Privacy Policy
Myu Color Shade
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Myu Color Shade stores your named palettes, color values, up to 50 recently explored colors, last active color, backup preference and pending palette deletions in a JSON file in Application Support on your iPhone. A random installation secret is created in the device Keychain when backup or server deletion is used. There are no user accounts. Optional backup sends palette identifiers, names, color values, update times and the recent-color snapshot to our backend. The backend stores a SHA-256 hash of the installation secret and an installation creation time, rather than the raw secret. The bundled color-name catalog works offline. The public color-name endpoint receives the color code you query but does not persist that lookup. The public website and API are proxied by Cloudflare to the Railway-hosted backend. Cloudflare terminates public HTTPS and processes request traffic, including network addresses, request metadata and content, to deliver it to the origin. Railway also processes service traffic and infrastructure connection information. The app has no advertising or analytics SDKs and does not request contacts, photos, camera, microphone or location.
How we use information
Local information restores your studio and supports palette editing, shade generation, history search, comparison, contrast measurement and export. If you enable backup, installation-scoped server records retain your palettes and recent colors for that installation. The secret authorizes access to those records without a login. Connection information supports HTTPS delivery, reliability and abuse prevention. The service keeps hashed connection-address rate-limit keys in process memory. Request timestamps form a rolling one-minute limit; stale keys are pruned when the in-memory table reaches its bound, or cleared when the process restarts. Color-name matching supplies approximate descriptive labels. Export happens on your device; copying uses the system clipboard and sharing occurs only when you choose an iOS share destination.
Service providers and sharing
The backend and public privacy website are hosted by Railway. Cloudflare provides the public HTTPS proxy for api.myu-color-shade.cyou and myu-color-shade.cyou. These infrastructure providers process request traffic, including request content and connection records, to deliver and operate the service. We do not add analytics, advertising, email-delivery or other external application providers, and the backend makes no third-party color-name calls during use. The shipped color-name dataset is licensed content, not a recipient of your requests. A recipient you select in the system Share Sheet receives the exported text or PNG under that recipient's own terms. Clipboard content can be accessed under the operating system's clipboard controls. Cloudflare and Railway infrastructure may keep operational logs; this application does not log request headers, secrets, query strings or palette payloads.
Data retention
Local studio data remains until you erase it in Settings or remove the app. Operating-system backups may include the local Application Support file according to your device backup settings. The installation secret uses a device-only Keychain accessibility class, is not synced by this app and may survive reinstall on the same device. Server palettes and history remain until you delete them; there is no automatic expiry and uninstalling the app does not notify the server. The application does not create separate server backups. Railway infrastructure snapshots and operational logs, and Cloudflare operational records, if retained by those providers, follow their respective practices; we do not claim a fixed retention duration for them. Temporary PNG exports are written to the app's temporary directory for system sharing and may remain until the operating system clears them or the app is removed.
Deleting your information
Settings provides Delete all installation data. It first requests deletion of this installation's server palettes, history and installation row, then resets local palettes, history, active color and backup preferences. If the server cannot confirm deletion, the app keeps the local data and offers retry. Palette deletion removes the local palette immediately and queues server deletion for the next enabled backup. Erase local data only does not remove an existing server backup and is labelled accordingly. Server deletion removes active SQLite rows and enables SQLite secure deletion, but does not promise immediate physical erasure from infrastructure snapshots or existing device backups. The random Keychain secret remains so the same installation can authorize later cleanup or opt in again; it does not recreate deleted records by itself. Losing the secret can prevent access to or deletion of the old server copy through the app. For privacy questions or deletion assistance contact wallace99ravenhill@icloud.com without sending the secret.
Permissions and your choices
No protected device permission is required for the app's color tools. You control optional backup in Settings and can turn it off to stop future routine uploads; turning it off does not delete an existing backup. Use Delete all installation data for server deletion. Clipboard copy and the system Share Sheet run only when you request them. Access granted to a share destination is governed by iOS and that destination; manage any destination permissions in iOS Settings. Device backups can be controlled in your system settings.
Your privacy rights
You can inspect and edit palettes, export color values, pause backup and delete installation data from the app. Depending on your location, you may also have rights to access, correct, delete or restrict processing, object, receive a portable copy, or complain to your local data-protection authority. Contact wallace99ravenhill@icloud.com for privacy requests. We may need enough non-secret information to understand and safely address a request. Because there is no account and access is installation-scoped, we cannot promise recovery or identification of remote records if the installation secret is lost. Never email your secret.
Security
Production communication uses HTTPS. Cloudflare terminates public HTTPS and proxies requests over HTTPS to the pinned Railway origin. These infrastructure providers process traffic while delivering the service. The random installation secret is held in Keychain using device-only after-first-unlock accessibility and is sent in an authorization header. The backend hashes it and scopes every private database operation to that hash. Palette identifiers alone do not grant access. SQLite data is stored on the service's persistent Railway volume. Input validation, payload limits and request throttling reduce common misuse. Public home, privacy and color-name routes do not require credentials or cookies. No system is perfectly secure, and a party possessing an installation secret can access its records. There is no shared app credential, cross-device login or recovery service.
Children’s privacy
Myu Color Shade is a design utility intended for designers and other people working with colors, rather than a service directed at children. It does not ask for age, name or contact information and has no account, advertising or social features. If you believe a child has submitted personal information in a palette name or otherwise through this service, contact wallace99ravenhill@icloud.com so the issue can be assessed. Avoid entering personal information into palette names.
Changes to this policy
This policy describes the current app and its backend. We may update it when functionality, hosting or processing changes. The policy at this URL will show the revised effective date. Review it periodically and before enabling a newly introduced data feature. Material changes will be reflected in the app or this policy as appropriate. Privacy inquiries can be sent to wallace99ravenhill@icloud.com.