Privacy Policy

Who we are

AUTHENCITY LTD operates Paletwo and is responsible for the personal information described here. For privacy questions or requests, email info@palettwo.com. This notice covers the current private beta and this website. Features and data handling may change as the beta develops.

Your account and online play

Sign in with Apple supplies an account identifier and, when you first sign in, the name you choose to share. The current app requests your name, not email permission. We store your account identifier, display name and cursor color through Supabase. Signed-in users can see profile names and cursor colors so they can identify players and creators.

For online play we process room codes, participants and roles, picture and mode, settings, readiness, matchmaking requests and session times. LiveKit relays drawing and cursor updates to the people in a room. The current live-room connection carries drawing data, not your camera or microphone. We do not make a server video recording of those live drawing messages.

Public rounds, spectators and votes

A public round can appear in Watch → Live. Its players, artwork and live drawing activity are visible to signed-in spectators. The room settings show whether the round is public, and participating players confirm readiness for those settings. Check that setting before starting; a private beta invitation does not make a public round private to your invitation group.

We process spectator membership and presence to connect viewers and count the audience. Votes are stored with the voter account, chosen player, room, round and timestamps; the app displays vote totals and results. Reactions are sent live with the sender’s name and cursor color, and the service records timing information to limit abuse. People who see content may make their own copies.

Artwork, camera and recordings

Gallery artwork, your selected profile photo and unpublished recordings are stored on your device by the app. Gallery iCloud sync is unavailable in the current TestFlight build. Development builds can optionally sync artwork through your private iCloud account; check Settings in your build. Existing iCloud copies, device backups and copies saved to Photos are separate and managed through Apple and your settings.

Optional Vlog mode uses camera and microphone permissions to record your artwork together with your face, voice or surroundings. On-device face and person detection help frame and blur the image; they are not used to identify you or send us a face template.

Choosing Publish uploads the video, preview image, title, description, picture name, duration and publication time to Supabase. Your display name accompanies the recording. Other signed-in Paletwo users can discover and watch it, including people outside your beta invitation group. Exporting to Photos or another app creates a copy handled by that destination.

Safety and contact

Reports include your account identifier, the reported content or person, a reason and any details you supply. Administrators use them to review concerns; other app users cannot read your report. We also store blocks, moderation actions and limited information used to prevent abuse. Blocking can restrict shared live rooms and access to a creator’s recordings.

If you email us or contact @ASychov on X, we receive the account/contact information, message and attachments you choose to send. Send only what is needed to explain your question. Never send passwords, sign-in codes or private keys. X processes communications on its service under its own privacy notice.

Website and beta diagnostics

This website has no signup, payment or contact form, and we have not added advertising or an analytics tracker. Hosting and delivery services process connection information such as IP addresses, browser information and requested pages to serve and protect the site; they may use necessary technical storage. Following the X link opens a separate service.

For TestFlight builds, Apple automatically collects beta usage and crash information and shares it with us. This may include invitation details, device and operating-system information, sessions and crash logs. Feedback you submit can include comments and screenshots. We use it to investigate faults and improve Paletwo, and do not share TestFlight information with third parties. The app has no advertising or separate analytics SDK.

Why we use information

We process account, session and publishing information to provide the features you request and perform our agreement with you. Our legitimate interests are keeping the service reliable, answering support questions, investigating faults and preventing or reviewing abuse. We use relevant technical, support, moderation and beta-feedback records for those purposes. We may also process information to meet legal obligations.

Account and session information is necessary for online features. Optional recording, publishing and support information is supplied when you choose those features. Device permissions can be changed in Settings; where processing relies on consent, you can withdraw it without affecting processing that already happened.

Providers and international processing

Supabase provides authentication, database and published-media storage; LiveKit provides real-time connections; Apple provides sign-in, device services and TestFlight. Website-hosting, delivery and email providers process information needed to deliver their services. Players, spectators and recording viewers receive the content described above. We may disclose information when lawfully required or necessary to address a safety or legal concern.

Our main Supabase project is hosted in Frankfurt, Germany. Providers may also process information outside the UK and EEA, including the United States. Supabase’s and LiveKit’s published data-processing terms describe transfer safeguards, including contractual clauses and applicable UK arrangements. Contact us for information about the safeguards relevant to your data.

Keeping and deleting information

Account and profile information is kept while the account exists. Published recordings remain until you remove them, moderation removes them or the account is deleted. Ending a round does not automatically erase its room, membership or vote records.

Use You → Account → Delete account to remove your online account and associated profile, published recordings/files, hosted rooms, memberships, votes, blocks, matchmaking entry and reports you filed. If deletion fails, contact us; signing out is not deletion. In the current beta, deletion does not automatically revoke the separate Sign in with Apple authorization—manage that in your Apple Account settings.

Account deletion does not erase local Gallery or Photos, older iCloud copies, copies other people saved, support correspondence or Apple-held TestFlight information. Manage those copies separately. Support, feedback, reports about an account and moderation records may remain while needed to resolve a problem, investigate repeat abuse, meet a legal obligation or handle a claim; when those reasons no longer apply, we delete or anonymize information we control. Provider logs and backups have separate retention, so deletion is not instantaneous in every backup.

Your choices and rights

Depending on the law that applies, you can request access, correction, deletion, restriction or portability of your personal information, and object to processing based on our legitimate interests. Email info@palettwo.com. We may ask for information needed to verify the request, but never your password or sign-in code.

You can stop optional recording or publishing, change device permissions, delete content or your account, and stop testing. These choices cannot recall copies already shared. If you believe a child has supplied personal information without appropriate authorization, contact us so we can investigate.

You may complain to the UK Information Commissioner’s Office or the relevant data-protection authority where you live. We will update this notice when our handling changes and provide additional notice of significant changes where appropriate.