Privacy Policy (iOS and iPadOS)

This Privacy Policy explains how AUDITY APPS LLC (“Audity,” “we,” “us,” or “our”) handles information when you use the Lazy Lighting application on iOS or iPadOS (the “App”). It also explains your privacy choices and rights.

This Policy applies to the App, including its projection-mapping, creative, purchase, analytics, device-connection, and support features. A separate website privacy policy may apply when you visit lazylighting.com or another webpage opened from the App.

1. Privacy at a Glance

• You do not need to create a Lazy Lighting account to use the App.
• Your projects, imported media, camera images, microphone input, body or pose observations, MIDI activity, and smart-home information are generally processed locally on your Apple device. We do not operate a cloud service for syncing your projects or raw media.
• We collect app-usage information, device and app identifiers, diagnostic information, subscription and purchase status, and optional onboarding-survey responses.
• If you contact us through the App, we receive your message and optional contact information together with technical, subscription, locale, and survey context. The submission is stored in Google Firebase so we can review and respond to it.
• On iOS, we use analytics, subscription, and advertising-attribution services, including Firebase, Mixpanel, RevenueCat, and Meta. Cross-app tracking is subject to Apple’s App Tracking Transparency controls where required.
• We do not sell personal information for money. Some advertising or attribution disclosures may be considered “sharing” or targeted advertising under certain privacy laws, as explained below.

2. Information We Handle

2.1 Information You Provide

Onboarding and survey responses

The App may invite you to answer optional onboarding questions, including:

• your age range, including whether you are under 18;
• gender;
• experience or skill level;
• software you use;
• how you heard about Lazy Lighting;
• interests, intended uses, and project plans; and
• other onboarding preferences.

You may skip optional questions. Responses may be stored on your device and associated with an app-specific identifier. Depending on your device settings, locally stored responses and identifiers may also be included in a device backup. On iOS, responses may be sent to Firebase Analytics and Mixpanel. If you later submit feedback through the App, saved survey responses may be included with that submission.

Feedback and support information

When you send feedback, ask a question, or report a problem through the App, we may receive:

• your message and submission type;
• your optional email address;
• an app-generated installation identifier;
• app version, build number, bundle identifier, and platform;
• device model and hardware, operating-system version, screen characteristics, and low-power-mode status;
• language, locale, country or region code, and time zone;
• subscription, entitlement, and onboarding status;
• saved onboarding and survey responses; and
• a submission timestamp.

Providing an email address is optional unless the form states otherwise. If you provide an email address for support, we use it to respond to and administer your request, not to add you to a marketing list without separate permission.

Please do not include passwords, payment-card details, government identifiers, health information, information about children, or other information that is not necessary for your request.

Creative projects and media

Depending on the features you use, the App may locally process or store:

• project names, slot names, mapping geometry, masks, warps, effects, settings, and automation data;
• text, drawings, sketches, thumbnails, and generated graphics;
• images, videos, and audio files that you select or create;
• camera selections and capture settings;
• MIDI routes and control mappings; and
• exported or rendered videos and images.

This content is normally stored on your device. Apart from operating-system-managed backups or device transfers, it leaves your device only when you direct the App to export, share, save, project, or transmit it, including transmission to a paired receiver on your local network. It may be included in a device backup depending on your iCloud, Apple-device backup, or device-transfer settings.

Purchases and subscriptions

When you purchase or restore a subscription or other in-app purchase, Apple processes your payment. We do not receive your full payment-card or bank-account information. We and our subscription provider, RevenueCat, may receive:

• product and transaction identifiers;
• purchase, trial, renewal, expiration, refund, and cancellation status;
• entitlement and subscription status;
• storefront, currency, and limited transaction metadata; and
• an anonymous or app-specific customer identifier.

2.2 Information Collected Automatically

Identifiers

The App and its service providers may generate or receive identifiers such as:

• Firebase app-instance and installation identifiers;
• Mixpanel distinct identifiers on iOS;
• RevenueCat anonymous customer identifiers;
• Crashlytics installation identifiers;
• an App-generated installation UUID included with support submissions;
• Apple advertising or attribution identifiers when available and permitted;
• integrity, anti-abuse, and receiver-pairing identifiers or tokens.

These identifiers may not directly state your name, but they can distinguish your device or App installation and are treated as personal information where applicable law requires.

Usage and analytics information

We may collect events and properties concerning how the App is used, including:

• app launches, sessions, screen views, and onboarding progress;
• feature selections and interactions;
• mapping, playback, connection, save, export, and setup activity;
• paywall views, subscription events, trials, and purchase results;
• referral or campaign attribution;
• survey questions and responses;
• device type, app version, language, and general configuration; and
• whether tracking permission was requested, granted, denied, or restricted.

We use this information to operate the App, understand feature use, measure performance, improve usability, troubleshoot problems, and measure marketing effectiveness.

Diagnostics

We use Firebase Crashlytics and related tools to receive crash reports, stack traces, session data, device and operating-system details, app state and diagnostic context, logs, and identifiers. Analytics events may be attached to crash reports as diagnostic breadcrumbs.

Approximate location

The App does not request GPS or precise-location permission for its ordinary features. However, we and our providers may process an Internet Protocol address and infer a general location such as country, region, or city. We also receive a device locale, country or region code, language, and time zone in certain contexts, including support submissions. We do not use this information to determine your precise physical location.

Security and integrity information

We may process device, app, network, installation, request, and integrity signals through services such as Firebase App Check and Apple App Attest. Where the relevant controls are enabled or enforced, these signals can help authenticate legitimate App requests, reduce spam or abuse, investigate security incidents, and protect the App and its users.

2.3 Device Permissions and Primarily On-Device Processing

The App may request the permissions described below. Denying a permission may prevent the associated feature from working.

Camera and visual analysis

The camera may be used for QR-code pairing, live-camera visuals, projection alignment, backdrop or sketch capture, tag or marker detection, and face, head, hand, body, or pose tracking used to control visual effects. Camera frames and observations are generally analyzed locally. We do not use them to identify you, create a facial-recognition profile, or build a biometric-identity database, and we do not intentionally send raw camera frames or body observations to our servers.

If you record, export, or transmit a rendered result, that output may contain imagery derived from camera input according to your choices.

Microphone and audio

The microphone may be used to calculate local audio levels, frequency bands, beats, or similar values that drive reactive visual effects while an audio-reactive feature is active. We do not intentionally upload or retain raw microphone audio on our servers. Audio that you import, record into a user-created output, or include in an exported video is handled according to your instructions.

Photos, videos, files, and storage

You may select images, videos, audio, or other files and save rendered output to your photo library or device storage. Selected content is copied or accessed only as needed for the feature you choose. Copies may remain in project storage, exported locations, temporary caches, backups, or a paired receiver until you delete them from those locations.

Local network, Wi-Fi, and receiver connections

The App may use local-network discovery, multicast, Bonjour, HTTP, and socket connections to find, pair with, and transmit content to a Lazy Lighting receiver or compatible display. At your direction, the App may transmit a device name, app-generated device identifier, pairing information, authentication token, mapping image, rendered video, or live video stream to that receiver.

Some local-network receiver connections may not be end-to-end encrypted and may use unencrypted local HTTP or TCP protocols. Use this feature only on a network and with a receiver you trust. Other people with access to the same network or receiver could potentially observe, intercept, alter, or retain transmitted information. Deleting content from the App does not necessarily delete a copy already transmitted to a receiver; removal may require deleting the content from or resetting the receiver.

HomeKit and smart-home information on iOS

If you choose a HomeKit smart-bulb feature, the App may access home, accessory, room, service, and bulb information needed to locate and control compatible lights, including names, power state, brightness, hue, and saturation. This information is generally processed through Apple’s HomeKit framework on your device and is not intentionally sent to our servers.

Bluetooth and MIDI

The App may use Bluetooth or network MIDI to discover or communicate with controllers and to process notes, control changes, and other MIDI messages. These messages and mappings are generally processed locally and are not intentionally sent to our servers.

3. How We Use Information

We may use information to:

• provide, personalize, maintain, and improve App features;
• save and restore local settings and projects;
• process, verify, restore, and support purchases and subscriptions;
• respond to feedback, support requests, and bug reports;
• understand feature adoption, engagement, and onboarding;
• diagnose crashes, performance issues, and technical failures;
• conduct research, testing, and product development;
• measure installs, subscriptions, and marketing-campaign performance;
• protect against fraud, abuse, unauthorized access, and security incidents;
• comply with law, enforce our terms, and establish or defend legal claims; and
• create aggregated or de-identified information that no longer reasonably identifies an individual.

4. Feedback Storage and Support Handling

When you submit feedback through the App, the submission is stored in a Google Firebase/Firestore database. If you provide an email address, we may use it to respond to your submission.

5. Analytics, Attribution, and Advertising on iOS and iPadOS

The App uses Firebase, Mixpanel, RevenueCat, and Meta services. These services may process identifiers, purchase and subscription events, app interactions, device information, diagnostics, and campaign-attribution information for analytics, App functionality, subscription administration, and marketing measurement.

The App may present Apple’s App Tracking Transparency prompt in connection with activity used to track across apps or websites owned by other companies. You can deny the request or later change your choice in Settings > Privacy & Security > Tracking. Your choice limits access to tracking identifiers and cross-app tracking, but some services may initialize and process device, app, purchase, security, diagnostic, or analytics information before or independently of that choice when the processing is not controlled by ATT.

The iOS and iPadOS App does not currently display third-party advertisements inside the App.

6. Legal Bases for Processing

Where a law such as the European Economic Area or United Kingdom data-protection laws requires a legal basis, our bases generally depend on the purpose:

Purpose	Legal basis generally relied upon
Provide requested App functions, purchases, subscriptions, exports, and receiver connections	Performance of our contract with you or steps requested before entering a contract
Respond to support and feedback	Performance of our contract where support relates to a purchased or requested service; otherwise our legitimate interests in responding, improving the App, and maintaining support records
Essential operations, diagnostics, security, fraud prevention, and service integrity	Our legitimate interests in operating and protecting the App and users; legal obligation where a specific duty applies
Optional product analytics and onboarding research	Consent where required; otherwise our legitimate interests in understanding and improving the App after balancing those interests against your rights
Advertising, cross-app tracking, and marketing attribution	Consent where required by privacy or device-access law; otherwise only another basis permitted by applicable law
Accounting, tax, consumer protection, regulatory requests, and other compliance	Legal obligation
Establish, exercise, or defend legal claims	Our legitimate interests and applicable legal-claims provisions
Protect someone’s life or physical safety in an emergency	Vital interests, where applicable

Where we rely on consent, you may withdraw it prospectively through the control presented when consent was obtained or another available App, device, or platform control. A device permission or ATT choice is not necessarily consent for every separate use of information. You may contact us if you cannot find an applicable control. Withdrawal does not affect processing that was lawful before withdrawal.

You are not required to answer optional survey questions or provide optional contact information. Some device, purchase, diagnostic, security, or technical information is necessary to provide a requested feature or operate the App reliably.

7. When We Disclose Information

We may disclose information to the following recipients for the purposes described in this Policy:

• Apple: App distribution, device services, platform permissions, purchases, subscriptions, attribution, integrity, and developer services.
• Google Firebase and Google Cloud: analytics, crash reporting, remote configuration, App Check, and feedback database storage.
• Mixpanel: iOS analytics, automatic events, user or installation properties, onboarding responses, and engagement measurement.
• RevenueCat: anonymous customer management, purchase and subscription status, entitlements, attribution, and purchase support.
• Meta: iOS app-event measurement, advertising attribution, and marketing measurement, subject to platform permissions and applicable law.
• A receiver or destination you choose: local-network pairing, project upload, live casting, export, saving, or sharing initiated by you.
• Professional advisers and authorities: lawyers, accountants, auditors, insurers, courts, regulators, law enforcement, or other parties when reasonably necessary to comply with law, protect rights and safety, or establish or defend legal claims.
• Business-transaction participants: a potential or actual buyer, investor, lender, successor, or adviser in connection with a merger, financing, reorganization, sale of assets, insolvency, or similar transaction, subject to appropriate protections.

Providers may process information in countries where they or their subprocessors operate. Their handling may also be governed by their own privacy notices and platform terms.

We require providers acting solely on our behalf to handle personal information consistently with our instructions and to maintain protections appropriate to the information and service. Where Apple’s requirements apply, we require third parties that receive App user data to provide the same or equivalent protection described in this Policy. Apple, Google, Meta, advertising partners, and other platform providers may in some circumstances determine their own purposes and means of processing; their own privacy notices also apply. These roles depend on the service, configuration, and applicable law.

8. Sale, Sharing, and Targeted Advertising

We do not sell personal information for monetary compensation.

Depending on the jurisdiction and the configuration of advertising or attribution services, disclosing identifiers, purchase events, or app events to Meta or other attribution partners for cross-app advertising measurement or targeting may be considered “sharing,” “targeted advertising,” or a “sale” even when no money is exchanged for the information.

You may manage cross-app tracking through Apple’s tracking control. If applicable law gives you an additional right to opt out of sale, sharing, or targeted advertising, you may submit a Privacy Request as described below. We will process the request to the extent required by law and to the extent the relevant records or installation can reasonably be identified. We do not offer financial incentives in exchange for personal information.

9. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including to provide the App, maintain security, resolve disputes, enforce agreements, and satisfy legal obligations. Our general retention schedule is:

Information	General retention period
Projects, settings, imported media, survey responses, and other information stored locally	Until you delete it where a deletion control is available or uninstall the App, subject to device backups, exported copies, and receiver copies
Feedback submissions and associated technical/survey context stored in Firebase	Up to 24 months after submission
User- or installation-level analytics events and properties	Up to 14 months, unless a shorter period is required or selected
Crash and diagnostic reports	Generally up to 90 days
Purchase and subscription records under our control	For the subscription relationship and for any additional period genuinely required for tax, accounting, chargeback, dispute, or legal purposes
Privacy-request and consent records	Up to 24 months after completion, or longer if required to demonstrate compliance

Aggregated or de-identified information that no longer reasonably identifies you may be retained for longer. Information subject to a legal hold, fraud investigation, security incident, or dispute may be kept until the matter is resolved. Copies in backups may persist until they are overwritten or deleted through the applicable provider or device backup lifecycle.

10. Security

We use reasonable administrative, technical, and organizational measures designed to protect information, including access restrictions, provider authentication, transport security for communications with our cloud services, and pseudonymous identifiers where appropriate.

Local-network casting and receiver connections may use protocols that are not end-to-end encrypted, as explained in Section 2.3. You should use those features only on trusted networks and receivers.

No security measure, transmission method, or storage system is completely secure. We cannot guarantee absolute security.

11. International Processing

Audity is based in the United States. We and our providers may process information in the United States and other countries that may have data-protection laws different from those where you live.

Where required and available under the applicable provider arrangements, international transfers may rely on contractual protections, adequacy decisions, or other lawful safeguards. The appropriate mechanism depends on the provider, destination, and applicable law. You may contact us for information about safeguards applicable to a particular transfer.

12. Your Choices

Depending on your device, App version, and location, you may:

• skip optional survey questions;
• choose whether to submit feedback or provide contact information;
• grant or revoke camera, microphone, photo, local-network, HomeKit, Bluetooth, and related permissions in iOS or iPadOS settings;
• manage Apple tracking permission in iOS or iPadOS settings;
• reset or limit platform advertising identifiers where the operating system permits;
• delete local projects and content where the applicable App version offers a deletion control;
• uninstall the App to stop future App collection and remove most locally stored App data;
• separately delete exported media, device backups, or copies stored on a receiver;
• manage or cancel a subscription through your Apple App Store account; and
• object to or request restriction of certain processing by contacting us.

Deleting the App does not automatically cancel a subscription or delete information already sent to our providers. Denying a permission or disabling a feature does not delete information previously collected.

13. Privacy Rights and Requests

Depending on where you live, you may have rights to:

• know whether we process your personal information;
• access or receive a copy of personal information;
• correct inaccurate information;
• delete personal information;
• obtain portable information in an appropriate format;
• restrict or object to processing;
• withdraw consent prospectively;
• opt out of sale, sharing, or targeted advertising;
• appeal a refusal of a privacy request; and
• receive equal service without unlawful discrimination for exercising a privacy right.

To submit a request, email support@lazylighting.com with the subject Privacy Request. Describe the right you wish to exercise and provide enough information for us to locate relevant records, such as the email used for support, platform, approximate submission date, and any App installation or feedback reference available to you.

The App does not use a Lazy Lighting account, and many records use pseudonymous identifiers. We may be unable to identify information as yours if you cannot provide information that reasonably matches our records. We may request proportionate verification, limit duplicative or abusive requests, or retain information where permitted or required by law. An authorized agent may submit a request where local law permits, subject to verification of the agent’s authority.

If we deny a request, you may appeal by replying to our decision with the subject Privacy Appeal. You may also complain to the data-protection or privacy regulator where you live.

Additional information for residents of certain U.S. states

In the preceding 12 months, we may have collected the following statutory categories: identifiers; contact and customer-record information; demographic characteristics such as age range and gender; commercial and purchase information; Internet or electronic-network activity; approximate geolocation; user-provided feedback content; and diagnostics. Audio or visual content processed locally or transferred only to a receiver you choose is described separately in Section 2.3. The sources, purposes, recipients, and retention periods for these categories are described throughout this Policy.

We do not sell personal information for money and do not provide financial incentives for personal information. Where applicable law treats advertising or attribution disclosures as sale, sharing, or targeted advertising, you may opt out as described above. We use sensitive information, if any, only for permitted purposes such as providing requested functionality, securing the service, or complying with law, unless we first provide any notice and choice required by law.

14. Children’s Privacy

Lazy Lighting is a general-audience creative tool and is not directed to children under 13. Apple’s 4+ content rating describes content suitability and does not change how this Policy applies.

We do not knowingly collect personal information from children under 13. Children under 13 should not submit onboarding-survey responses, feedback, contact information, or other personal information through the App.

If you are a parent or guardian and believe a child provided personal information, contact support@lazylighting.com. We will investigate and delete the information or take other action required by applicable law.

15. Third-Party Services and Links

The App may open Apple, Google, Lazy Lighting, social-media, support, or other third-party webpages. Those services may use cookies, web storage, identifiers, or analytics under their own privacy policies. We do not control third-party sites or services merely because the App links to or displays them.

16. Changes to This Policy

We may update this Policy to reflect changes in the App, providers, law, or our practices. We will post the updated Policy with a revised effective date. If a change materially affects how we use information, we will provide additional notice or obtain consent where required by law.

17. Contact Us

The controller responsible for this Policy is:

AUDITY APPS LLC
United States
Email: support@lazylighting.com

Use the subject Privacy Request for privacy-rights requests and Privacy Question for other privacy inquiries.