ThiColor Privacy Policy
Last updated: May 25, 2026
We ("we", "us", or "ThiColor") take user privacy seriously. This Privacy Policy (the "Policy") explains what information the ThiColor iOS app (the "App") collects, uses, stores, and shares while you use it, and what rights you have over that information.
Please read this Policy carefully before using the App. If you do not agree with any part of it, please stop using the App.
1. Who we are
- Service provider: Beijing Shuishan Shiliu Technology Co., Ltd. (北京水山识流科技有限责任公司)
- Contact email: support@thiflow.com
- App name: ThiColor (Chinese: 识色板)
- App Bundle ID:
com.thiflow.thecolor
For any matter related to this Policy or to the processing of personal information, please reach us at the email above.
2. What personal information we process
We follow the principle of minimum necessary processing — we only handle information that is required to deliver the App's functionality. The App processes:
2.1 When you use "Sign in with Apple"
- Apple user identifier
(
userIdentifier): an anonymous, app-scoped ID issued by Apple to identify your account. - Name (first authorization only): the name you optionally provide in Apple's sign-in sheet.
- Email address (first authorization only): your real email or Apple's "Hide My Email" relay address.
These items are obtained only when you actively tap "Sign in with Apple" and confirm in the Apple sheet. You can use the App without signing in — all color-picking, saving, and core features work in signed-out mode (subject to the daily free quota).
2.2 When you subscribe
- Purchase records: we read your current subscription state (monthly/yearly, active or not, expiration date) through Apple's StoreKit framework. We never see your payment credentials or credit-card data — all payment is handled entirely by Apple.
2.3 When you use App features
- Daily pick counter: stored only on your device, used to enforce the "5 picks per day for free users" rule. Never uploaded to a server.
- Saved recipes and boards: stored only on your device. Never uploaded to a server.
- Photos / camera content: when you choose to sample colors from your photo library or camera, the App processes the selected pixels locally on your device to extract color. Original images are never stored, uploaded, or sent to any third party.
2.4 What we do not collect
To prevent any ambiguity, we explicitly state that the App does not collect:
- Your location
- Your contacts, call history, or messages
- Device-level advertising identifiers (IDFA, IDFV, etc.)
- Browsing history or app-usage analytics
- Activity outside the App
- Any data used for advertising or third-party marketing
3. How we use this information
The sole purpose of processing the items above is to deliver the App's core functionality:
| Information | Purpose |
|---|---|
| Apple user identifier | Identify your account, associate subscription state |
| Name, email | Display in the "Mine" tab so you can tell which account is signed in |
| Purchase records | Determine whether you have an active subscription, unlock member features |
| Daily pick counter | Enforce the free quota |
| Recipes and boards | Power the "Save recipe" feature |
We do not use the above for:
- Advertising
- User profiling or behavioral analytics
- Sale or rental to any third party
4. Storage and retention
4.1 Where data is stored
- Apple user identifier: stored in iOS Keychain on your device (Apple's official secure storage).
- Cached name and email: stored in UserDefaults on your device, used only to re-display your identity after sign-in so you are not shown as "Guest".
- Daily pick counter, saved recipes: stored in UserDefaults / FileManager on your device.
- Purchase records: queried live via Apple StoreKit; not persisted inside the App.
As of this Policy's update date, the App has no backend server of its own — all data above resides solely on your local device.
4.2 How long we keep it
- Local data lives on your device until you delete the App or manually sign out.
- Signing out immediately clears account information from local Keychain.
- Deleting the App clears all local data (except purchase records, which follow your Apple ID and can be recovered via "Restore Purchases" after re-installation).
5. Sharing and disclosure
5.1 Interactions with Apple
The App exchanges data with the following Apple services:
- Sign in with Apple: used for authentication. Governed by Apple's Privacy Policy.
- StoreKit / App Store: used for subscription purchase and state queries. Governed by Apple's Privacy Policy.
We recommend reviewing the Apple Privacy Policy.
5.2 Other third parties
The App does not currently integrate any third-party analytics, ads, push, or social SDK.
5.3 Legal disclosure
Unless explicitly required by law, or necessary to protect our or others' lawful interests, we will not proactively disclose your information to any government agency, third-party organization, or individual.
5.4 Cross-border transfer
The App does not transfer any personal information across borders. (Data exchanged with Apple services is handled by Apple directly and is outside our control.)
6. Your rights
You have the following rights over your personal information:
| Right | How to exercise |
|---|---|
| Access, copy | View in the App's "Mine" tab; for export, contact us by email |
| Correct | Re-authorize "Sign in with Apple" to refresh name/email |
| Delete | "Sign out" in the App + delete the App clears all local data; for further help, contact us by email |
| Withdraw consent | Sign out; we will no longer process any account-related data |
| Manage subscriptions | Use iOS Settings → Apple ID → Subscriptions |
| Complain | Email us at support@thiflow.com; if you are unsatisfied with the response, you may report to your local data-protection authority |
We commit to responding to your requests within 15 business days.
7. Children's privacy
The App is intended for users 17 years of age or older and for art practitioners. We do not knowingly collect information from minors. If you are a guardian and discover that a minor has registered or used the App without your consent, please contact us to delete the relevant information.
8. Data security
We protect your information through:
- Account identifier stored in iOS Keychain (hardware-backed encryption)
- All communication between the App and Apple services uses HTTPS / Apple encrypted channels
- No sensitive credential is stored locally in plain text
That said, please understand that no internet environment is 100% secure. We recommend keeping your Apple ID and device unlock passcode safe.
9. Updates to this Policy
We may update this Policy based on legal requirements or App feature changes. For material updates, we will notify you through one or more of:
- In-app prompt
- App Store version release notes
- The "Last updated" date at the top of this page
Continued use of the App after such updates constitutes acceptance of the revised Policy. If you do not agree, please stop using the App.
10. Contact us
For any question, comment, or complaint regarding this Policy:
- Email: support@thiflow.com
- Company: Beijing Shuishan Shiliu Technology Co., Ltd.
We take every message seriously.