Privacy Policy
Last updated: March 2026
1. Who We Are
Enshryned is operated by Silvan Pachlatko, based in Switzerland. For privacy questions, contact us at support@enshryned.com.
2. Data We Collect
| Account data | Email, display name, username, profile photo. |
| Content | Photos, miniature descriptions, paint recipes, project notes, posts. |
| Beta signup | Platform account email for beta access, selected platform, optional comments (website only). |
| Automatic | Device type, OS version, app version, crash logs. No advertising IDs. |
3. How We Use Your Data
- To provide the app and its features.
- To display your posts to other users.
- To moderate content and enforce our Community Guidelines (including automated image analysis via Google Cloud Vision).
- To notify beta testers when access is available.
- To improve the app based on crash logs and aggregated usage patterns.
We do not use your data for advertising, profiling, or AI training.
4. Legal Basis for Processing
We process your data on the following legal grounds (GDPR Art. 6):
- Contract: Processing necessary to provide the app and its features (account management, content storage, community feed).
- Legitimate interest: Processing necessary for security, content moderation, abuse prevention, and service improvement (crash logs, automated image analysis).
- Consent: Beta signup, optional profile information. You may withdraw consent at any time by deleting your account or contacting us.
5. Data Storage & Security
Your data is stored on Google Firebase (Google Cloud infrastructure), with encryption in transit and at rest. While we use industry-standard security measures, no system is 100% secure.
Data Retention
Active data (account, content, posts) is retained for as long as your account exists. When you delete your account, all data is permanently and immediately removed. Crash logs are retained for 90 days.
International Data Transfers
Google Cloud infrastructure may process data in the United States and other countries outside the EEA/Switzerland. These transfers are covered by Google’s Data Processing Agreement (DPA) and EU Standard Contractual Clauses (SCCs), ensuring an adequate level of data protection.
6. Data Sharing
- We do not sell your data.
- Posts and profile information are visible to other authenticated users.
- We may disclose data if required by law.
Third-party services we rely on:
- Google Firebase — infrastructure, authentication (Google Sign-In), cloud storage.
- Apple Sign-In — authentication.
- Google Cloud Vision — automated image moderation.
- Firebase Crashlytics — crash reporting and diagnostics (mobile only, not collected in debug mode).
- Gmail SMTP (via Nodemailer) — transactional emails (feedback notifications, beta signup confirmations).
These services have their own privacy policies and process data according to their terms.
7. Your Rights
Under applicable data protection laws (including GDPR), you have the right to:
- Access: Your data is visible within the app at any time.
- Deletion: Delete your account in Settings. All data—profile, miniatures, posts, images, and storage files—is permanently and immediately removed. There are no backups; deletion cannot be reversed.
- Data portability: Contact us at support@enshryned.com to receive your data in a structured, commonly used, machine-readable format.
- Correction: You can edit your profile, bio, and content directly in the app.
- Restriction: You may request that we restrict processing of your data in certain circumstances (e.g. while we verify the accuracy of contested data).
- Objection: You may object to processing based on legitimate interest. We will stop processing unless we have compelling legitimate grounds.
To exercise any of these rights, contact us at support@enshryned.com.
Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For users in Switzerland, this is the Federal Data Protection and Information Commissioner (FDPIC). For users in the EU/EEA, contact your local data protection authority.
8. Children
Enshryned is not intended for users under 13. We do not knowingly collect data from children under 13. If you believe a child under 13 is using the app, please contact us and we will delete the account.
9. Cookies & Tracking
The mobile app does not use cookies or tracking pixels. Our website uses only essential local storage (e.g. to remember your beta signup status) and no tracking cookies or analytics.
10. Changes
We may update this policy from time to time. We will notify users of significant changes through the app. Continued use after changes constitutes acceptance.