VyxWorks ("we", "us") values the privacy of users of the Opaline app ("the Service"). This policy explains the categories, purposes, and retention periods of the personal data we process, as well as the rights you can exercise.
1. Personal data we process
We process only the minimum data needed to operate the Service.
| Category | Items | Source | Where it is stored |
|---|---|---|---|
| 1.1 Calendar events | Event details such as title, date and time, location, and notes (events in your iOS calendars) | Access to system calendars after you grant EventKit permission | iOS system calendars (the Apple, iCloud, Google, or Outlook accounts you connected) |
| 1.2 Contacts | The name and email of contacts you select when inviting event participants | Only when you use the invite feature | On your device (not sent to any server) |
| 1.3 Location | Location used when setting an event place (while in use only) | When you search for and select a location | Saved with that event in your iOS calendars |
| 1.4 Photos (add only) | Wallpaper images you create | When you run "Save to Photos" | Your photo library (the app only writes and never reads) |
| 1.5 Analytics and diagnostics | App usage and screen events, crash logs, device model, OS version, app version, and a random instance identifier (not the IDFA) | Firebase Analytics · Crashlytics SDK | Google servers (SDK provider) |
| 1.6 Push notification token | FCM registration token (a push-only token that identifies the device) | Firebase Messaging after you grant notification permission | Google servers (SDK provider) |
| 1.7 Payment data | Apple transaction ID (receipt) — used to restore theme purchases | Apple StoreKit 2 | Apple servers (the app has no access to card or bank data) |
1.8 About calendar data
Opaline does not copy or transmit your events to our servers. Through the iOS EventKit API, the app simply displays and edits the calendars already connected to your iPhone; the actual storage and syncing of events follow the policies of the calendar provider you connected (such as iCloud, Google, or Outlook) and your iOS settings. The app's own settings (the theme you selected, display options, this month's notes, and so on) are stored only in local device storage (SwiftData) and the app group container.
1.9 Data we do not collect
We do not collect or transmit the following:
- Account information such as name, email, or phone number (there is no sign-up)
- Advertising identifier (IDFA) — we do not serve ads and do not track you
- Full address book uploads or call logs
- Health, fitness, or biometric data, or financial account data
- Continuous background location tracking (location is used while in use only, limited to the moment you enter an event place)
2. Purposes of processing
- Display and edit calendars — show the events connected to your iPhone and let you add, edit, and recolor them inside the app.
- Invite participants — add the contacts you select as event participants.
- Event location — save the place you specify with the event.
- Save wallpaper — save the lock screen image you create to your photo library.
- Quality improvement — analyze anonymous usage statistics and crash causes with Firebase Analytics and Crashlytics to improve stability.
- Send notifications — deliver push notifications about events and updates via Firebase Messaging (FCM).
- In-app purchase — restore and reconcile one-time theme purchases (Apple StoreKit 2).
3. Retention and deletion
3.1 Local and calendar data
- App settings, themes, and this month's notes remain on your device until you change or delete them in the app or uninstall the app.
- Calendar events are kept in the calendar accounts you connected; if you delete them in the app or in the iOS Calendar, they are removed according to that account's policy.
- Uninstalling the app immediately removes all local data the app stored on your device. (Events already saved to your system calendars remain in your calendar accounts.)
3.2 Third-party data
- The retention period of the analytics and diagnostic data processed by Firebase Analytics and Crashlytics follows Google's policies and our console configuration (the default retention period).
- The FCM push token is invalidated when you uninstall the app or revoke notification permission.
- Apple receipt data is retained per Apple's policies.
4. Third parties and processors
We do not sell your personal data to third parties. The processors essential to operating the Service are as follows.
| Processor | Purpose | Data | Reference |
|---|---|---|---|
| Google LLC | Usage analytics (Firebase Analytics) | Anonymous usage events, device and app version, random instance identifier | Firebase Privacy Policy |
| Google LLC | Crash diagnostics (Firebase Crashlytics) | Crash logs, diagnostic data, device information | Firebase Privacy Policy |
| Google LLC | Push notification delivery (Firebase Cloud Messaging) | FCM registration token | Firebase Privacy Policy |
| Apple Inc. | In-app purchase (StoreKit 2) and app distribution | Transaction receipts | Apple Privacy Policy |
The calendars above (iCloud, Google, Outlook, and others) are accounts you connected directly in iOS, and the processing of that event data follows each provider's policy. Opaline does not broker or separately store this data.
5. Your rights
You can exercise the following rights at any time.
- Access, correct, delete — edit or delete events directly in the app or in the iOS Calendar, and themes and notes in the app settings.
- Revoke permissions — in iOS Settings > Privacy & Security, revoking Calendar, Contacts, Location, Photos, or Notifications access will stop the related features.
- Opt out of analytics — turning off the analytics consent option in the app settings, or uninstalling the app, stops the collection of analytics and diagnostic data.
- Uninstall — deleting the app removes all local data the app stored on your device.
For further requests, contact support@vyxworks.com.
6. Tracking (ATT · IDFA)
Opaline does not serve ads, does not collect an advertising identifier (IDFA), and does not track you across other apps or websites. As a result, we do not show an App Tracking Transparency (ATT) consent prompt.
- Firebase Analytics operates with ad personalization signals and on-device conversion measurement turned off, so it does not fall under Apple's definition of "Tracking."
- The identifier we collect is not the IDFA but an app instance identifier, and it is not used to track you by combining it with data from other companies.
- We do not use cookies.
7. Children's privacy
Opaline is not directed to children under 13 (U.S. COPPA). We do not knowingly collect personal data from such users; if we learn we have, we will delete it promptly. Where local law requires a higher minimum age, that age applies.
8. International transfers
The analytics, diagnostic, and push data processed by Firebase Analytics, Crashlytics, and Messaging may be transferred to and stored in data centers operated by Google outside your country, including the United States. Apple receipt data is likewise processed on Apple's global infrastructure. Transfers rely on the Standard Contractual Clauses (SCCs) and policies of Google and Apple.
9. EU/EEA users (GDPR)
The following applies to users in the EU/EEA.
- Legal bases — performance of the service (Article 6(1)(b)) and legitimate interests / consent (6(1)(f)/(a), limited to analytics and diagnostics).
- Rights — access, rectification, erasure, portability, restriction, objection, and withdrawal of consent.
- Consent management — change your analytics consent in the app settings, or revoke permissions in iOS Settings.
- Transfers — see section 8.
- Supervisory authority — you have the right to lodge a complaint with the supervisory authority of your member state.
- Contact — support@vyxworks.com
10. California residents (CCPA/CPRA)
- We do not sell the personal information of California residents for monetary value, and we do not "share" it for cross-context behavioral advertising.
- We do not serve ads and do not use the IDFA.
- To access, delete, or correct your data, email support@vyxworks.com.
- You will not receive discriminatory treatment for exercising these rights.
11. Korea PIPA notice
As required by the Korean Personal Information Protection Act (PIPA), we provide the following.
11.1 Data protection officer
- Officer: the representative of VyxWorks
- Contact: support@vyxworks.com
11.2 Rights of data subjects and how to exercise them
You may request access, correction, deletion, or suspension of processing of your personal data at any time, directly or through a legal representative.
11.3 Redress bodies
- Personal Information Dispute Mediation Committee (kopico.go.kr · 1833-6972)
- KISA Privacy Infringement Center (privacy.kisa.or.kr · 118)
- Supreme Prosecutors' Office Cybercrime Division (spo.go.kr · 1301)
- National Police Agency Cybercrime Bureau (cyberbureau.police.go.kr · 182)
12. Security
- App sandbox — data is stored only within the iOS app sandbox and is not accessible to other apps.
- Device encryption — iOS file system encryption (Data Protection) defaults apply.
- Encryption in transit — communication with Firebase and Apple is encrypted with TLS.
- Least privilege — permissions are requested only when needed.
13. Effective date and change log
| Version | Effective | Change |
|---|---|---|
| 1.0 | 2026-06-26 | Initial release |
We will announce any changes at least 7 days before the effective date via in-app notice or by updating this page. Changes that materially affect user rights will be announced at least 30 days in advance.
14. Contact
- Operator
- VyxWorks
- Business Registration No.
- 422-57-01052
- Address
- 14 Gwanggyojungang-ro 296beon-gil, Suji-gu, Yongin-si, Gyeonggi-do, Republic of Korea
- Contact
- support@vyxworks.com
- Website
- https://vyxworks.com