YOUR DATA, EXPLAINED
Privacy policy.
This policy explains how My Collection List and this website handle information. My Collection List is a private collection journal for saving photos, notes, ratings, and custom details about the things you collect.
1. Information you choose to save
Your journal can include collection names, custom sections and fields, entries, notes, tags, ratings, dates, cover photos, and entry photos. Sign-in is required to access and save collections. The app keeps a separate local cache for each account on your iPhone. Signing out hides the journal and clears the sign-in session; it does not erase all cached files. Existing device-only journals can be explicitly imported after sign-in.
2. Account and cloud storage
The current app supports Sign in with Apple. We use the account identifier and the email address Apple supplies, which may be a private-relay address, to authenticate you. Authentication and cloud journal storage use Supabase. Google sign-in is not currently enabled.
When you change your journal, it sends changed collection and entry records and new photo files through our Cloudflare API to Supabase. Journal metadata and private photos are stored separately. Offline changes remain in your account’s local cache and retry when connected. Conflicting changes from another device require review. Account-scoped controls are designed to restrict access to your own journal. These backups are not end-to-end encrypted.
3. Optional AI photo filling
When you choose Fill from photo and confirm Yes, selected entry photos and the field definitions and instructions you provide are sent through our Cloudflare API to OpenAI. OpenAI generates suggested values for the fields you enabled. You can review and edit them before saving. Existing values and manual fields are not overwritten by suggestions.
Choosing No skips the AI scan request; the photo can still be saved in your entry and cloud journal. You can enter details manually instead. Do not include unnecessary personal or sensitive information in photos or scan instructions. AI results may be inaccurate.
4. AI help
When you tap Send in Ask about the app, your question and up to three recent exchanges from the open conversation are sent through our Cloudflare API to OpenAI to generate app instructions. Your collections, entry photos, and account details are not attached to help requests. Messages are held in memory while the help screen is open and are not saved in your journal. Avoid including private information in your questions. AI answers may be mistaken.
OpenAI and other providers may retain operational, security, or abuse-prevention information under their applicable policies and service terms. Completing a request does not mean all provider records are immediately deleted.
5. Subscriptions
Apple processes optional My Collection List Plus purchases. The app checks Apple-verified transaction and subscription status to unlock Plus. We do not receive your payment-card details. Manage or cancel subscriptions through Apple using Cancel subscription in Account or iPhone Settings → your name → Subscriptions. Canceling does not automatically delete your account or journal. Account deletion does not cancel Apple billing.
6. Service providers and website visits
Our current providers include Apple for sign-in and purchases, Supabase for authentication and journal storage, Cloudflare for API delivery and rate limiting, OpenAI for requested AI photo filling and help, and OpenAI Sites and its hosting infrastructure for this website. Providers may process connection information, such as IP addresses, request details, timestamps, and security information needed to operate and protect their services. Processing may take place outside your country.
This website does not request access to your app journal, accept photo uploads, or provide an app-account login. Its examples are illustrative. Email links open your email application; any information you email us is used to handle your request and related support records.
The current app and website do not include advertising, a third-party behavioral tracking SDK, or a product-analytics SDK. We do not sell your private journal or use it for advertising. If data uses change, we will update disclosures and obtain permission where required before the new processing begins.
Provider policies: Apple, Supabase, Cloudflare, and OpenAI.
7. Retention and deletion
We keep active account and journal data while you use the service. Deleting a collection removes it and its entries from the active journal when the change syncs. Older unreferenced photo files, imported device journals, and conflict recovery copies may remain until account deletion or local cleanup. Signing out or uninstalling the app does not delete cloud data.
Use Account → Delete account for permanent account deletion. The process revokes linked Apple authorization, removes active cloud journal records and private photo files, and deletes this account’s journal, media, and recovery files from the iPhone completing deletion. Other offline devices may retain local copies until they reconnect or their local data is removed. Interrupted deletion can be resumed in the app.
Provider backups, security records, support correspondence, and information required for legal obligations may remain for the period needed for those purposes, according to applicable provider retention practices and legal requirements. We do not claim immediate deletion from every backup. See account-deletion instructions.
8. Your choices and privacy requests
You can review or edit your journal in the app, decline optional AI processing, delete individual collections or your account, and manage your Apple subscription separately. To request access, correction, deletion, or other applicable privacy rights, email hello@skylearningstudio.com. We may verify ownership before acting on an account request. Available rights and response requirements depend on where you live.
9. Security
The app uses HTTPS, account authentication, account-scoped database and storage policies, protected local files, and iOS session storage. Service API credentials are kept on the server rather than in the app. No system can guarantee complete security.
10. Children
My Collection List is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and take appropriate action. Follow the age requirements of your Apple account and local law.
11. Changes and contact
We may update this policy as the service changes. The effective date appears above. Material changes will be explained before changed processing begins, with additional permission where required.
Rock Castle Solutions LLC
hello@skylearningstudio.com