CHARM

Legal

Privacy Policy

Effective July 3, 2026

Tiny Vessels Creative, LLC (“Tiny Vessels Creative,” “we,” “us”) builds and operates CHARM and this website, charmlyfe.com. We designed both to collect as little personal data as possible. This policy explains what we collect, why, who processes it on our behalf, and the rights you have.

1. Who is responsible for your data

Tiny Vessels Creative, LLC is the data controller for personal data described in this policy. We are based in Metro Atlanta, Georgia, United States. For any privacy request or question, contact us through the contact page.

2. The CHARM app

CHARM is built to be private by default. The app itself contains no analytics SDKs, no advertising, no third-party trackers, and builds no behavioural profile of you.

  • Subscriptions. Purchases are processed by Apple’s App Store and Google Play, with entitlements managed through RevenueCat. This involves an anonymous, app-generated identifier and purchase records used solely to confirm your subscription. We never receive or store your payment-card details.
  • Live space weather. The app fetches public solar-weather data from NOAA to colour the sky. This is the same public feed for everyone and carries no personal information.
  • Offline by design. Aside from that feed and periodic licence checks that confirm an active subscription, the app runs on your device without sending your activity to us.

3. This website

charmlyfe.com is a static site hosted on Cloudflare. Depending on your cookie choices, it may involve:

  • Analytics (only with your consent). If you allow analytics, we use Google Analytics 4 to understand which pages are useful. It sets cookies and processes usage data — pages viewed, approximate location derived from a truncated IP address, device and browser type, and a pseudonymous identifier. We enable IP anonymisation. Google, Inc. acts as our processor; Google may process this data in the United States. Analytics never loads unless you opt in, and you can withdraw consent at any time. See our Cookie Policy for the specifics and the on-site controls.
  • Contact form. When you send a message, the name, email address, and text you submit are delivered to our private inbox through the email service Resend for the sole purpose of replying to you. We do not sell this information or use it for marketing.
  • Security and delivery logs. Our host, Cloudflare, processes standard server logs (including IP addresses and request metadata) to deliver the site and protect it against abuse. This is necessary for a functioning, secure website.

The site sets no advertising or cross-site tracking cookies, and we do not sell or share your personal information for cross-context behavioural advertising.

4. Why we may process your data (legal bases)

  • Consent — for analytics cookies. You may withdraw it at any time.
  • Legitimate interests — to keep the site and app secure and reliable, and to respond to messages you send us.
  • Contract — to provide and manage a subscription you purchase through an app store.

5. Service providers we rely on

We share personal data only with vendors that process it on our behalf, under contract, and only as needed:

  • Cloudflare — website hosting, delivery, and security.
  • Google — analytics, if you consent.
  • Resend — delivery of contact-form messages to our inbox.
  • Apple, Google, and RevenueCat — subscription purchase and entitlement management.

We do not sell your personal data, and we do not permit these providers to use it for their own purposes.

6. International transfers

Some providers are located in, or process data in, the United States. Where data is transferred out of your region, it is protected by appropriate safeguards such as Standard Contractual Clauses or the provider’s certified transfer framework.

7. How long we keep it

We keep contact-form correspondence only as long as needed to handle your enquiry and any follow-up, then delete it. Analytics data is retained for a limited period under Google Analytics’ retention settings. Security logs are kept for a short period by our host. Subscription records are held by the app stores under their own policies.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data; to restrict or object to certain processing; and to withdraw consent. If you are in California, you may request to know, delete, or correct your information and to opt out of “sale” or “sharing” — note that we do neither. We will not discriminate against you for exercising any right. We honour recognised opt-out signals such as Global Privacy Control for analytics where applicable.

To exercise any right, reach us through the contact page. Because the app holds essentially no personal data, most requests concern contact-form messages or analytics. You may also complain to your local data-protection authority.

9. Children

CHARM is not directed to children under 13 (or the equivalent minimum age in your country), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

10. Security

We use reasonable technical and organisational measures — including encryption in transit and least-privilege access — to protect personal data. No method of transmission or storage is perfectly secure, but we work to keep the surface small by collecting little in the first place.

11. Changes

We may update this policy as CHARM evolves. Material changes will be posted here with a new effective date. Your continued use after an update constitutes acceptance of the revised policy.

12. Contact

Questions or requests? Reach Tiny Vessels Creative, LLC through the contact page. You can review or change your cookie choices anytime via cookie preferences.