Privacy policy

Effective 26 October 2026

Taide shows public-domain museum art and sets it as your wallpaper. No Taide account is needed. Your favourites, collections and location stay on your phone. We use RevenueCat to check Taide Pass access and manage purchases, crash reporting to fix problems, and separate choices for usage analytics and news notifications.

Who we are

Taide (app ID app.taide) is made by Utra Consulting (business ID 3438677-3), based in Joensuu, Finland. We decide how the little data the app handles is used, which makes us the "controller" under the EU's General Data Protection Regulation (GDPR).

Questions about privacy: support@taideapp.com. We answer within 30 days.

What Taide keeps, and where

The app keeps your saved art and settings on your phone. Hosting providers handle requests for art, and the services below process limited data for reliability, optional analytics and message delivery.

The app does not ask for your name, email, contacts or photos. Installation identifiers distinguish copies of the app; they are not Taide accounts. If you email support or join the waiting list, we receive your email address and message. Share images of an artwork are made on your phone and go only to the app you pick in Android's share sheet.

Your location

Taide uses your location only for the optional "Times of day" rotation, and only if you choose "Use my approximate location". It never leaves your phone.

• When we ask: only when you start Times of day, after explaining why. You can choose a city or fixed hours instead, which need no location.
• How precise: approximate location only, never precise or background location. Taide rounds it to about 10 km before keeping it, and keeps nothing finer.
• What it's for: working out sunrise, sunset and twilight where you are. The sums are done on your phone; your location is never sent to us or anyone else.
• How often: looked up again at most once a week, or when your phone's time zone changes, and only while you're using the app.
• Turning it off: Settings > Light for times of day > Forget location deletes it straight away. You can also withdraw the permission in Android's settings; Taide then uses fixed hours.

Art requests and service providers

To show art, the app asks our servers for artworks, searches and images. These art requests carry no Taide account or installation identifier, but include your IP address, which our providers can log for security and to keep the service running.

Search terms reach Supabase to find matching art and can appear with request details in its logs; we do not build a search profile. Our legal basis for art delivery and security is our legitimate interest in running a working, secure service (GDPR Article 6(1)(f)).

Google and PostHog process service data on our behalf under their data-processing terms. Google also handles technical service data, such as network requests, under its own terms. Google describes safeguards for international transfers in its Firebase privacy information, including the EU–US Data Privacy Framework. Our providers receive your transport IP address when you connect, even where we exclude it from analytics events.

Links to museum pages and Wikipedia open in your browser, where those sites' own privacy policies apply.

Now and then, after you've set a wallpaper or saved a share image, Taide may ask Google Play to show its rating prompt. Google Play decides whether it appears and handles any rating or review you give under Google's privacy policy. A review becomes a public Play Store review; during Play's closed testing it is sent to us privately instead. The app itself doesn't learn whether you rated it.

Taide Pass and purchases

Taide initializes RevenueCat when the app starts, even if you have not purchased a Pass. RevenueCat creates a random app user ID and receives technical information such as app and operating-system versions, locale, connection IP address and last-seen time. This ID is pseudonymous: it distinguishes an app installation without a Taide account, but purchase records can still be personal data.

If you purchase or restore a Pass, RevenueCat processes Google Play purchase tokens and purchase history, including product identifiers, purchase and renewal dates, prices and currency, expiration, cancellation or refund status, and the access those purchases grant. We can view this information in our purchase dashboard to provide support and understand purchase performance. Taide does not set your name, email address or advertising ID on your RevenueCat customer profile, or send it your collections, search text or location.

Google Play handles payment and its own account and billing information under Google's privacy policy. Taide does not receive your full payment-card details. RevenueCat acts as our processor under its Data Processing Addendum. Its infrastructure processes data in the United States; the addendum provides standard contractual clauses for relevant international transfers. See also RevenueCat's privacy information.

Our legal basis for processing needed to provide and restore purchased access is performance of the purchase contract (GDPR Article 6(1)(b)). Our legitimate interests (Article 6(1)(f)) cover checking access before purchase, preventing misuse and understanding purchase performance. Purchase-service processing is separate from optional PostHog usage analytics and does not stop when that analytics choice is off. You can use Taide's free features without buying a Pass.

Purchase records are kept as needed to maintain access and restoration, handle support, refunds and disputes, and meet applicable legal obligations. Uninstalling Taide does not erase these records or cancel a Google Play subscription. To request access or deletion, contact support@taideapp.com; we may ask for an order reference or purchase-service ID to locate the record. Do not send payment-card details or publish purchase tokens. We explain any records that must be retained and any effect deletion would have on restoring access. Google's own order records follow its retention rules.

Optional usage analytics

If you choose Allow in the usage analytics prompt, Taide sends selected events to PostHog: using Taide on a day (at most once a day, when you open the app or a rotation changes your wallpaper), opening an artwork, theme or artist page, previewing or setting a wallpaper, starting rotation, adding the museum placard widget, seeing and answering the Times of day or colour relay offer on the home page, opening a Taide notification, viewing the Pass offer, starting a store trial and completing a Pass purchase. These include artwork IDs, theme names used internally, screen choice, rotation source and frequency, which offer or kind of notification it was, the feature that opened the Pass offer, the plan purchased, timestamps and analytics-library metadata. Artist names are not sent. A random installation ID lets us recognise repeat use without a name or account.

We do not send search text, collection names, your saved collections, coordinates or purchase receipts in these events. Session replay, automatic screen tracking and advertising tracking are disabled. Taide excludes your real IP address from event properties and disables location enrichment; network infrastructure still receives your connection's IP address.

Our legal basis is your consent (GDPR Article 6(1)(a)). Analytics stays off until you allow it. Change your choice in Settings > Usage analytics. Choosing No thanks stops future events and deletes queued events on your phone, including offline events. It cannot recall a request already in transit or automatically erase events already received by PostHog. You can use the app without allowing analytics.

Crash reports

Configured release builds use Google Firebase Crashlytics automatically to diagnose crashes and unresponsive-app problems. Reports include error traces, app state, device and app information, and installation identifiers. Firebase's session information supports reliability statistics. Crash reporting is separate from your Usage analytics choice and your news-notification choice; debug builds do not send crash reports.

We do not attach your name, saved art or location to reports. Our legal basis is our legitimate interest in finding faults and maintaining a reliable app (GDPR Article 6(1)(f)). Google may process Firebase installation information before you turn on news notifications because crash reporting also uses Firebase services.

Optional news and testing updates

In Settings > News and testing updates, you can opt in to occasional artwork news and invitations to try features. Google Firebase Cloud Messaging uses an installation ID and a delivery token to reach this copy of the app, manages its updates-topic subscription, and processes app-version and SDK/device metadata. Our legal basis for sending these updates is your consent (GDPR Article 6(1)(a)).

This subscription does not send your favourites, collections, location or last-active time to Taide's backend. It includes anyone who opts in, rather than checking whether they are a Play tester. We do not use Firebase Analytics or export message-delivery metrics to BigQuery.

When updates are on, tap the News and testing updates switch to turn them off. Taide withdraws the updates choice, disables automatic messaging initialization and asks Firebase to delete this installation's delivery token. If that request fails, usually while offline, updates can stay on and the app shows an error; try again when connected. Taide also retries deletion of a token recreated by previously queued subscription work while updates are off. This control does not delete Firebase's installation ID, crash reports or other service data.

You can also block the updates channel in Android notification settings. Blocking takes effect on the phone. If the channel is blocked while the app's updates choice remains on, tapping News and testing updates opens Android settings. Taide reconciles the topic subscription when it next runs with a connection. Channel blocking or topic unsubscription alone does not delete the token, installation data or previous reports, or withdraw the app's updates choice.

The morning artwork-of-the-day notification is scheduled on your phone and has a separate setting. On the morning a new featured artist or theme arrives, Taide announces it instead of that day's highlight, after asking our servers what is showing; it has its own setting. If you start a Taide Pass trial, Taide reminds you 2 days before it renews, using the renewal date from RevenueCat. None of these use Firebase message delivery.

What we don't do

• No accounts or sign-in for app users.
• No ads, session replay or recording of your screen.
• No tracking across apps or websites, and no advertising ID.
• No selling or renting your data. Service providers process the limited data described above.

Permissions

Taide asks only for what its features need; the optional ones can be refused or withdrawn in Android's settings at any time.

Backups and deleting your data

You can delete Taide's data on this phone by uninstalling it, or with Android's Settings > Apps > Taide > Storage > Clear storage. This does not automatically delete data already received by our providers or copies in your Android backup.

If Android backup is on, your phone may copy Taide's saved data (favourites, collections, saved colours, settings, wallpaper history) to your own Google account, under Google's privacy terms. We can't see these backups. Your approximate location for Times of day is not included in backups or device transfer.

Analytics consent, its random ID and queued events are excluded from Android backup. The news opt-in and saved messaging enrollment/token preferences are also excluded from backup and device transfer. A reinstall requires new choices for these optional features.

Taide's local Pass-status cache is excluded from Android backup. Restore purchases with the Google Play account used to buy the Pass; neither clearing storage nor uninstalling cancels billing. Purchase-service records and deletion requests are described in Taide Pass and purchases.

Request logs at Supabase are deleted automatically after at most 7 days. We don't keep logs of image downloads from Cloudflare; Cloudflare handles its own network logs under its privacy policy. Because these logs hold no name or account, we generally can't match a log line to you.

Google's Firebase retention information says messaging installation IDs are retained until an API deletion request, after which removal from live and backup systems can take up to 180 days. Crashlytics starts removing crash data and associated identifiers after 90 days. Switching off a notification channel is not an API deletion request.

We keep PostHog events to assess feature use and retention during launch and subsequent product reviews, subject to our plan's event-retention period and deletion requests. Withdrawing consent does not delete received events automatically. For access or deletion requests, email support@taideapp.com. Because there is no account linking an email to an installation, we may need additional information to locate a record and will explain what we can identify and delete. Do not post delivery tokens publicly.

This website

taideapp.com is hosted on Cloudflare Pages. It sets no cookies, loads no fonts or scripts from other sites, and runs no analytics. Cloudflare sees your IP address when it delivers the pages, as any web host does.

The waiting list

When you submit the waiting-list form, with your consent we keep your email address, optional phone type, and the date and version of your consent in a private Cloudflare D1 database in the EU. We use your address for one launch email when Taide is out on Google Play. Your optional phone answer helps count interest in an iPhone version; that version hasn't been decided. Our legal basis is your consent (GDPR Article 6(1)(a)). We don't add you to any other list, and we delete addresses, phone answers and consent records after the launch email has gone out. We may keep anonymous totals.

To limit automated submissions, we keep a hashed network identifier and request count that expires after 10 minutes; expired counters are deleted on the next valid submission. This is based on our legitimate interest in preventing abuse. We do not log form contents or store your plain IP address in this database. Cloudflare still receives your IP address to deliver and protect the website.

Withdraw consent, request a copy or ask for deletion at any time by emailing support@taideapp.com. If you previously joined by email, that message arrived through Cloudflare Email Routing and is kept in our Gmail inbox under the same one-launch-email and deletion rules.

Your rights

Under the GDPR you can ask us to access, correct, delete or limit the use of data about you, request portability where it applies, and object to processing based on legitimate interests. You can withdraw consent for optional analytics or updates at any time without affecting earlier lawful processing. For data kept only on your phone, you control it directly; for anything else, write to support@taideapp.com.

If you think we've handled your data wrongly, you can complain to the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi) or to the authority where you live.

Children, changes and contact

Taide is for a general audience and doesn't knowingly collect data about children. Nude artworks are hidden by default and shown only if a user turns them on.

If this policy changes, we'll update the date at the top and, for significant changes, say so in the app before they take effect.

Contact: Utra Consulting, business ID 3438677-3, Sahamyllynkatu 56 c, 80170 Joensuu, Finland, support@taideapp.com.