CERAMIST Privacy policy — Ceramist ========================= Last updated: October 5, 2026 · Publisher: Charles Venayre Version française : https://mannxvoyxbfbnuyitmou.supabase.co/functions/v1/legal/confidentialite Ceramist collects as little as possible: what is needed to run your account, sync your creations and host the Le Fil community. No crash-reporting SDK, no geolocation. Advertising measurement (Meta) only runs if you allow it in Apple's "Tracking" prompt (see section 4). 1. WHO IS RESPONSIBLE --------------------- The app and this policy are published by Charles Venayre, an individual based in France, acting as data controller. Contact: charlesvenayre@me.com. 2. USING CERAMIST WITHOUT AN ACCOUNT ------------------------------------ You can use the local features of the app (Draw, 3D, and augmented reality with a Ceramist + subscription) without creating an account. In that case nothing is sent to our servers: your drawings stay on your device. 3. DATA WE COLLECT WHEN YOU CREATE AN ACCOUNT --------------------------------------------- An account is required to save your creations online, follow the throwing program across devices, publish on Le Fil and subscribe to Ceramist +. Depending on how you use the app, we process: • Account and contact details — your e-mail address and the name you choose to display. Sign-in is handled by Supabase Auth, either with Sign in with Apple (Apple may give us a relay e-mail address and, on first sign-in, your name) or with an e-mail address and password. Passwords are never stored in clear text. • User content — the photos you attach to your pieces and firings, your creations (drawn shapes, dimensions, glaze), your favorites, your progress in the program, and your posts and comments on Le Fil. • Identifiers — a technical user ID generated by our database. • Purchase history — your Ceramist + subscription status (active, expired, trial). Payments are made through Apple; no bank or card details ever reach us. We receive App Store server notifications about the status of your subscription only. • Usage data — internal events when the Ceramist + paywall is shown, dismissed or converted, used only to understand how the app is used. Your profile also records the app version, preferred language, platform and date of last activity, so we can provide support. We do not collect your location, your contacts or your health data. The device's advertising identifier is used only if you allow tracking (section 4, "Advertising measurement (Meta)"). 4. WHY WE USE THIS DATA ----------------------- • To run your account and sync your creations between your devices (performance of the contract). • To operate Le Fil and moderate it (performance of the contract and legitimate interest in keeping the community safe). • To grant and verify your Ceramist + subscription (performance of the contract). • To answer your support requests (legitimate interest). • To send occasional information e-mails about Ceramist. You can turn them off at any time in the app (Profile → Notifications) or with the unsubscribe link in each e-mail. • To understand how the app is used, through internal, non-advertising analytics (legitimate interest). • To measure whether our Meta ads lead to installs and subscriptions (your consent, given in Apple's "Tracking" prompt and withdrawable at any time). Usage statistics Ceramist sends us pseudonymous usage events, with or without an account: screens viewed, session durations, product actions (a creation saved, a firing planned, a glaze searched…), app version, iOS version, device model, language, region, time zone, subscription status and a random installation identifier generated on your device. When you are signed in, these events are linked to your account. If you installed the app from an App Store ad, the campaign and keyword the install came from are also sent, as provided by Apple. Never sent: your IP address (not stored), your location, your contacts, the text you type, your photos, or any advertising identifier. There is no third-party analytics SDK; the Meta advertising measurement described below is separate and subject to your consent. Events are deleted after 13 months, and immediately when you delete your account. You can object at any time by e-mail (see section 9); we then stop the collection for your account. Advertising measurement (Meta) We run ads for Ceramist on Meta platforms (Facebook, Instagram). To know whether those ads lead to installs and subscriptions, the app embeds the Meta SDK. It works as follows: • Only if you allow it in Apple's "Tracking" prompt, shown after you have discovered the app. Without your consent, nothing is sent to Meta and the SDK never starts. • What is sent to Meta Platforms Ireland Limited: the device's advertising identifier (IDFA), the app being opened, the creation of an account, and the start of a trial or a subscription (product, amount, currency). • What is never sent to Meta: your pieces, your photos, your drawings, your firings, your posts and comments on Le Fil, your e-mail address or your display name. • Withdrawing your consent: at any time in Settings › Privacy & Security › Tracking; nothing is sent from then on. Meta keeps the data already received under its own privacy policy. • Without your consent, only Apple's attribution (SKAdNetwork) tells Meta, without any identifier, that an install came from an ad. 5. CAMERA AND PHOTO LIBRARY --------------------------- Ceramist asks for access to the camera and the photo library only to let you attach photos to your pieces and to display your creations in augmented reality. Photos are uploaded to our servers only when you explicitly attach them to a creation or a Le Fil post. The camera feed used for AR is processed on your device and never leaves it. 6. WHERE YOUR DATA IS HOSTED ---------------------------- Your data is stored by Supabase (database, authentication and file storage) in the European Union (region eu-west-1). Information e-mails are sent through the e-mail provider Resend. If you allow tracking, the advertising measurement data described in section 4 is sent to Meta Platforms Ireland Limited (Dublin, Ireland), which processes it under its own privacy policy. We do not sell or rent your data to anyone, and we do not share anything else with advertisers. 7. LE FIL — COMMUNITY CONTENT ----------------------------- What you publish on Le Fil (photos, posts, comments, display name) is visible to other users of the app. You can report a post or a comment, hide it, and block a user. Reported content is reviewed and acted upon within 24 hours. Content that breaks the terms of use may be removed and the account suspended. 8. HOW LONG WE KEEP YOUR DATA ----------------------------- Your data is kept for as long as your account exists. When you delete your account, all your data (profile, creations, photos, posts, comments, subscription status, usage events) is permanently erased from our servers. Apple keeps its own purchase records under its own policy. 9. YOUR RIGHTS -------------- Under the GDPR you have the right to access, rectify, erase and port your data, and to object to or restrict its processing. You can: • edit your profile and delete any of your content directly in the app; • delete your account from the app: Profile → Delete my account. Deletion is immediate and irreversible; • write to charlesvenayre@me.com for any other request. We answer within one month. You may also lodge a complaint with the French data protection authority (CNIL, cnil.fr (https://www.cnil.fr)) or the authority of your country. 10. CHILDREN ------------ Ceramist is rated 4+ on the App Store and does not collect any data specifically from children. Creating an account requires an e-mail address; Le Fil is moderated. 11. SECURITY ------------ All exchanges between the app and our servers are encrypted (HTTPS). Access to the database is restricted by per-user security rules; only you (and, for moderation purposes, the publisher) can access your private data. 12. CHANGES ----------- This policy may be updated when the app evolves. The date at the top of this page indicates the latest version; significant changes are announced in the app. ---------------------------------------- • About Ceramist : https://mannxvoyxbfbnuyitmou.supabase.co/functions/v1/legal?lang=en • Contact and support : https://mannxvoyxbfbnuyitmou.supabase.co/functions/v1/legal/contact?lang=en • Terms of use : https://mannxvoyxbfbnuyitmou.supabase.co/functions/v1/legal/cgu?lang=en © 2026 Charles Venayre · Contact: charlesvenayre@me.com