Privacy Policy
Version 1.1 · Effective 26 October 2026
This policy covers every app SEICHE LAB publishes. Jump to yours:
Who is responsible for your data
- Controller
- SEICHE LAB, MCHJ — a company registered in the Republic of Uzbekistan
- Address
- 65-j, Pichoqchi MFY, Xiyobon Str. MARGILAN, Fergana Region, 151100 Uzbekistan
- Your data
- privacy@seichelab.com
- Phone
- +998 50 796 17 53
- EU representative
- Not yet appointed. Until we name one, write to privacy@seichelab.com — we answer every request ourselves.
- UK representative
- Not yet appointed. Until we name one, write to privacy@seichelab.com.
1. What this policy covers
This policy covers our apps on the App Store, each from the day SEICHE LAB is shown as its seller. Until then, the policy linked on that app’s App Store page applies.
- Studio Brushes for Procreate — section 4.1
- Color Widgets & Themes: Wiggle — section 4.3
- Foxy Puzzle — section 4.2 and section 9, our notice to parents
- Larkabout — has its own privacy policy at parentapp.net/privacy; SEICHE LAB is its controller.
Studio Brushes and Wiggle changed hands. Until 22 October 2026 they were published by another developer. From that day, SEICHE LAB is responsible for them. The previous publisher passed us the apps’ subscription records, kept by Apphud, so your subscription keeps working. We use them only as sections 4.1 and 4.3 say.
It also covers this website and the emails you send us. This website sets no cookies, runs no scripts and collects nothing about you.
2. Your rights — and how to use them
You can ask us to show you your data, correct it, delete it, restrict what we do with it, or send it to you in a portable form. Where we rely on your consent, you can withdraw it at any time; that does not make what we did before unlawful.
You have the right to object. Where we use your data on the basis of our legitimate interests (section 4 says where), you can object at any time, and we will stop unless we have compelling grounds that override yours.
- Delete your data: follow the steps for your app on seichelab.com/data-deletion.
- Anything else: email privacy@seichelab.com. Name the app. We answer within one month.
We make no decisions about you by automated means that have a legal or similarly significant effect on you.
3. How to complain
Tell us first — most problems are fixed by one email. You can also complain to a data protection authority:
- Poland: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa — uodo.gov.pl
- United Kingdom: Information Commissioner’s Office (ICO) — ico.org.uk/make-a-complaint
- Or the authority in the country where you live.
4. What each app collects, and why
Each table shows what the app collects, what for, who handles it with us, the legal ground (for people in the EU and UK), and how long it is kept. Providers are described in section 5.
4.1 Studio Brushes for Procreate
No account, no sign-in. The app never asks for your name or email address. If you save a pattern to Photos, it asks only to add images to your library — it cannot see your photos.
Tracking. Shortly after you first open the app, iOS asks whether Studio Brushes may track you. Your answer decides whether your device’s advertising identifier (IDFA) is shared. The app events in this table are sent either way.
| What for | Data | Who handles it | Legal ground | How long |
|---|---|---|---|---|
| Deliver brushes, fonts and patterns to your device | Your device’s IP address and technical request data; a Firebase installation identifier | Google (Firebase Storage, Remote Config) | Performance of the service you asked for — Art. 6(1)(b) | Installation identifier: until you ask us to delete it; Google then removes it within 180 days |
| Unlock and restore your subscription; see which ad or link led to it | Apphud user and device identifiers; your subscription status and purchase records from Apple; attribution data from Branch and Meta | Apphud; Apple handles payment | Your subscription: performance of the service you bought — Art. 6(1)(b). Which ad or link led to it: see “Measure our ads” below | Apphud: for as long as you have an active or restorable subscription, then deleted on request (section 2) |
| Find and fix crashes | Device model, iOS version, crash trace, installation identifiers | Google (Firebase Crashlytics) | Our legitimate interest in a working app — Art. 6(1)(f) | 90 days, after which Google starts deleting them |
| Understand how the app is used | These events: opening the app (with your plan — free, trial, paid or cancelled), a paywall shown, a purchase started, completed, cancelled or failed, a pack downloaded (with its name). Linked to your Apphud identifier, with device and app information. Google Analytics also records installs, sessions and purchases automatically | Amplitude; Google (Google Analytics for Firebase) | Our legitimate interest in seeing how the app is used, so we can fix and improve it — Art. 6(1)(f). The app sends these events without asking you first. You can ask us to delete what we hold — see section 2 | For as long as we need it to understand and improve the app, then deleted; Google Analytics and Amplitude keep it under their own retention settings |
| Measure our ads | The same events, plus Meta’s automatically logged app events (such as app opens) and device information; the IDFA only if you tapped “Allow”. Which ad or link led to the install | Meta; Branch (see “Meta and advertising”) | Our legitimate interest in measuring our ads — Art. 6(1)(f). The app sends these events whatever you answer to the tracking prompt; your answer decides only whether the IDFA is included | Meta: up to two years. Branch: identifiable logs up to 14 days, pseudonymised logs up to 12 months, device-matching data until 30 days of inactivity (90 days for some attribution products) |
| Answer you when you write to us | Your email address and message. The in-app email also fills in your device name, iOS and app version, language and region — and the IDFA if you allowed tracking. Delete any line before you send | Google Workspace (our mailbox) | Our legitimate interest in helping you — Art. 6(1)(f) | Two years after our last message, then deleted |
Is any of this required? No. You don’t give us anything to use the app; purchases go through Apple.
4.2 Foxy Puzzle
Foxy Puzzle is made for children. What it collects, who receives it and how to delete it are in section 9 — our notice to parents.
4.3 Color Widgets & Themes: Wiggle
No account, no sign-in. Your widgets, icons, themes — and any photo you put in a widget — are stored on your iPhone. To show icons for apps you have, Wiggle checks on your iPhone which of about 75 popular apps are installed; that check never leaves your phone. Saving a wallpaper asks only to add images to Photos — the app can’t see your library.
Tracking. About a second after you open the app, iOS asks whether Wiggle may track you. Your answer decides whether your advertising identifier (IDFA) is shared. The events below are sent to Meta and Branch from the moment you open the app and whatever you answer — without the IDFA unless you tapped “Allow”.
| What for | Data | Who handles it | Legal ground | How long |
|---|---|---|---|---|
| Deliver wallpapers, widgets, icons, themes and charging animations | Your device’s IP address and technical request data; a Firebase installation identifier | Google (Firebase Remote Config); the content server that hosts our wallpapers and animations — we are confirming its operator and will name it here | Performance of the service you asked for — Art. 6(1)(b) | Installation identifier: until we ask Google to delete it; Google then removes it within 180 days. Content server: technical logs only, for as long as needed to run the service |
| Unlock and restore your subscription; see which ad or link led to it | Apphud user and device identifiers; your device’s vendor identifier (IDFV), and the IDFA if you tapped “Allow”; subscription status and purchase records from Apple; device language, region, time zone, model, iOS and app version, IP address; which test version of the app you see; attribution data from Branch | Apphud; Apple handles payment | Your subscription: performance of the service you bought — Art. 6(1)(b). Which ad or link led to it: see “Measure our ads” below | Apphud: for as long as you have an active or restorable subscription, then deleted on request (section 2) |
| Find and fix crashes | Device model, iOS version, crash trace, installation identifiers | Google (Firebase Crashlytics) | Our legitimate interest in a working app — Art. 6(1)(f) | 90 days, after which Google starts deleting them |
| Understand how the app is used | Events about what you open, set, swipe and close — wallpapers, widgets, icons, animations and tutorials, with their names; onboarding screens; paywalls shown, closed and tapped; purchases started, completed, cancelled or failed (with the plan, whether it was a trial, and the error); rating prompts. Also whether you allowed tracking, whether your phone is charging, and whether you subscribe. Linked to your Apphud identifier and IDFV, with device model, carrier, iOS and app version, language, and the city and country Amplitude works out from your IP address. Google Analytics gets the purchase events and also records installs, sessions and purchases automatically | Amplitude; Google (Google Analytics for Firebase) | Our legitimate interest in seeing how the app is used, so we can fix and improve it — Art. 6(1)(f). The app sends these events without asking you first. You can ask us to delete what we hold — see section 2 | For as long as we need it to understand and improve the app, then deleted; Google Analytics and Amplitude keep it under their own retention settings |
| Measure our ads | Meta: app installs, app launches and in-app purchases, logged automatically, with an app-specific ID and device information; the IDFA only if you tapped “Allow”. Branch: each app session and, when you subscribe, the purchase (plan, price, currency and Apple transaction IDs), with your IDFV and Apphud device identifier; the IDFA only if you tapped “Allow” | Meta; Branch (see “Meta and advertising”) | Our legitimate interest in measuring our ads — Art. 6(1)(f). The app sends these events whatever you answer to the tracking prompt; your answer decides only whether the IDFA is included | Meta: up to two years. Branch: identifiable logs up to 14 days, pseudonymised logs up to 12 months, device-matching data until 30 days of inactivity (90 days for some attribution products) |
| Answer you when you write to us | Your email address and message. The in-app email also fills in your device type, iOS and app version, language and region — and the IDFA if you allowed tracking. Delete any line before you send | Google Workspace (our mailbox) | Our legitimate interest in helping you — Art. 6(1)(f) | Two years after our last message, then deleted |
Is any of this required? No. You don’t give us anything to use the app; purchases go through Apple. Turn tracking off at any time: iPhone Settings → Privacy & Security → Tracking.
4.4 Larkabout
Larkabout has its own privacy policy: parentapp.net/privacy. SEICHE LAB is its controller.
5. Who else receives data
We do not sell your data. Only the providers below receive it, and only for the purposes in section 4.
| Provider | Role | Where |
|---|---|---|
| Apple | Independent controller for payments | Apple’s infrastructure |
| Apphud | Our processor — subscriptions | USA |
| Google — Firebase (Storage, Remote Config, Crashlytics, Google Analytics) | Our processor | USA and Google’s infrastructure |
| Amplitude | Our processor — analytics | USA |
| Branch | Our processor — install attribution | USA |
| Meta Platforms Ireland | See “Meta and advertising” | Ireland and Meta’s infrastructure |
| Content server for Wiggle (wallpapers, widgets, animations) | Our processor — content delivery; operator being confirmed | Being confirmed |
| Google Workspace | Our processor — our mailbox | Google’s infrastructure |
Google Analytics. Studio Brushes and Wiggle use Google Analytics for Firebase. See how Google uses information from sites or apps that use its services. Firebase Crashlytics reports are disclosed to and processed by Google.
Meta and advertising
In Studio Brushes and Wiggle, we may collect and share with third parties, including Meta, information from our app and other apps through technologies from third parties, including Meta. These third parties, including Meta, use that information to provide measurement services and to target and deliver ads.
Opt out:
- Turn off tracking for the app: iPhone Settings → Privacy & Security → Tracking. Your advertising identifier is then not shared. The app still sends the events in its section (4.1 or 4.3) to Meta, without it.
- Control how Meta uses information for ads: see the Meta Privacy Policy.
Who is responsible. For collecting these events in the app and sending them to Meta, we and Meta Platforms Ireland Limited are joint controllers under Article 26 GDPR. Under Meta’s Controller Addendum, we are responsible for collecting and sending the events lawfully and for telling you about it; Meta Platforms Ireland is responsible for your rights over the data once it holds it. When Meta measures our ads, it processes the events on our behalf. For its own purposes, Meta is an independent controller under the Meta Privacy Policy. To use your rights against Meta, contact Meta directly — or write to us and we pass your request to Meta within seven calendar days.
6. Data outside your country
SEICHE LAB is based in Uzbekistan, outside the EU and the UK. There is no EU or UK adequacy decision for Uzbekistan. When you use our apps, you give your data to us directly, and the EU and UK data protection rules apply to us as they would to a company based there.
We use the providers in section 5 to run our apps. Some of them process data in the United States. This is how that data stays protected:
- Google (Firebase, Google Analytics, Google Workspace), Amplitude and Branch are certified under the EU-U.S. Data Privacy Framework and its UK Extension, which the European Commission and the UK recognise as giving adequate protection.
- Apphud: the European Commission’s Standard Contractual Clauses and the UK Addendum, which are part of Apphud’s data processing terms.
- Meta Platforms Ireland is in the EU.
Email privacy@seichelab.com for a copy of these safeguards.
7. How long we keep data
We keep data only as long as section 4 says for each app. When a period ends, the data is deleted or made anonymous.
8. Security
Our apps talk to their providers over encrypted connections. Only the people who build and run our apps can reach the provider accounts that hold your data.
9. Children’s privacy — Foxy Puzzle
Foxy Puzzle is made for children. This is our notice to parents under the US Children’s Online Privacy Protection Act (COPPA) and the data protection laws of the EU and UK. Our other apps — Studio Brushes for Procreate, Color Widgets & Themes: Wiggle and Larkabout — are for a general audience and are not directed at children.
Who is responsible
SEICHE LAB, MCHJ, 65-j, Pichoqchi MFY, Xiyobon Str. MARGILAN, Fergana Region, 151100 Uzbekistan · +998 50 796 17 53 · privacy@seichelab.com. We answer every parent’s question about Foxy Puzzle ourselves. No third party handles data for Foxy Puzzle: the app contains no analytics, advertising, attribution or tracking code.
What Foxy Puzzle never asks for
No name, email, birthday, voice, location or account. Nothing a child does in the app can be made public. The app never asks to track and never shows ads.
Your photos stay on the device. With Foxy Premium you can turn a photo into a puzzle. You pick it in iOS’s photo picker, so the app sees only that one photo. The puzzle is saved on the device and never uploaded.
What leaves the device
Nothing goes to us. Foxy Puzzle has no servers of its own and sends us no data about the child or the device. Puzzles, progress, settings and photo puzzles are stored on the device until you delete the app.
The only connection the app makes is to Apple, to unlock and restore Foxy Premium: Apple processes the purchase under the parent’s Apple Account and under Apple’s privacy policy; the app reads the purchase status from Apple on the device. We receive no personal data from that.
Parents: review, delete, or stop collection
Because nothing is collected from the child, there is nothing we hold to show or delete. To stop everything: delete Foxy Puzzle from the device — the puzzles, progress and photo puzzles stored on it go with it. Apple keeps its own record of your purchase under Apple’s policy; manage it in your Apple Account.
Questions: email privacy@seichelab.com with the subject “Foxy Puzzle — parent request”. Don’t send your child’s name — we don’t need it. We answer within one month. Step-by-step: seichelab.com/data-deletion.
10. EU and UK
The legal grounds are in each table in section 4. Once we appoint our representatives in the EU and the UK, they are named at the top of this page.
11. Changes to this policy
This page carries a version number and a date. Before an important change takes effect — a new provider, a new purpose, a new app — we update this page. Where a change touches a permission you gave, we ask you again in the app.
Version 1.1 — 26 October 2026. Foxy Puzzle no longer uses any third-party service: section 9 now says that nothing leaves the device except the purchase, which Apple processes. Section 4.4 and Part B4 of the Terms point to Larkabout’s own policy and terms at parentapp.net (23 October 2026).
12. Contact
Your data: privacy@seichelab.com · Everything else: seichelab.com/support