Privacy Policy

Information the app handles

• Account information: your email address, account identifier, and authentication information. When you choose Google sign-in, Google and our authentication provider may supply basic profile information such as your name and profile image. Existing ChatGPT sign-in can provide an identifier, email, and available name. We do not receive your Google or ChatGPT password.
• Purchase access records: your checkout email, purchase or order reference, verification request, approval or revocation status, and related timestamps. The owner uses these records to check purchases in Beacons and manage app access. The app does not receive payment-card numbers through this process.
• Your creative content: uploaded PDFs, images, stickers, GlamPads, page content, writing, text, decorations, titles, and other information you choose to save.
• Calendar information: event titles, notes, dates, times, and links to the associated GlamPad and page when you use the calendar tools.
• Device preferences: toolbar and workspace settings, returning-customer status, sign-in persistence preferences, and installation status stored in cookies or browser storage.
• Technical and support information: hosting and authentication services may process IP addresses, browser or device information, access records, and error logs to deliver and protect the service. If you contact us, we receive the information you include in your message.

How information is used

Information is used to sign you in, keep your saved work associated with your account, store and retrieve your uploads, apply your preferences, provide requested calendar subscriptions, respond to support requests, and maintain the app’s operation and security. Signing in does not by itself subscribe you to marketing emails.

Service providers and sharing

The app uses Supabase for customer authentication, Resend to deliver authentication emails, and ChatGPT Sites and Cloudflare infrastructure for hosting and file or app-data storage. Google and ChatGPT process sign-in information when you choose their respective sign-in options. These services process information needed to provide their functions and have their own privacy practices.

Workspace fonts are loaded from Google Fonts; your browser contacts Google’s font services to retrieve them. The app does not include advertising or advertising-tracking tools in its current implementation. We do not sell your GlamPad content or use it for targeted advertising. Information may also be disclosed when required by applicable law or reasonably necessary to address fraud, security incidents, or protect people and the service.

Google sign-in and permissions

Google sign-in is used to authenticate your account using basic identity information. The sign-in feature does not request access to your Gmail messages, Google Drive files, or full Google Calendar. Calendar subscriptions are a separate action you choose. You can review or revoke the app’s Google access through your Google Account’s third-party connections settings. Revoking Google access does not automatically delete content already stored in Lymitless Studio.

Optional calendar subscriptions

If you enable a calendar feed and subscribe through Apple Calendar, Google Calendar, or another calendar service, that service receives event details and links to the related GlamPad pages. The feed can include your event notes and GlamPad titles.

Your subscription URL contains a private access token. Anyone who obtains that URL can read the events in the feed without signing in. Keep it private. Disable the calendar feed in the app to stop future access through that link, and remove the subscription from your calendar service. Previously retrieved or cached event information may remain with that service. Opening a GlamPad link still requires access to the corresponding app account.

Cookies, browser storage, and staying signed in

Authentication cookies maintain your session. The “Keep me signed in on this device” preference controls whether customer-session cookies persist beyond the browser session; sessions can still expire or be revoked. Browser behavior, including session restoration, can affect persistence. Separate cookies and local storage remember your returning-customer status, preferences, and installation choices.

You can log out and clear cookies or site data in your browser. Clearing site data may remove local preferences and sign you out; it does not automatically remove your saved server-side content. If you use ChatGPT sign-in, its session controls also apply.

Retention and deletion

Saved account and creative information is retained to provide your workspace until it is removed or you request deletion, subject to information needed for security, legal obligations, or resolving disputes. The app does not currently apply a single automatic deletion period to all saved content.

“Toss It” removes an item from your collection. Removing a collection item does not necessarily erase every associated uploaded file from storage. To request deletion of your account and associated stored files, email nolymitkraftn@gmail.com from the email associated with your account. We may need to verify ownership before acting. Provider logs, backups, or records subject to retention obligations may remain according to the relevant provider’s practices or applicable requirements. Removing an installed app alone does not delete your account.

Your choices and requests

You choose what to upload and whether to use optional calendar sharing. You can edit or remove available items using the app’s tools, download available exports, log out, and contact us to request access to, correction of, or deletion of your information. Available privacy rights depend on where you live. Send requests or questions to nolymitkraftn@gmail.com. Do not send passwords, API keys, or sign-in links.

Security and international processing

The app uses HTTPS and account-based access checks for saved workspace information. No internet service can guarantee complete security. Keep your account, sign-in links, and calendar-feed URL private. Information may be processed in the countries where our hosting, authentication, email, and other providers operate, including outside your country of residence.

Children’s privacy

Lymitless Studio is not directed to children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and address it.

Changes and contact

We may update this policy as the app changes. The date above identifies the latest revision. Questions can be sent to No Lymit Kraft’n at nolymitkraftn@gmail.com.