Privacy Policy

Last updated: March 24, 2026

1. Overview

WidgetDash ("the App") is an iOS application that lets you push data from any service and display it on your iPhone home screen and lock screen widgets. This policy describes what data we collect, how we use it, and your rights regarding that data.

We believe in keeping things simple: we collect only what is necessary to provide the service, and we do not sell, share, or monetize your data in any way.

2. Data We Collect

When you use WidgetDash, we collect the following information:

• Email address, provided during registration and used for account verification and communication.
• Password, stored securely using bcrypt hashing. We never store or have access to your plaintext password.
• Widget data, any data you push to the service via API calls. This is the content you choose to display on your widgets.
• API keys, generated for authenticating your requests to the service.
• Device push token (a device identifier), collected only if you use the Live Activities feature (Pro). The iOS app registers an Apple push token with our server so we can deliver real-time Live Activity updates to your device. It is used exclusively for that delivery, is never used for advertising or tracking, is never sold or shared, and is deleted when the related activity ends, when the token expires, or when you delete your account.

Beyond what is listed above, we do not collect precise location, contacts, photos, or other personal information, and no device identifier is collected other than the push token described above (and only when you use Live Activities). Our website uses privacy-friendly, first-party analytics only (aggregate page views and product events) — see “Cookies and Tracking” below. The iOS app collects nothing beyond the data you choose to push and, if you enable Live Activities, the push token above.

3. How We Use Your Data

Your data is used exclusively to provide the WidgetDash service:

• Email, to verify your account, send password resets, and communicate important service updates.
• Password, to authenticate you when you log in.
• Widget data, to store and deliver the content you push so it can be displayed on your widgets.
• API keys, to authenticate API requests from your scripts and automations.
• Device push token, to send Live Activity updates to your device through the Apple Push Notification service — nothing else.

4. Data Sharing

We do not share, sell, rent, or trade your personal data with any third parties. Period.

We do not use third-party analytics services, advertising SDKs, or cross-site trackers of any kind, and the app contains no third-party SDKs that collect user data. The website uses only our own first-party analytics, and that aggregate data is never shared or sold.

5. Cookies and Tracking

The WidgetDash iOS app does not use cookies and contains no tracking technologies, fingerprinting, or behavioral analytics.

Our website uses privacy-friendly, first-party analytics to understand aggregate usage (page views and product events such as sign-ups and source additions). Specifically:

• We store a random, first-party session identifier in your browser's local storage. It is not a cross-site tracking cookie and is not shared with anyone.
• To estimate unique visitors, we store a salted, non-reversible hash of your IP address — never the IP address itself.
• We use no third-party analytics, advertising SDKs, fingerprinting, or cross-site tracking. All analytics data stays on our own servers and is used only in aggregate.

6. Data Storage and Security

Your data is stored on our server infrastructure. We take reasonable measures to protect your information:

• Passwords are hashed using bcrypt before storage.
• API communication is encrypted via HTTPS.
• API keys are used for request authentication.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active. Widget data is stored until you delete it or overwrite it with new data. If you delete your account, all associated data (email, hashed password, API keys, widget data, and any device push tokens) will be permanently removed from our servers.

8. Your Rights

You have the right to:

• Access your data. View your account information and widget data at any time through the app or API.
• Delete your data. Request complete deletion of your account and all associated data.
• Export your data. Retrieve your widget data via the API at any time.
• Correct your data. Update your email or password through the app.

To exercise any of these rights, contact us at [email protected].

9. International Data Transfers

Your data may be processed and stored on servers located outside your country of residence. By using the Service, you consent to the transfer of your information to facilities outside your jurisdiction. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

10. European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis for processing: We process your data based on (a) your consent when you create an account, (b) the necessity to perform our contract with you (providing the Service), and (c) our legitimate interest in operating and improving the Service.
• Right to access: You may request a copy of your personal data.
• Right to rectification: You may request correction of inaccurate data.
• Right to erasure: You may request deletion of your personal data.
• Right to restrict processing: You may request that we limit how we use your data.
• Right to data portability: You may request your data in a structured, machine-readable format.
• Right to object: You may object to our processing of your data.
• Right to withdraw consent: You may withdraw consent at any time by deleting your account.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

11. California Users (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to delete: You may request deletion of your personal information.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.
• No sale of data: We do not sell, and have never sold, personal information to third parties.

12. Children's Privacy

WidgetDash is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

13. Disclaimer

WidgetDash displays data that you push to the Service. We do not verify, validate, or guarantee the accuracy of any data displayed through our widgets. You are solely responsible for the data you push and any decisions made based on that data. We accept no liability for any loss, damage, or harm arising from reliance on data displayed through WidgetDash.

14. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we will notify registered users via email. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the revised policy.

15. Terms of Service

Your use of WidgetDash is also governed by our Terms of Service, which include important provisions regarding disclaimers of warranties, limitation of liability, and indemnification.

16. Contact

If you have questions or concerns about this privacy policy or your data, contact us at:

[email protected]