Privacy Policy

Effective date: July 6, 2026 · Last updated: July 6, 2026
Applies to the Noodle iOS application (the “App”) and this website (the “Site”), operated by OpaYeeHaw (“we,” “us,” or “our”).

1. Information we collect

We do not collect, store, transmit, sell, share, or process any personal information. Specifically, the App does not collect: contact information, identifiers, location data, photos or videos, usage data, diagnostics, browsing history, purchase history, financial information, health data, or any other category of personal data. The App requires no account or registration, contains no analytics, advertising, or tracking technologies, and includes no third-party SDKs. The App's own code makes no network connections to us; we operate no servers that receive user data. The App's App Store privacy label is “Data Not Collected.”

2. Your photos and videos

The App requests access to your photo library (via Apple's PhotoKit framework) solely so that you can select items to display on your own device. Your photos and videos are never copied, stored, or uploaded by the App or by us. When you save a collection, the App stores only local references (system identifiers) to the items you selected — never the media itself — together with any names, tags, and notes you enter. All of this remains on your device and is encrypted at rest using a key protected by your device's Secure Enclave.

3. Permissions the App requests

• Photo library access — to let you pick what to show. You may grant full or limited access, or revoke it at any time in iOS Settings.
• Face ID / device authentication — used to lock and unlock the App and its viewer. Biometric authentication is performed entirely by iOS; the App never receives, sees, or stores biometric data.

4. Apple services used by the App

Certain features rely on Apple frameworks and services. In each case the data involved is handled by Apple under Apple's privacy practices and terms, not by us:

• Place names (geocoding) — to label a collection like “Beach Trip,” the App asks Apple's geocoding service to convert photo coordinates into a place name. Only coordinates are transmitted, by Apple's framework, to Apple.
• iCloud backup (optional, off by default) — if you enable it, collection metadata (names, tags, notes, and item references — never photos or videos) syncs through your own private iCloud account. The data is encrypted with a key from your device before upload. We have no access to your iCloud account or its contents.
• Siri & Shortcuts — voice and shortcut requests are processed by Apple; the App receives only the resulting command on your device.
• App Store purchases — any in-app purchase (e.g., a “Noodle+” unlock) is processed entirely by Apple. We never receive your payment details.

5. Share extension and widget

Sharing items into Noodle from the Photos app reads only a minimal metadata signature (filename, capture date, and pixel dimensions — no location data and no media) to match the items back to your library. This occurs entirely on your device. The “On This Day” widget stores a single thumbnail and caption in the App's private container on your device.

6. Data retention and deletion

Because all App data lives on your device, you control it completely. Deleting a collection deletes its data; deleting the App deletes all data the App created. If you enabled the optional iCloud backup, you can remove that data via iOS Settings → your Apple ID → iCloud. We retain nothing, because we receive nothing.

7. Security — and its limits

The App applies reasonable technical safeguards: local data is encrypted at rest, unlocking is gated by Face ID or a PIN, and the locked viewer attempts to blank screenshots and screen recordings on real devices. However, no method of electronic storage or protection is 100% secure, and we cannot guarantee absolute security. In particular: screenshot and recording deterrence is best-effort and can be circumvented (for example, by photographing the screen with another camera); the protection of your device as a whole depends on your device passcode and the physical custody of your device, which remain your responsibility; and displaying content to another person necessarily discloses that content to them. You use the App's protective features as aids, not as warranties.

8. Your privacy rights (GDPR, UK GDPR, CCPA/CPRA, and similar laws)

Laws such as the EU/UK General Data Protection Regulation and the California Consumer Privacy Act grant rights to access, correct, delete, or port personal data, and to opt out of its sale or sharing. Because we do not collect or process personal data, there is ordinarily no data held by us on which to exercise these rights — we do not sell or share personal information, and we have none to disclose, including in response to legal requests. If you believe we hold any personal information about you (for example, an email you sent us), you may request access to it or its deletion at info@opayeehaw.com, and we will respond within the time required by applicable law.

9. Children's privacy (COPPA)

The App and Site are not directed at children under 13, and we do not knowingly collect personal information from anyone, including children. Since the App collects no data, no child's data is collected through it. If you believe a child has provided us personal information (for example, by email), contact us and we will delete it.

10. This website

The Site is a static page with no cookies, no analytics, and no tracking scripts. It is served by Cloudflare, whose infrastructure may process standard technical logs (such as IP addresses and request metadata) to deliver the Site and protect it from abuse, as described in the Cloudflare Privacy Policy. We do not receive or review these logs in the ordinary course.

11. Email

If you email us at info@opayeehaw.com, we receive the information you choose to send and use it solely to respond to you. We do not add you to mailing lists or share your address. Email you send us is the one category of personal information we may hold, and you may request its deletion at any time.

12. Third-party services and links

The App and Site reference third-party services (such as Apple and Cloudflare) and may link to third-party websites. Those services and sites are governed by their own terms and privacy policies, and we are not responsible for their practices.

13. License, disclaimers, and limitation of liability

Your use of the App is governed by Apple's Licensed Application End User License Agreement (the standard App Store EULA), including its warranty disclaimers and limitations of liability. To the maximum extent permitted by applicable law, the App and Site are provided “as is” and “as available,” without warranties of any kind, express or implied; and we shall not be liable for any indirect, incidental, special, consequential, or exemplary damages, or for loss of data, arising from or related to your use of the App or Site — including disclosure of content you chose to display to another person, circumvention of best-effort protections described in Section 7, or loss of locally stored data (keeping backups of your device is your responsibility). Nothing in this policy creates a contractual warranty or expands our obligations beyond those required by applicable law. If any provision of this section is held unenforceable, the remaining provisions remain in effect.

14. Changes to this policy

We may update this policy from time to time. Changes are effective when posted on this page, and the “Last updated” date above will reflect them. Material changes to how the App handles data would also be reflected in the App's App Store privacy label.

15. Contact

OpaYeeHaw · info@opayeehaw.com