Privacy Policy

Last updated: 2026-10-21 · Effective: 2026-10-21

This Privacy Policy explains how Analogkit handles personal data when you use analogkit.app and the websites and web services that Analogkit operates and that link to this policy (the "Services"). By using the Services you agree to this policy. We will notify you at least 14 days before material changes take effect. Our iOS apps (such as Slow Tuner and CrownScribe) have their own privacy policies.

1. Who Is Responsible for Your Data

The data controller is the individual developer who operates Analogkit. The operator's legal name is on file with our payment partner Waffo Pancake and is available on request. Privacy contact: support@analogkit.app. We have not appointed a data protection officer, as we are not required to.

2. Personal Data We Collect

Data you give us

• Account: your email address; your name and profile picture if you provide them; whether your email address is verified.
• Sign in with Apple (if you use it): the user identifier Apple gives us and the email address Apple shares, which may be a private relay address.
• Purchases: order and transaction identifiers, the product bought, amount, currency, status and dates, as reported by our payment processor. We never receive or store full card numbers.
• Credits: your credit balance and a record of each credit grant, use and refund, with its time and the related task.
• Content you submit to AI features: your inputs and the outputs generated for you.
• Messages: what you write when you contact support.

Data collected automatically

• Sign-in and security: one-time sign-in codes and links, session tokens, and the IP address and browser/device user agent of the device that signed in; short-lived counters per IP address to limit abuse.
• Server logs: IP address, user agent, requested URL, time and response status, recorded by our hosting provider.

We do not collect location data beyond what can be inferred from your IP address, and we do not use analytics or advertising trackers.

3. Why We Use Your Data and Our Legal Bases

Where the law of your country requires consent (for example, under China's Personal Information Protection Law), we rely on your consent, given when you use the Services after reading this policy. We may produce aggregated or de-identified statistics that cannot identify you.

4. Cookies and Similar Technologies

We only use cookies and browser storage that are strictly necessary: to keep you signed in and to protect your session. They cannot be turned off without breaking sign-in. We do not use analytics, advertising or cross-site tracking cookies. If we ever add an analytics tool, we will name it here, with a link to its privacy policy, before using it.

5. Who We Share Data With

We do not sell your personal data. We share it only as follows:

Service providers may only use the data to provide their service to us and are bound by confidentiality and data protection terms. We may also disclose data when required by law or a valid legal request, to protect rights and safety, in connection with a transfer of the business (you will be notified), or with your consent.

6. Security

• All connections use TLS encryption; our database is encrypted at rest by our provider.
• Secrets such as third-party API keys are stored encrypted (AES-256-GCM); backups are encrypted before upload.
• Access to production systems is limited to the operator.
• If a personal data breach is likely to affect you, we will notify you and the relevant authority as required, within 72 hours of becoming aware of it.

7. How Long We Keep Data

Waffo Pancake keeps its own transaction records as required by law; see its privacy policy.

8. Your Rights

Depending on where you live, you can ask us to: access your data; correct it; delete it; restrict or object to processing; receive a portable copy; and withdraw consent at any time (this does not affect earlier processing). You can delete your account yourself on the account page. For other requests email support@analogkit.app from your account email; we respond within 15 business days and in any case within one month. You also have the right to complain to a data protection authority, for example the authority in your EU country or the cyberspace administration in mainland China.

9. Marketing Emails

We only send emails needed to provide the Services, such as sign-in codes, receipts (sent by Waffo Pancake) and important notices about your account or these policies. We will send marketing only if you opt in, and every marketing email will have an unsubscribe link. Unsubscribing does not stop the necessary emails above.

10. International Transfers

Our servers and service providers are mainly in the United States. If you use the Services from elsewhere, including mainland China or the European Economic Area, your data is transferred to and processed in the United States. Where required, we rely on safeguards such as the European Commission's Standard Contractual Clauses in our providers' data processing terms. If you are in mainland China, by using the Services you separately consent to the transfer described in this section.

11. Children

The Services are intended for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has given us data, contact us and we will delete it promptly.

12. Third-Party Links and Services

This policy covers only data we collect. Websites and services we link to, including Waffo Pancake's checkout, Apple and AI providers, have their own privacy practices, for which we are not responsible.

13. Changes to This Policy

We will notify you by email or on the Services at least 14 days before material changes take effect and update the "Last updated" date above.

14. Contact Us

Privacy and support: support@analogkit.app. Data controller: the individual developer who operates Analogkit. We reply within 2 business days (Monday to Friday, 10:00–18:00, China Standard Time, UTC+8).