Privacy Policy
Last updated: October 24, 2026
Theme Studio (the "Service") is operated from themestudio.co and as a companion iOS app on the App Store. This policy explains what data the Service processes and how.
Short version: we don't collect or sell personal information. The web editor runs entirely in your browser. The iOS app stores your themes on your device.
1. What we collect
1.1 Web editor (themestudio.co)
Everything you create in the web editor is stored locally in your browser using IndexedDB and localStorage. It does not reach our servers unless you choose to share a theme (see 1.4 Theme sharing).
| Data | Where | Purpose |
|---|---|---|
| Themes you create | Browser IndexedDB | So your work survives a page reload. |
| Uploaded images (wallpaper, icon bg, widget bg) | Browser IndexedDB (as Blobs) | Bundled into your .tstheme export. |
| Notes | Browser localStorage | So you have a scratchpad while you work. |
| UI preferences (column count, expanded packs) | Browser localStorage | To remember your last view. |
Wallpapers and icon images you browse are loaded from our CDN at
cdn.themestudio.co (Cloudflare R2). Standard HTTP
request logs (IP address, user-agent, referrer, requested URL) are
retained briefly by Cloudflare for security and abuse mitigation.
We do not attach those logs to any user identity.
1.2 iOS app
The Theme Studio iOS app bundles its themes, icon catalog, and search index inside the app itself. Your own creations (custom themes, exported icons, settings) are stored on your device only. We do not transmit your themes, exports, or any device identifiers to a server we control.
Wallpaper images and icon-pack PNGs not bundled in the app are
fetched from cdn.themestudio.co on demand. Those
requests have the same minimal logging characteristics described
above; nothing about the requesting device is logged beyond
standard CDN telemetry.
1.3 iOS permissions
Theme Studio may ask for up to five permissions, and each is requested only when you use the feature that needs it. You can decline any of them and the rest of the app keeps working. Theme Studio does not track you (there is no App Tracking Transparency prompt) and does not collect or sell any of this data.
-
Photos (Add Only) via
NSPhotoLibraryAddUsageDescription: saves your exported icons and wallpapers to your photo library so you can apply them as Home Screen icons via the Shortcuts app and set wallpapers from Photos. -
Photos (Selected Photos) via
NSPhotoLibraryUsageDescription: lets you pick your own images to use as custom icon backgrounds and wallpapers. Selected photos stay on your device and are never uploaded. -
Location (While Using the App) via
NSLocationWhenInUseUsageDescription: used only to fetch local weather for weather widgets. Your location is sent only to Apple Weather (WeatherKit) and is never collected by Theme Studio or shared with third parties. You can instead pin a city by name, which needs no location permission. -
Calendars via
NSCalendarsFullAccessUsageDescription(iOS 17 and later) orNSCalendarsUsageDescriptionon older iOS: lets widgets show your upcoming events. The app only reads events, it never creates or edits them. -
Motion & Fitness via
NSMotionUsageDescription: lets step widgets show your step count, read from the iPhone's motion sensor. Your step data stays on your device and is never collected or shared.
1.4 Theme sharing (Share to Phone, share links & codes)
Sharing is optional. When you use Share to Phone or
create a share link, your theme is packaged into a .tstheme
file and uploaded to our servers (Cloudflare R2 storage plus a small
database index) so it can be delivered to your phone via a link, QR
code, or short code.
| Data | Where | Purpose |
|---|---|---|
The shared .tstheme (including any images you added to that theme) |
Cloudflare R2 | So the theme can be downloaded and imported on a phone. |
| A random share code, the theme's name (if any), timestamps, and a download count | Cloudflare D1 database | To resolve the link/code and show basic info. |
| A salted hash of your IP address | Cloudflare D1 database | Rate-limiting only. It is a one-way hash, not your IP, and is not linked to any identity. |
Share links are unlisted and not indexed, but they are not secret: anyone who has the link, QR code, or code can download that theme. Please don't share a theme containing an image you wouldn't want the recipient to have.
How long shares last. A user share stays available while people use it: each download keeps it for another year, and a share with no downloads for a year is deleted, including the stored file. A small number of official codes we assign to promote setups in our own videos are permanent. No account is required to share. You can delete your own share at any time with Delete this share in the share box where you created it, or contact us (see Contact) with the link or code.
2. Subscriptions & purchases
Theme Studio Pro is sold through Apple's App Store (Monthly, Yearly, and Lifetime options). When you purchase or restore:
- Apple handles the transaction. We never see your name, billing address, or payment card.
- RevenueCat (the SDK we use to track subscription state) receives your Apple-assigned transaction identifier and an anonymous app user ID generated on first launch. This is what lets the app know you've paid. RevenueCat does not receive any personal data and does not link your purchase to identity outside the app. See RevenueCat's privacy policy.
Subscriptions auto-renew through your Apple ID until you cancel. You can manage or cancel anytime from Settings → [Your name] → Subscriptions on your iPhone. See the Terms of Service for the full subscription terms.
3. Analytics
To understand which pages people visit and which links bring them
here, themestudio.co keeps a simple log of page views on our own
Cloudflare database. For each page view it records the page address,
the referring website's domain (not the full address), campaign tags
in the link (such as utm_source or ct), your
country (from Cloudflare), and the time.
It does not use cookies or store your IP address. To count unique visitors, it stores a one-way hash of your IP address and browser type combined with a secret value that changes every day, so a visitor can't be recognized from one day to the next and the hash can't be turned back into an IP address. Automated traffic (bots and scripts) is not logged. We use this data only in aggregate and don't share or sell it.
The iOS app does not include any third-party analytics or tracking SDKs. No advertising identifiers, attribution SDKs, or crash-reporting services are present.
4. Cookies and similar technologies
themestudio.co does not set any cookies. It uses your browser's local storage and IndexedDB to remember your themes; these never leave your device.
5. Children
Theme Studio is not directed at children under the age of 13 (or under 16 in the EU/UK). We do not knowingly collect data from children. If you believe a child has provided data, contact us and we'll remove it.
6. Your rights & deleting your data
Because we hold no personal data on our servers, there is generally nothing for us to access, correct, or delete on your behalf.
- iOS app: uninstalling Theme Studio removes every file the app stored on your device: your themes, exports, settings, and the local copy of your subscription state. There is no separate "delete account" step because there is no account.
- Web editor: use the Delete My Data page or clear site data for themestudio.co in your browser settings.
- Apple subscription record: Apple retains a record of your purchase under your Apple ID. You can manage it from Settings → [Your name] → Subscriptions. That record is governed by Apple's privacy policy, not ours.
Questions or special requests? Email hello@themestudio.co and we'll respond within 30 days.
7. Data retention
Web-editor data is retained on your device for as long as you choose. Cloudflare's standard CDN logs are retained for a short period per their policy and are not linked to any user identity. Page-view logs (see 3) are kept for up to 25 months and then deleted automatically. Shared themes (see 1.4) are kept while people use them and deleted after a year without a download, or sooner if you delete the share or ask us to remove it; official codes we assign are kept until we retire them.
8. International users
Theme Studio is operated from the United States. Our CDN serves content from edge locations worldwide. If you are visiting from outside the United States, your interaction with our site involves transferring information across borders.
9. Changes to this policy
We may update this policy when the product changes (e.g. when we add accounts or subscriptions). The "Last updated" date at the top will change to reflect that. Material changes will be highlighted on the home page.
10. Contact
Questions about this policy? Email hello@themestudio.co.
11. YouTube
Theme Studio publishes videos to our own YouTube channel (@ThemeStudioApp) using YouTube API Services, through a private, internal publishing tool. This tool is used only by the Theme Studio team and only connects to channels we own. It does not collect or process any data from users of the Theme Studio app or website.
By watching or interacting with our videos on YouTube, you are subject to the YouTube Terms of Service and the Google Privacy Policy.
The data our tool accesses through YouTube API Services is limited to our own channel: the videos we upload, their titles, descriptions and settings, and basic view statistics. We store the access credentials for our channel on our own server and do not share them with anyone. Access can be revoked at any time through the Google security settings page at https://myaccount.google.com/connections, and we delete stored YouTube data within 30 days of access being revoked or on request to hello@themestudio.co.