Privacy Policy

The short version

Your content lives on your device and in your personal iCloud. If you have an Encore account, we also keep a backup of your Encore watch history with your account so your devices stay in step. To understand how our apps are used and make them better, we collect some usage information — in Encore, that includes your library and viewing activity. We do not sell your data, we do not run ads, and our apps contain no third-party analytics or advertising trackers; the only analytics are our own.

Who we are

Xandelea is an independent app studio operated by Peter Gray. For anything in this policy, contact us at help@xandelea.com.

This website

xandelea.com is a static site. It sets no cookies, runs no analytics, and collects no personal information. It is served by Cloudflare, which may process technical request data (such as your IP address) to deliver and secure the site.

Encore: TV & Movie Tracker

Your library lives on your device and in your iCloud. Your library — shows, movies, watch history, episode progress, ratings, and favorites — is stored on your device and synced across your devices through your personal iCloud account using Apple’s CloudKit. The app also keeps rotating local backups of this data on your device as extra protection.

Your watch history is backed up to your account. If you have an Encore account, a backup of your watch history — which episodes and movies you marked watched, rewatched, or unmarked, and when — is kept with your account on our servers, so every device you sign in on stays in step even if iCloud is delayed. It is used only to keep your own library in sync, is never visible to other users, and you can turn it off at any time in Settings → Encore Account Backup.

We collect library and viewing analytics. To understand what people watch and improve Encore, the app sends us information about your library and viewing activity — such as the titles you add, mark watched, rate, or favorite. This is associated with your account (or an app-generated identifier if you have no account), is used only for analytics and product decisions, is never sold, and is never shared with third parties or used for advertising. The app also sends basic sync diagnostics — an app-generated device identifier, the app version, sync status, and a short code summarizing your watch state (not the titles themselves) — so we can detect and fix sync problems.

Community features are opt-in. Encore works fully without an account. If you create one (with an email address and password, or Sign in with Apple), we store on our servers: your email address, username, display name, an avatar photo if you upload one, the people you follow, comments you post, and the titles you explicitly choose to share (your favorites and currently-watching picks). Other users can only ever see what you choose to share — never your watch history, episode progress, or watchlist — and you can hide any individual title from your profile.

Location is optional. If you use movie showtimes, the app can use your location (or a ZIP code you type) to find nearby theaters. Location is sent to our showtimes data provider to answer that one query; we do not store it on our servers.

Where server data lives. Community data and watch-history backups are stored with our hosting provider, Fly.io, in the United States, and transmitted over HTTPS. Passwords are stored only as salted hashes. Account emails (verification, password reset) are delivered via Postmark.

Catalog data comes from partners. Show and movie information is provided by TMDB, TVmaze, and JustWatch (via TMDB), and showtimes by MovieGlu. When the app fetches catalog data, those services receive the technical request (for example, the title being looked up). Encore is not endorsed or certified by TMDB.

Deleting your data. You can delete your community account at any time in Settings → Danger Zone → Delete Account, which removes your profile, follows, comments, shared items, avatar, watch-history backup, and the analytics and sync diagnostics tied to your account from our servers. “Delete All Tracked Items” erases your library from your devices, your iCloud, and your account’s watch-history backup. You can also email us and we will delete your account data.

Brick Tracker

Your collection lives on your device and in your iCloud. The sets you own and watch — along with purchase prices, purchase dates, condition, comments, and where each set is stored — are held on your device and synced across your devices through your personal iCloud account using Apple’s CloudKit. That information is never sent to our servers.

An account is optional. Brick Tracker is fully functional without one. Signing in enables market valuations for your sets. We use Sign in with Apple and do not request your name or email address; Apple gives us only an anonymous identifier that is unique to this app.

What we store if you sign in. Only the set numbers you track, whether you own or watch each one, the quantity, and how the set was added (search, barcode scan, or CSV import). This lets one valuation lookup serve every user tracking that set, and tells us which sets are being tracked overall. Purchase prices, purchase dates, comments, and storage locations never leave your device.

Where server data lives. With our hosting provider, Fly.io, in the United States, transmitted over HTTPS.

Catalog and pricing data comes from partners. Set details, images, and retirement dates are provided by Brickset. Resale valuations are derived from BrickLink sold-listing data, retrieved by our servers rather than by the app. Retail prices are read from each retailer’s own product page. Valuations are estimates, not appraisals. The term ‘BrickLink’ is a trademark of the LEGO Group BrickLink; Brick Tracker uses the BrickLink API but is not endorsed or certified by LEGO BrickLink, Inc., and is not affiliated with the LEGO Group.

Deleting your data. Settings → Brick Tracker Account → Delete Account removes everything we hold on our servers and signs you out; your collection on your devices and in your iCloud is unaffected. “Clear All Synced Data” erases the collection itself from your devices and your iCloud. You can also email us and we will delete your account data.

Split Photos

Your photos never leave your device. Split Photos has no servers and makes no network calls of its own. The photos and video clips you add to a collage, and the finished collages you export, are processed entirely on your device and are never uploaded to us or to anyone else. The one exception is not ours: if a clip you pick is stored in iCloud Photos rather than on your device, Apple’s Photos system downloads it for you so the app can use it.

How the app sees your photos. You choose photos through Apple’s system picker, which hands the app only the items you pick — it never gets access to the rest of your library. The one permission the app asks for is add-only access, requested the first time you save a collage so it can write the result to your camera roll.

Drafts stay on your device. Saving a draft keeps a copy of that collage — including the photos and clips in it — in the app’s private storage on your device. Deleting a draft deletes those copies. If you back up your device, drafts are included in that backup, which is handled by Apple, not by us.

No accounts, no analytics, no ads. Split Photos has no sign-in, collects no usage information, and contains no advertising or analytics SDKs. We receive nothing about how you use the app.

Split Pro is handled by Apple. The one-time Split Pro purchase is processed entirely by the App Store. We never see your payment details — the app only asks the App Store whether the unlock has been purchased on your Apple Account.

Deleting your data. We hold nothing to delete. Removing a draft in the app deletes it and its photos; deleting the app removes everything it stored.

SMS notifications

Xandelea, an independent studio operated by Peter Gray, provides a private SMS alert service that delivers home-automation notifications — such as water-leak, security, and equipment alerts — to the operator and members of their immediate household. Recipients opt in verbally, in person, and their mobile numbers are then entered manually by the operator. Numbers are never collected through this website, a web form, a mobile app, or any public sign-up, and are never purchased, rented, or obtained from a third party.

We do not share mobile numbers. Mobile numbers used for these alerts are never sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. No mobile information is shared with anyone for any purpose other than delivering the messages themselves, which is handled solely by our SMS carrier.

Message frequency. Messages are event-driven, so frequency varies — typically fewer than 10 messages per month. Message and data rates may apply.

Opting out. Reply STOP to any message to stop receiving them, or START to resume. Reply HELP for assistance, or email help@xandelea.com. Full terms are at xandelea.com/sms-terms.

Children

Our apps and website are not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

Changes to this policy

If we change this policy, we will update this page and the effective date above. Meaningful changes to how an app handles data will also be called out in that app’s release notes.

Contact

Questions, requests, or concerns: help@xandelea.com.