do NOT Collect

• Names, email addresses, or phone numbers
• Precise location data
• Identifiers that track you across apps or websites
• Advertising identifiers (IDFA)
• Personal information beyond what's needed for subscriptions

Flare helps you log digestive symptoms and meals. Because it works with sensitive health information, we hold it to the strictest privacy standard: your health data stays on your device and in your own private iCloud account, and is never sent to us.

Health Data

With your permission, Flare can read sleep, activity, and hydration data from Apple Health, and write your symptom logs back to Apple Health. Your health data stays on your device and — only if you enable iCloud sync — in your own private iCloud account, which we cannot access. Health data is never transmitted to Pixel Fox Studio or any third party, never included in analytics or crash reports, never used for advertising, and never sold or shared. You control Apple Health access through the system permission prompts and can revoke it at any time in the Health app or iOS Settings.

Photos

Meal photos you attach in Flare are stored only on your device and are never synced to iCloud or transmitted anywhere.

On-Device Storage

Your entries (food, symptoms, notes, and custom symptoms) are stored locally on your device. If you turn on iCloud sync, they sync through your own private iCloud database that we cannot read.

Analytics, Crash Reports & Purchases

Flare uses three third-party services. None of them receives your entries, symptoms, notes, photos, or Health data.

• Aptabase (usage analytics): events such as "an entry was saved", with fixed values only. Not linked to your identity.
• Sentry (crash and error reports): crash, performance, and other diagnostic data, not linked to your identity. Sentry's SDK creates a random install identifier on your device (a device ID in Apple's terms); it is not your name, email address, or Apple ID.
• RevenueCat (subscriptions): RevenueCat generates a random app user ID for your install and holds your purchase history against it, so that record is linked to that ID. It is not your name, email address, or Apple ID.

Flare has a switch under Settings → Privacy → Anonymous Analytics. Turning it off stops both Aptabase usage analytics and Sentry crash reporting.

We use the collected information to:

• Improve the app: Understand which features are most valuable to our users
• Fix bugs: Identify and resolve technical issues quickly
• Provide subscriptions: Manage your premium access and ensure you receive the features you paid for
• Enhance performance: Optimize app speed, reliability, and battery efficiency
• Respond to support: Address questions and technical issues

What We Do NOT Do

• Track you across apps or websites, except where an app asks your permission first (see that app's own policy)
• Sell user data to third parties
• Use Health data or step-count information for advertising purposes
• Share data beyond what's disclosed in this policy

Our apps use the following third-party services to provide functionality, analytics, purchases, install attribution, and — in the free editions of Steps and A Bible Verse: Daily, and in Bubblebots — advertising. The services used vary by app. Health data is never shared with any of them.

Aptabase (Analytics)

• Purpose: Privacy-first product analytics
• Data Shared: Usage events, not linked to your identity (no device identifiers, cookies, or fingerprinting)
• Privacy Policy: https://aptabase.com/legal/privacy
• Location: United States (data stored in US data centers)

Sentry (Crash & Error Reporting)

• Purpose: Crash reporting, error tracking, and performance monitoring
• Data Shared: Crash logs, error reports, and technical diagnostics, not linked to your identity. Sentry's SDK creates a random install identifier on your device (not your name, email address, or Apple ID).
• Privacy Policy: https://sentry.io/privacy/
• Location: United States

RevenueCat (Purchase Management)

• Purpose: Process and manage subscriptions and in-app purchases, and (in the free editions of Steps and A Bible Verse: Daily) measure ad revenue
• Data Shared: Your purchase history and subscription status, linked to a random app user ID (not your name, email address, or Apple ID). In the free editions of Steps and A Bible Verse: Daily, RevenueCat also receives events for the ads the banner shows (that an ad loaded or failed to load, impressions, taps, and the estimated revenue each ad earned), linked to the same random app user ID, to measure ad income.
• Privacy Policy: https://www.revenuecat.com/privacy/

Tenjin (Install Attribution; Daily Bread and Bubblebots)

• Purpose: Measuring which ads and campaigns lead to installs (attribution), and analytics
• Data Shared: The identifier for vendor (not the advertising identifier), app version, OS version and platform, launch and session counts, session lengths, the number of in-app purchases, total ad revenue, a session identifier, the date of your first session, the SKAdNetwork conversion value the app reports once after install, and Apple's ad-attribution (AdServices) token, which the Tenjin SDK fetches. All of this is linked to you through the identifier for vendor. Tenjin uses it to measure which of our ads led to your install, not to track you across other companies' apps. As with any internet request, Tenjin's servers also see your device's IP address. Tenjin does not receive the advertising identifier (IDFA), and no tracking permission prompt is shown for Tenjin. Apple's SKAdNetwork install postbacks are also sent to Tenjin (tenjin-skan.com).
• Privacy Policy: https://tenjin.com/privacy/
• Location: United States

Google Mobile Ads & User Messaging Platform (Free Editions of Steps and A Bible Verse: Daily, and Bubblebots)

• Purpose: Display ads (banner ads in the free editions; rewarded ads and an ad between levels in Bubblebots), manage regional consent, prevent fraud, and maintain service reliability
• Data Shared: Coarse location, device identifiers, product interaction, advertising data, crash data, and performance data. Each data type's classification is shown on the app's App Store privacy label. Never Apple Health or step-count data
• Bubblebots: Ads appear only in campaign levels 11 to 50, only until you own the Full Game, and never in Kids mode. Google AdMob can use your device's advertising identifier only if you allow tracking when iOS asks. Because of this ad network, Bubblebots' App Store privacy label shows the device identifier as used to track you; each data type's classification is shown there.
• Privacy Policy: https://policies.google.com/privacy

Pixel Fox Image Server (Daily Bread and A Bible Verse Each Day, Paid and Free)

• Purpose: Supplies the background photos for your verses, and Daily Bread's Bible text, from dailybread-image-proxy.vercel.app
• Daily Bread: To pick a photo, Daily Bread asks our image server for a random image and sends the verse category, a keyword for it, the image size and quality, and, for some verses, a one-word theme (such as hope or forgiveness) for what the verse is about. The request carries an app key that is the same for every install. It sends no account, user ID, device ID, location, or verse text. The server replies with the address of a photo we store with Cloudflare, and the app downloads the photo from there. Bible text is downloaded from the same server, by translation. Like any web server, Vercel (which hosts the image server) and Cloudflare (which hosts the photo files) see the IP address and user agent of each request. The image server's own logs record the request path without its query string, the category of each photo served (and, when no photo matches a requested theme, that theme), the response status and how long it took, and the IP address and user agent only when a request carries an invalid app key. It keeps no record of you: the only thing it stores per request is a running count of how often each photo has been served, and it limits request rates in memory only, without storing them. It uses no analytics, advertising or error-tracking service. If our stored copy of a photo is unavailable, the app may load that photo directly from Unsplash or Pexels, which then see your IP address.
• A Bible Verse Each Day: To pick a photo, the app asks our image server for a random image, sending the same fixed values every time and no app key. It sends no account, user ID, device ID, location, or verse text. The server replies with the address of a photo we store with Cloudflare, and the app downloads the photo from there. Like any web server, Vercel (which hosts the image server) and Cloudflare (which hosts the photo files) see the IP address and user agent of each request. The image server's own logs record the request path without its query string, the category of each photo served (and, when no photo matches a requested theme, that theme), the response status and how long it took, and the IP address and user agent only when a request carries an invalid app key. It keeps no record of you: the only thing it stores per request is a running count of how often each photo has been served, and it limits request rates in memory only, without storing them. It uses no analytics, advertising or error-tracking service. Because the request has no app key, that rate limit is per IP address. If our stored copy of a photo is unavailable, the app may load that photo directly from Unsplash or Pexels, which then see your IP address.
• Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/
• Vercel privacy policy: https://vercel.com/legal/privacy-policy

Free Use Bible API (bible.helloao.org) (A Bible Verse Each Day, Paid and Free)

• Purpose: Supplies the Berean Standard Bible text
• Data Shared: To show a passage, the app asks bible.helloao.org for one chapter of the Berean Standard Bible: the day's chapter, or a random one. The service therefore sees which book and chapter was asked for, along with your IP address and your device type (the user agent), as any web server does. The request carries no account, user ID, device ID, location or other identifier, and no text of yours. The service is run by AO Lab, a nonprofit, and is served from Amazon Web Services. AO Lab publishes no privacy policy for this service itself: the policy linked here is for its website, and says its other services are separate.
• AO Lab privacy policy (covers helloao.org only): https://helloao.org/privacy.html

Apple (Payment Processing)

• Purpose: Process subscription payments through App Store
• Data Shared: Payment information (handled entirely by Apple)
• Privacy Policy: https://www.apple.com/legal/privacy/

If you sign up for email updates on pixelfoxstudio.com, we keep your email address and the updates you chose (new apps, TestFlight betas, or both), along with the fact that you signed up on our website and when. We use them only to email you about those things, a few times a year at most. Every email includes an unsubscribe link. If you use our contact form, we receive your name, email address, subject and message by email so we can reply.

These services handle that data for us:

• Loops (Website Email Updates & Contact Form): Stores the email address you give us on our website and the updates you chose, sends you those updates, and delivers messages sent through our contact form to us. The email address you enter in the website sign-up form, which updates you chose (new apps, TestFlight betas, or both), that you signed up through our website, and when. If you use the contact form, your name, email address, subject and message are sent to Loops so it can email them to us. Based in United States. See the privacy policy.
• Cloudflare Turnstile (Bot Check): Checks that a person, not a bot, is submitting our website sign-up and contact forms. Cloudflare says Turnstile processes client-side signals including your IP address, TLS fingerprint and user-agent header, together with our site key and the site it ran on, and that it collects them to detect bots, not to identify, profile or target any individual. Cloudflare's Turnstile Privacy Addendum is the source for this description. Based in United States. See the privacy policy.

We add no advertising or marketing pixels to this website. To have your address removed, unsubscribe from any update or contact hello@pixelfoxstudio.com.

We retain different types of data for different periods:

• Analytics data (apps that use Aptabase): Retained for 13 months, then automatically deleted
• Subscription data: Retained for the duration of your subscription plus 7 years (legal requirement for financial records)
• User preferences: Synced via iCloud, retained as long as you use the app
• Crash reports (apps that use Sentry): Retained for 90 days, then automatically deleted

You can request deletion of your data at any time by contacting hello@pixelfoxstudio.com

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• With your explicit consent
• To comply with legal obligations
• To protect our rights and the safety of our users
• With service providers who assist in app functionality (Aptabase, Sentry, RevenueCat, Tenjin, Apple, and Google Mobile Ads) as described above

We implement appropriate technical and organizational security measures to protect your personal information:

• Encryption in transit: All data transmitted uses HTTPS/TLS encryption
• Encryption at rest: Sensitive data is encrypted in storage
• No identity attached: Analytics and crash data are sent without your name, email address, or Apple ID
• Regular audits: We regularly review our security practices

However, no internet-based service can be 100% secure, and we cannot guarantee absolute security.

You have the right to:

• Access: Request access to your subscription data
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Opt-out: Flare (Settings → Privacy → Anonymous Analytics) and Shelf Life (Settings → Privacy → Share anonymous analytics & crash reports) each have an in-app switch that stops both usage analytics and crash reporting. For the other apps that include analytics, contact us for instructions.
• Portability: Receive a copy of your data in a portable format

For EU Users (GDPR Rights)

If you are located in the European Union, you have additional rights:

• Right to object to data processing
• Right to restrict processing
• Right to lodge a complaint with a supervisory authority

Legal Basis for Processing

• Analytics data: Legitimate interest (improving app functionality and user experience)
• Subscription data: Contract performance (necessary to provide purchased service)

To exercise any of these rights, please contact us at hello@pixelfoxstudio.com

Our apps are made for a general audience. Bubblebots includes a Kids mode that a parent opens for a child: it shows no ads, records nothing about Kids play and does not use Game Center; overall app usage time, including time in Kids mode, is counted by Tenjin, our install-attribution provider. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Your information may be transferred to and processed in countries other than your own:

• Aptabase: Data processed in the United States
• Sentry: Data processed in the United States
• RevenueCat: Data processed in the United States
• Tenjin: Data processed in the United States
• Google Mobile Ads: Data processed through Google's global infrastructure under its published privacy terms
• Apple: Data processed per Apple's global infrastructure

We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

For material changes that affect how we use your data, we will notify you through the app or via email if you have subscribed.

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• Email: hello@pixelfoxstudio.com
• Address: New York City, New York, United States

For privacy-specific inquiries: Please include "Privacy Request" in your email subject line for faster processing.

We aim to respond to all privacy requests within 30 days.