This Privacy Policy explains what we collect and why. Our guiding principle: we collect as little as possible, and your images stay on your device.
Your images stay local
The MythaPrism tool edits your pictures, matches them and builds the print in your browser or on your device. We do not upload, receive, or store your source images, their file names or metadata, or the designs you create.
Every engine runs on your device
Every color-match engine, on every plan, runs in your browser or on your device. Matching a picture sends nothing to us. Opening a paid edition of the tool needs an internet connection so we can confirm your sign-in and your plan. That check sends your sign-in token and nothing about your pictures. Once a tool page is open, editing, matching and exporting keep working without a connection. If we ever move any part of the planning to our servers, we will update this policy before that change takes effect and say exactly what would be sent.
MythaBraille
MythaBraille, the free braille tool, sends us nothing. After the page loads it makes no further requests: no analytics, no cookies, no account, no uploads. The text you type and the files you make stay on your device. It keeps one autosave of your work in your own browser (local storage named mythabraille.v1) so a reload does not lose it. You can clear it in your browser settings at any time. Like any website, the host that serves the page (Cloudflare for mythaprism.com, or GitHub if you open MythaBraille from GitHub Pages) receives the normal details of that one page request, such as your IP address and browser. Opening MythaBraille from your account page uses your account only to show the Launch button. MythaBraille itself does not know who you are.
What we collect
Account data: if you create an account, your email address and the sign-in method (an email code or link, Google or Apple). Google or Apple sign-in shares your email and basic profile with us via Supabase authentication. We never see a password.
Entitlements: which plan or license your account has unlocked, license keys, status and renewal date. Stored via Supabase.
Waitlist (pre-launch): if you join the launch list, the email address you enter, which plan option you tapped, your browser's user-agent string and the time. It is used only to send the launch note and to plan the launch. It is never sold or shared, one entry per email is kept, and you can have it deleted by emailing support@mythaprism.com.
Enforcement records: if an account is suspended or terminated for breach (for example an infringement complaint), we keep the account email and a short record of the reason so that the decision can be enforced and the account cannot simply be re-created. Copyright notices and counter-notices we receive (see the Copyright / DMCA Policy) are kept as enforcement records, including the sender's contact details, for as long as needed to act on them and to apply the repeat-infringer rule.
Device registry (every account): to enforce the device limit and the monthly device-change allowance (Terms §2), each signed-in browser or app install generates a random device identifier. We store that identifier, a short device name derived from your browser (for example "Chrome on Windows"), last-used timestamps, and a record of each device change (when it happened and which device was removed). You can see your devices and your remaining changes, and remove a device, from your account page.
Free download count: if you use a free account, each time you download a print file we record the date and a one-way fingerprint of the print (a short code computed from the print's settings, never your picture) so the monthly limit can be applied and the same print is not counted twice, and, if you buy download packs, how many pack downloads your account has left. You can see your own count and balance. Nobody else can.
Two-step sign-in (optional): if you turn it on, our sign-in provider (Supabase Auth) keeps a record of each authenticator you add: an identifier, the name it shows in your settings, when it was added and whether it is confirmed, and the shared secret it uses to check the 6-digit codes. The codes themselves are checked and not kept. Removing an authenticator deletes its record. It is used only to sign you in.
App lock (optional, apps only): when you turn on the app lock, the app asks your phone's own system (Face ID or Touch ID on Apple devices, the system face or fingerprint unlock or screen lock on Android) to confirm it is you. The phone checks your face, fingerprint or passcode itself and tells the app only whether it succeeded. MythaPrism never receives, stores or sends your face, fingerprint or passcode. The on or off setting is kept in the app's secure storage on that phone.
Consent record: when you accept the Terms we record which version you accepted, when, and your browser's user-agent string.
Payment data: handled by Paddle, our Merchant of Record. We do not receive or store your full card details. Paddle shares limited transaction data (e.g., product, status, country for tax) with us to activate your plan.
In-app purchases: when you buy in the iPhone, iPad or Android app, the store gives the app a signed record of the purchase (the product, the dates, a transaction or purchase id). The app sends that record to us with your sign-in, and we confirm it with Apple (its signature) or Google (the Google Play Developer API) before your plan unlocks, Apple and Google tell us later about renewals, cancellations and refunds of that purchase. We store the product, status, dates, the store's id for the purchase and which MythaPrism account it belongs to. We never receive your card or bank details. Apple or Google keeps them.
In the apps: the apps keep your sign-in in the device's secure storage (the iOS Keychain or the Android Keystore) and talk only to MythaPrism's own servers (sign-in, your plan, devices, download counts and purchase checks) and to the store for purchases. Your photos and prints stay on the device.
Site analytics: the website may use privacy-respecting, cookieless aggregate analytics (Cloudflare Web Analytics) that count page views without identifying you or tracking you across sites. No advertising trackers, ever.
Cookies & local storage
The website uses only essential cookies and browser storage: your sign-in session (Supabase), payment/checkout state (Paddle), your acceptance of the Terms, and the device identifier described above. An invisible bot check (Cloudflare Turnstile) runs on the sign-in form and may set temporary storage for that purpose. No advertising or tracking cookies are set.
Children
The Service is not directed to children under 13 and we do not knowingly collect personal data from them. Contact us to have any such data deleted.
Your rights (EU/UK/California)
You may access, correct, export or delete your account data, or object to processing, by emailing support@mythaprism.com. We keep the data described above only as long as your account is active and as tax and legal rules require.
How we use it
To provide your account, activate and manage your plan, deliver downloads and license keys, provide support, and comply with tax and legal obligations.
Sharing
We share data only with the service providers that run the Service: Supabase (accounts and database), Paddle (payments and tax), Cloudflare (hosting, security and bot protection), the email provider that delivers your sign-in links, and, for purchases made inside the mobile apps, Apple or Google as the store of purchase (we ask the store to confirm each purchase), and as required by law. We do not sell your personal data.
Your choices & deleting your account
You can delete your account at any time from your account page on the website or inside the mobile apps, or by emailing support@mythaprism.com. Deleting removes your sign-in record, entitlement rows, device registry and consent records. Paddle keeps the transaction records the law requires it to keep as merchant of record. You can unsubscribe from non-essential emails. A subscription bought in the App Store or Google Play is billed by that store: cancel it in the store's subscription settings. Deleting your MythaPrism account does not stop the store from billing you.
Data retention
We keep account and entitlement records for as long as your account is active and as required for tax and legal purposes. Free download records and device-change records are kept for 13 months and then deleted. Records of the store messages about an in-app purchase are kept for 90 days (the plan row keeps the outcome). Pack balances are kept while your account exists.
Contact
Privacy questions: MythaPrism LLC (formerly SculptraPrism LLC, same company, renamed by amendment), by email at support@mythaprism.com, or by mail at PO Box 47373, Windsor Mill, MD 21244, USA.