Thumbframe

Privacy policy

For the Thumbframe app and this website · Last updated: 3 October 2026

In short

Thumbframe works without an account and without a server. Your projects stay on your device. The app collects no data, has no ads, no tracking and no analytics, and does not connect to the internet on its own. Data only leaves your device when you share it yourself or write to us.

Controller

The controller responsible for data processing is the provider named in the imprint, where you will also find the contact details.

Your projects stay on your device

Everything you create in Thumbframe – projects, screens, variants and notes – is stored only locally in the app's storage on your device. We have no access to it, and nothing is synced through our servers. When you delete the app, the operating system deletes this data as well.

Depending on your settings, the operating system includes the app's storage in your device backups: on iOS in iCloud or on a computer, on Android in the backup of your Google account. You and Apple or Google manage these backups; we have no access to them.

The app also reads your device's language setting to show the interface accordingly. This, too, happens only on the device.

Exporting, sharing and importing

  • When you export something – an image, the specification, the clickable prototype, a package or the project file – your device's share sheet opens. You decide where the file goes, for example to your files, to Mail or to another app. The respective provider is responsible for any processing there; we receive nothing.
  • “Copy spec” copies the specification to your device's clipboard. You decide where to paste it.
  • If you choose “Save Image” in the share sheet on iOS, iOS adds the image to your photo library and asks once for permission to add photos. The app cannot read your existing photos.
  • When importing, you pick a file yourself. The app reads only that file.

To share and import, the app briefly keeps copies in the device's cache.

Feedback by email

“Send feedback” opens your mail app with a prepared message to us. It contains the version numbers of the app and of your operating system; you can edit or remove them before sending. If you send the email, we process your email address, your name (if provided) and the content to reply to you and to improve the app. The legal basis is our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete the message once the enquiry is settled, unless statutory retention obligations apply.

App Store and Google Play

Thumbframe is distributed through Apple's App Store, and later through Google Play as well. For downloads and updates, Apple and Google process data such as your Apple ID or your Google account under their own responsibility, see Apple's privacy policy and Google's privacy policy. We do not receive this account data.

If you have turned on “Share with App Developers” on iOS (Settings › Privacy & Security › Analytics & Improvements), Apple provides us with crash reports and usage statistics without information that identifies you. On Android, Google provides us with crash reports and technical metrics (such as device model and Android version) if you have agreed to share usage and diagnostics data; these do not identify you either. We use this data only to find bugs and improve the app (Art. 6(1)(f) GDPR).

If you take part in a beta test – via TestFlight from Apple or a test on Google Play –, we also receive data from the test, such as the email address you were invited with, installation details, crash reports and feedback you send (with TestFlight also screenshots). We use it only for the test (Art. 6(1)(f) GDPR).

This website

We serve these pages from our own server, hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. To deliver a page, your browser sends technically necessary data to the server, such as your IP address, the page requested and your browser. The server uses this data only to answer the request (Art. 6(1)(f) GDPR) and keeps no access logs. A data processing agreement with STRATO is in place (Art. 28 GDPR).

The pages set no cookies, use no tracking and load nothing from third parties; the font is served from the same server.

No sharing with others

We do not sell data and do not pass any on to third parties. The app contains no advertising and no third-party analytics or tracking services.

Your rights

You have the right to access the data we process about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Write to us at the address in the imprint. You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Your projects are only on your device: you can export and delete them there at any time.

Changes

If the app changes, we update this policy. The version published here applies.