This Privacy Policy describes how blinkingthings ("we," "us," or "our") collects, uses, and protects information when you use the Spectacle iOS application ("Spectacle" or the "App"). We have designed Spectacle to collect as little personal data as possible, and we do not sell your data or share it for advertising.
Account information. When you sign in to Spectacle, we use Sign in with Apple. Apple shares with us either your real email address or a private relay email address, depending on the choice you make at sign-in. We store this email address and the Apple-issued user identifier in our database so that we can authenticate you and associate your projects with your account. You may optionally provide a display name.
Project data. When you save a project, we store the cabinet specifications, screen configurations, optional project name, and any reference photo you choose to attach. Reference photos are stored in a private cloud storage bucket and are accessible only to you (and to our backend systems when responding to your requests). We do not analyze the contents of your photos or projects.
LED.FYI account link (optional). If you choose to link a LED.FYI subscription to unlock Pro features, we store a reference connecting your Spectacle account to your LED.FYI account so that we can verify your subscription status. We do not receive your LED.FYI password or payment details. You can disconnect this link at any time by deleting your account.
Purchases. If you purchase Spectacle Pro through the App Store, Apple processes the transaction and sends us a signed receipt confirming the purchase. We store the verified purchase status on our servers so that your Pro entitlement is available across your devices when you sign in. We do not receive your credit card number, billing address, or any other payment information — that is handled entirely by Apple.
Session and authentication tokens. Our backend issues short-lived authentication tokens so the app can communicate securely with our servers. These are stored on your device and refreshed as needed.
We use the information we collect only to:
We do not use your data for marketing or advertising, and we do not train machine-learning models on the contents of your projects or photos.
We rely on a small number of trusted service providers to operate Spectacle:
These providers process data on our behalf under their own privacy and security commitments. We do not share your data with any party for advertising or marketing purposes.
You have the following rights regarding your personal data:
We will respond to verifiable requests within 30 days. We may need to verify your identity (typically by confirming you can sign in to the account in question) before acting on a request.
If you are located in the EEA, the UK, or Switzerland, the legal bases for our processing of your personal data are:
You have the right to lodge a complaint with your local data protection authority. Data is transferred to and stored in the United States; we rely on the Standard Contractual Clauses (or equivalent safeguards) maintained by our service providers for any such transfers.
In the past 12 months, we have collected the categories of personal information described in the "Information We Collect" section. We collect this information directly from you for the business purpose of providing the app. We do not sell or share your personal information for cross-context behavioral advertising, and we do not use sensitive personal information for purposes other than those permitted under the CCPA. California residents have the right to know, the right to delete, the right to correct, and the right to non-discrimination for exercising these rights. To exercise these rights, use the in-app deletion flow or email info@blinkingthings.com.
We retain your account and project data for as long as your account is active. When you delete your account, we delete your personal data from our active systems immediately. Backups containing deleted data are overwritten on our provider's standard backup rotation (typically within 30 days). We may retain a minimal record of deletion requests (timestamp, request ID, and an anonymized counter of records deleted) for audit and compliance purposes; this record does not contain content from your projects.
All network traffic between Spectacle and our backend is encrypted using TLS. Database access is protected by row-level security policies that ensure each user can only read and write their own records. Photo storage uses a private (non-public) bucket. Authentication is handled by Apple via Sign in with Apple, so we never see, store, or process passwords. Access to production systems is limited to authorized personnel using strong authentication. No system is perfectly secure; in the unlikely event of a data breach affecting your information, we will notify you and the appropriate authorities as required by law.
Spectacle is a professional tool intended for users 13 years of age and older (16 in jurisdictions where that is the relevant minimum). We do not knowingly collect personal information from children under these ages. If you believe a child has provided us with personal information, please contact us and we will delete it.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. If we make a material change, we will provide additional notice (for example, an in-app notice or an email). Continued use of Spectacle after a change indicates acceptance of the updated policy.
If you have questions about this Privacy Policy or want to exercise any of your rights, contact us at info@blinkingthings.com.
© blinkingthings. All rights reserved.