Privacy Policy
The UltraPod Team ("we," "our," or "us") respects your privacy. This Privacy Policy describes how we handle information in connection with the UltraPod apps for supported iOS, Android, and HarmonyOS devices, the UltraPod website, support email contact, and optional X contact.
1. Information Collection & Use
Data minimization: UltraPod is designed to avoid server-side app telemetry and advertising tracking.
- Optional community account: Browsing community themes and icon packs does not require an account. Liking, favoriting, getting, uploading, or managing community content requires Sign in with Apple, including on supported Android and HarmonyOS versions. We verify Apple's identity token and store a salted one-way identifier instead of your Apple user identifier or email address. We store a display alias, account status, consent version, short-lived sessions, moderation records, and verified entitlement tier. Apple may provide an authorization refresh token, which we store encrypted only to support account lifecycle operations.
- UltraPod Case Waitlist: Joining the case waitlist requires Sign in with Apple and a contact email. We store your country or region, selected iPhone models, reason for selecting them, preferred way to get the case, selected price and quality tiers when relevant, optional note, interface language, and consent to file release notices. The contact email is used only to notify you when a 3D-print file for a model you selected is published. It is not used for marketing. Each account keeps one current submission, and a new submission replaces the previous one.
- Community content: When you submit or update a theme or icon pack, we receive the package, submitted screenshots or previews, title, summary, package hashes, and technical validation results. This includes automatic updates to your own uploads when you enable that option. Published content exposes your community display alias, content details, previews, likes, and acquisition counts. Reports may include a selected reason and optional text. Anonymous reports use a short-lived, salted network/device fingerprint to prevent duplicate abuse; the raw IP address is not stored in the community database.
- Purchases and cross-platform entitlements: To verify or restore a purchase, the app sends the store, product identifier, purchase token or signed Apple transaction proof, and applicable order identifier to our service. Our service checks the purchase with Apple, Google Play, or Huawei IAP. When you associate purchases with a community account, we retain verified transaction metadata, including store, product, order, environment, state, and verification time, together with hashed purchase identities and encrypted tokens or proofs needed for future verification, restoration, and refund or revocation checks. Payment card and bank account details are handled by the store; UltraPod does not request or store those payment details.
- On-device app data: Music library metadata, playback state, local media thumbnails, reading progress, notes, contacts shown inside the app, calendar/reminder previews, camera captures, voice memos, and workout session data are processed on your device using the permissions supported by its operating system. We do not upload this local app data to UltraPod servers as app telemetry. Content you choose to submit to the Community is handled as described above. Services you choose to use, such as Subsonic or Apple Music, may communicate with their respective servers.
- Platform permissions and services: The app requests permissions for features supported on your platform, such as photos, contacts, calendar, camera, microphone, motion, or location. Apple Music/MusicKit, Reminders, and Apple Health/HealthKit are used only on supported Apple platforms. Store purchases use App Store, Google Play Billing, or Huawei IAP as applicable. These services and any platform-controlled backup or sync behavior are governed by the respective providers' terms and privacy policies.
- Health and location data: Health, fitness, motion, and location data are used to provide workout and activity features for you. We do not use this data for advertising, marketing, profiling, or sale. UltraPod does not store personal health information in iCloud.
- Optional system notifications: On supported Apple platforms, if you allow remote notifications, the app sends an APNs device token, a random installation ID, your selected interface language, and the app version/build number to our Cloudflare-hosted notification service. We use this limited technical data only to deliver the correct announcement language and operate delivery reliability. It is not linked to an UltraPod account and is not used for advertising or profiling. Apple processes notification delivery through APNs under Apple's privacy terms.
- Support requests: The Support page opens an email draft addressed to 1547654938@qq.com and links to our X profile at @chrisya12957846. We receive your email address, name, and message only if you send the email from your own email app or email provider. If you contact us through X, your X account and message are handled by X under its own terms and privacy policy; we use your message only to respond. This is separate from app telemetry.
- Website hosting: Our website is hosted through Cloudflare Workers/Pages. Cloudflare may process basic request metadata, such as IP address, user agent, timestamps, and security events, to deliver and protect the website. We do not use this metadata for advertising tracking.
2. Information Sharing & Disclosure
We do not sell, rent, or trade personal data. We share information only with service providers needed to operate the website, theme community, case waitlist, notification delivery, and support workflow, with the platform and other services you choose to use, or when required by law. Cloudflare hosts the community database, encrypted account-linked purchase proofs, case waitlist records, theme and icon files, moderation queue, and notification database. Apple verifies Sign in with Apple and App Store purchases; Google Play and Huawei IAP verify their respective store purchases. Apple APNs delivers supported Apple-platform remote notifications. Public community content is shared with people who browse the community. Case waitlist responses are not displayed with an account identity or email address; only aggregated model percentages are shown publicly.
3. Retention, Deletion, and Permission Controls
App data stored on your device can be removed by deleting the app or clearing the relevant local content. You can revoke platform permissions in your device's system settings. Community accounts can be deleted inside the app or from the signed-in Community website. Deletion revokes the Sign in with Apple authorization and app/web sessions; deletes Apple credentials, account-linked purchase proofs and transaction records, entitlement and consent records, case waitlist submission, uploaded theme and icon files, likes, favorites, acquisitions, blocks, and pending uploads; removes published content from discovery; and anonymizes the retained moderation identity. Minimized security, sanction, and moderation audit records may be retained when required to prevent fraud, resolve disputes, or comply with law. Reinstalling the app does not itself delete a community account. Deleting a community account does not delete transaction records independently held by a store. Notification and support retention otherwise follows the rules described above.
4. Data Security
We use the protections and permission prompts of the supported operating systems, HTTPS, encryption for retained sensitive purchase proofs, and limited server-side collection. No system is perfectly secure, so we minimize the data we handle instead of retaining unnecessary copies.
5. Changes to This Policy
We may update this Privacy Policy from time to time to reflect modifications in our features or compliance requirements. Any updates will be posted on this page with an updated "Last Updated" date.
6. Contact Us
If you have any questions about this Privacy Policy, contact us through the email or X link on our Support page.