Privacy Policy

Short version: Tilepane collects no data. There is no account, no analytics, no advertising and no server of ours. What you draw stays on your iPad unless you turn on iCloud backup or export and share it yourself.

What we collect

Nothing. Tilepane has no account and no sign-in. It contains no analytics, crash-reporting or advertising SDK and no third-party code of any kind. It records no usage events, gives you no identifier of any kind, and does not track you across apps or websites. There is no server of ours that the app talks to. On the App Store, Tilepane is labelled Data Not Collected.

Where your work is kept

Your tiles, layers, colorways, collections, version history, stats and badges are stored in Tilepane’s own storage on this iPad. We never receive a copy. The Home Screen widget shows this week’s motif pack from the app’s own bundle and reads nothing about you.

Your work leaves this iPad in only two ways, and you start both of them: turning on iCloud backup, and exporting or sharing a file.

Encrypted iCloud backup (Pro, off by default)

Off until you switch it on in Tilepane’s Settings. Nothing is backed up before that.
What is written: an encrypted copy of your tiles — drawings, layers, colorways, collections, badges and the counts on the Stats page. Version history is not included; it stays on this iPad.
Where: Tilepane’s container in your own iCloud Drive, which is storage in your Apple Account, not ours. Apple keeps it under Apple’s own privacy policy.
How it is protected: each file is packed with Apple Archive and encrypted on this iPad with AES-GCM and a 256-bit key before it is written. The key is created on your device and kept in your iCloud Keychain. We never have the key and cannot read the backup. Next to it sits a small unencrypted note holding only the date of the last backup and how many tiles, colorways and badges it contains, so the app can show “Last backup” without unlocking anything.
When it runs: once when you switch it on, and again whenever you leave the app after something has changed.
Deleting the app does not delete the backup. Turning backup off stops new backups and keeps the existing one. To delete the backup, open Tilepane’s Settings and tap Delete backup… on the backup card, then confirm: this removes the encrypted backup and its note from your iCloud Drive and turns backup off; the tiles on this iPad are not affected. You can also delete it without the app: open the iPadOS Settings app → your name (Apple Account) → iCloud → Manage Account Storage → Tilepane, and delete its data.

Export and sharing

Exports — PNG, TIFF and PDF files, spec sheets, mockups, lookbooks, posters and process replay videos — are rendered on this iPad and handed to the system share sheet or to Files. Where they go next is your choice; nothing is sent to us. An exported file holds your artwork plus technical details: pixel size, dpi, the sRGB color profile and a “Made with Tilepane” software tag. It holds no location and no personal information.

Permissions

Add to Photos only. Asked the first time you save an export to Photos from the share sheet. It lets Tilepane add that one image; it cannot read your photo library. If you decline, everything else keeps working — save to Files or share the file instead. You can change it any time in the Settings app: find Tilepane (under Apps on iPadOS 18 and later) → Photos.
Nothing else. Importing from Photos or Files uses Apple’s system pickers, which hand Tilepane only the picture you choose, so no photo library access is requested.

Purchases

Pro is bought through the App Store. Apple handles the payment; we never see your name, your payment details or your Apple Account. The app only asks the App Store whether Pro is active for this Apple Account.

What we do see

App Store Connect gives every developer aggregate reports: downloads, sales, subscriptions and ratings. If you have chosen to share analytics with app developers in your iPad’s settings, Apple may also pass on crash reports and aggregate usage figures. Apple runs that sharing and you can turn it off; none of it comes from code inside Tilepane.

Children

Tilepane collects no data from anyone, children included.

Changes

If the way Tilepane handles data ever changes, this policy changes first, and the new version ships inside the app.

Contact

Privacy questions go to Fuuqiu at Fuuqiu@gmail.com. Tilepane is published by WANG WENJIE.

This is the same text that ships inside the Tilepane app (Settings), word for word.