Privacy Policy

The short version#

Widget Ninja has no accounts and no sign-in. You can browse the Gallery and design widgets without giving us anything. Most of what Widget Ninja shows comes from your own iPhone and never reaches us.

On your device

Apple Health, calendar, reminder, photo library and location data is read on your iPhone to draw your widgets. We don’t receive it.

If you subscribe

Apple handles the payment. Our server and RevenueCat receive a record of the subscription, not your name or email.

If you use AI

What you write and the widget you’re working on are sent to our server and to an AI model provider.

Web data

Widgets that show exchange rates, earthquakes, Wikipedia or Formula 1 ask those public services directly. They see your IP address, nothing about you.

Never

No ads. No selling your information. No tracking you across other companies’ apps or websites.

Who we are#

Widget Ninja is made by Guram Kajaia, an independent developer. In this policy, “we” means Guram Kajaia.

This policy covers the Widget Ninja app for iPhone and iPad, and this website. For any privacy question or request, write to [email protected].

What stays on your device#

Widget Ninja asks for access only when a widget needs it. Every permission is optional, and you can change your answer at any time in the Settings app.

Apple Health

Steps, sleep, Activity rings, heart rate and workouts are read on your device to draw your widgets. Health readings are never sent to our servers, never included in AI requests, never used for advertising, and never shared with anyone.

Calendars & Reminders

Your events and reminders are read on your device. Widget Ninja changes them only when you ask it to, for example when you tick off a reminder in a widget.

Location

Used for local weather, your city and location measurements. To get a forecast and a place name, your location is sent to Apple’s weather and maps services. We don’t receive it.

Photos you add

A photo or drawing you add is copied into that widget and kept in its Assets on your device until you delete it. It leaves your device only as described under AI features, or when you share the widget yourself.

Your photo library

If you allow it, widgets with a photo set read your photo library on your iPhone to find the photos that match, such as an album, a place or a date. Small copies of the photos they show are kept in the app’s storage on your device. Photos from your library are never sent to our servers and never included in AI requests. To name the town a photo was taken in, the app sends the photo’s location to Apple’s maps service.

Your wallpaper

For see-through widgets, you give the app a screenshot of your Home Screen. It is kept on your device to draw those widgets, and is never sent to us or included in AI requests.

Wi-Fi & device

Your Wi-Fi network name, battery level and similar device details are read on your device so a widget can show them.

Your work

Your widgets, their settings, AI conversations and special days are saved on your device.

Your subscription is your account#

There is no sign-in. Pro is tied to your App Store subscription, and the subscription is how our server knows you.

When you subscribe or restore, and from time to time while you have Pro, the app sends our server Apple’s signed record of your subscription. Our server checks it with Apple and keeps:

Subscription identifier

A number Apple gives your subscription. It doesn’t contain your name, email or Apple Account.

Session details

When the session started and expires, and the date Apple says your subscription is paid until.

We use this to confirm that Pro is active, to let the AI features work, and to apply usage limits to AI requests. Every device on the same subscription shares those limits. The app keeps its session in your iPhone’s Keychain.

Purchases and subscriptions#

Apple processes every payment. We never see your card or billing details.

The app also includes software from RevenueCat, which keeps purchase records and subscription statistics for us. It starts when the app opens. RevenueCat receives:

An identifier

A random one, created by RevenueCat’s software on your device. It isn’t linked to your name or email.

Purchase history

Your Widget Ninja purchases, renewals and restores.

Ad attribution

If you installed the app after tapping an Apple Search Ads ad, Apple’s attribution token. RevenueCat uses it to ask Apple which campaign and keyword led to the download, so we can tell which ads work. This uses Apple’s standard attribution, not the tracking permission, and doesn’t identify you.

Technical details

Such as the app version, device model, iOS version, region and IP address.

AI features#

Creating widgets with AI, editing them in conversation and AI Drawing are optional and part of Pro. They run on servers, not on your iPhone. Each request sends:

What you write

Your message and the conversation so far. Your phone keeps the conversation and sends it along with each request.

The widget

The design you’re working on: its layers, the text you typed, colors and layout, its settings, the names and dates of any special days it uses, and what it asks web services for. The design says which information to show, such as “today’s steps”, not your readings.

Photo sets

The rules of any photo sets in the design, such as an album’s name, a place name, dates, a map point for “near here” or “away from home”, and identifiers of photos you picked by hand. Not the photos from your library.

Photos in the widget

Photos and drawings kept in the widget’s Assets are uploaded to our server along with the design. Our server removes them before the design goes to the AI model, returns them to your phone with the reply, and doesn’t store them.

Pictures of the widget

So the AI can see how the design looks, your phone draws the widget with made-up sample readings, not your own events, health, weather, reminders or photo library, and sends those pictures. Photo sets show sample landscapes, and photos you added are blanked out in them. Text you typed into the widget and its drawn artwork are visible, as they are in the design itself.

Drawings

Your description, up to 12 earlier requests for the same drawing, the current drawing, and the widget’s size.

Our server passes the request through Cloudflare’s AI Gateway to an AI model provider, currently OpenAI, which writes the reply. The provider handles the request under its own terms.

The gateway keeps a log of AI requests and replies, labeled with your subscription identifier. We use it to fix problems, apply usage limits, control costs and prevent abuse. We don’t use your content to train AI models.

Web data in your widgets#

A widget can show public information from the internet. When it draws, your iPhone asks the service directly; nothing goes through us, except Formula 1, which is our own feed. The request says only what the widget shows, such as a currency pair or a Wikipedia language. Like any internet connection, it shows the service your IP address.

Frankfurter

Exchange rates, from api.frankfurter.dev.

U.S. Geological Survey

Earthquakes, from earthquake.usgs.gov.

Wikipedia

Today’s articles, pictures and lists, from Wikipedia. As Wikimedia asks of every app, these requests name Widget Ninja and its contact address. They don’t name you.

Formula 1

Races, standings and results from our own server at api.widget.ninja, which keeps no record of who asked beyond the hosting logs described below.

The last answer is saved on your device, so a widget can still show it offline.

Other connections the app makes#

A few features fetch something directly from another service. Like any internet connection, each one shows that service your IP address.

Apple Weather & Maps

Receive your location to return a forecast and a place name. When you search for a city for a widget’s weather, or a town for a photo set, Apple’s maps service receives what you type. It also receives the location of photos a photo set shows, to name their town.

Google Fonts

When you browse fonts, or a widget uses a font not yet saved on your device, the app downloads it from Google. Google sees which font was requested.

Photo web links

If you add a photo by web address, the app downloads it from that address.

Our servers and this website#

Our server and this website are hosted by Cloudflare. When the app or your browser connects, Cloudflare processes your IP address and basic request details, such as the time and the address requested. We use this to limit abuse and diagnose problems. Our own error logs record error codes, not your content, tokens or identifiers.

This website sets no cookies. It counts visits with Umami Cloud, a cookie-free analytics service: the page, the site you came from, your browser, device type, language and country. Cloudflare Web Analytics, also cookie-free, measures how fast pages load for visitors. Neither identifies you or follows you across other sites. The page you see after buying Pro for Mac is not counted.

Who receives your information#

We share information only with the services that make the app work:

We don’t sell personal information, show ads, or track you across other companies’ apps and websites. We may disclose information if the law requires it.

These services operate in the United States and other countries, so your information may be processed outside the country where you live.

How long we keep it#

Sessions

A session lasts 30 days and is renewed while you use the app. After 90 days the app starts a new one from your subscription. An unused session is deleted after it expires.

AI request log

Kept for as long as we need it for the purposes above. Ask us and we’ll delete yours.

Purchase records

Apple and RevenueCat keep purchase history under their own policies. Ask us and we’ll delete your RevenueCat record.

Server logs

Kept by Cloudflare for a short time.

On your device

Until you delete the widget, the conversation or the app.

Your choices and rights#

Permissions

Turn Health, calendar, reminders, photos or location access on or off in the Settings app.

Web data

Remove the web data from a widget, or delete the widget, and it stops asking.

Cancel Pro

Manage or cancel your subscription in your Apple Account settings.

Delete your data

Write to [email protected] with the order ID from Apple’s receipt for your subscription, so we can find it. We’ll delete your sessions, the AI request log labeled with your subscription, and your RevenueCat record. Deleting the app removes everything stored on your device.

Depending on where you live, you may also have the right to see, correct or receive a copy of your personal information, to object to or restrict how it’s used, and to complain to your local data protection authority. Write to [email protected] and we’ll answer within 30 days.

Where the law asks for a legal basis: we handle subscription, purchase and AI information to provide the service you asked for; logs, purchase statistics and ad attribution because we have a legitimate interest in running a secure, sustainable app; and data behind a device permission with your consent.

Children#

Widget Ninja isn’t directed to children under 13, and we don’t knowingly collect personal information from them. If you believe a child has given us information, write to [email protected] and we’ll delete it.

Security#

Connections between the app and our server are encrypted. Your session is stored in your iPhone’s Keychain, and our server can end any session at once. No system is perfectly secure, so we keep what we hold to a minimum.

Changes to this policy#

When this policy changes, we’ll update this page and the date below. If a change is significant, we’ll say so at the top of this page.