Privacy Policy

Effective date: August 17, 2026

The short version

Shrine has no accounts and no server. Everything you build, your photos, text, countdowns, and stats, is stored only on your iPhone, inside an App Group shared between the app and its widget. Nothing about the content of your shrines is ever collected, transmitted, or seen by us.

Data that stays on your device

• Your shrines. Every photo, caption, countdown, and stat you add lives in an on-device App Group so the app and your home-screen widget can both read it. None of it is uploaded anywhere.
• Your photos. Photos you choose from your library are copied only into that local App Group storage. Shrine never uploads a photo, and has no server to upload it to.
• Your theme and settings. Which of the built-in themes you've chosen, your language, and similar preferences stay on-device.

Data that is collected

• Purchases. If you buy Shrine Pro, our payment infrastructure provider RevenueCat processes the App Store receipt to unlock your purchase, identified only by a random anonymous ID. We do not receive your name, Apple ID, or payment details. Apple processes the payment itself.
• Ad attribution. If you installed Shrine after tapping an Apple Search Ads ad, Apple's AdServices technology shares a deterministic, anonymous attribution token so we can tell which campaign brought the install. This does not use the advertising identifier (IDFA) and does not require a tracking permission prompt.
• Product analytics, not yet active. Shrine ships with the ability to send anonymous, aggregate product-usage events (for example, that a shrine was created, never its content) through Amplitude. This is currently switched off at launch. If we turn it on in the future, this policy will be updated first, no shrine content, photo, or text will ever be included, and events will never be linked to your identity.

What we never do

• We never sell your data.
• We never upload your photos, shrine text, or theme choices, there is no server to send them to.
• We never require an account or collect your name or email address.

Third parties

The processors above act on our behalf and receive only what is described here: Apple, RevenueCat, Amplitude (once activated).

Retention and your rights

On-device data lives until you delete a shrine or remove the app. Anonymous purchase and attribution records are retained only as long as needed for the purposes above; because they are not linked to your identity we usually cannot look up "your" data, but if you contact us we will help with any request to the extent it can be identified.

Children

Shrine is not directed at children under 13.

Changes

If this policy changes, the new version will be posted at this address with an updated effective date.

Contact

If you have questions about this policy, contact us at erendemirkesen@gmail.com.