Privacy Policy

This Privacy Policy describes how Canopy48 (“we,” “us,” or “our”) collects, uses, and shares information when you use the Little Linden mobile application (the “App”). It also covers your rights under applicable law, including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

This policy covers the Little Linden mobile application (the “App”) and the Little Linden website.

1. Information We Collect

a) Anonymous Session Identifier

When you first open the App, we automatically create an anonymous account for you using Supabase (our authentication and database provider). This generates a random unique identifier tied to your device. No name, email address, or other personally identifiable information is collected.

b) App Activity

We store the following data associated with your anonymous account:

• Tutorials and kits you have saved or bookmarked
• Your progress within tutorials
• Your subscription or access status

c) Usage Analytics

To understand which content resonates with families — so we can improve it and make more of what you enjoy — we record limited, first-party usage information tied to your anonymous identifier:

• Which tutorials and kits you view
• Which download files you tap, including the print format (for example A4 or US Letter) and the type of download you select
• The date and time your account was last active
• The device platform (iOS or Android) and app language associated with these actions

We use this information only in aggregate, to understand which crafts and downloads are popular and to improve our content. It is tied only to your anonymous identifier — never to your name or email address. We do not collect advertising identifiers or location data, and we do not use any third-party analytics, tracking, or advertising services.

d) Crash and Stability Diagnostics

When the app crashes, hangs, or fails to finish starting up, it records a technical diagnostic report so we can find and fix the fault. A report contains the app version, your device model and operating system version, the app language, how far start-up got before it failed, and the technical error details or stack trace. It contains no personal information and nothing about which content you view.

These reports are stored on our own servers and are tied only to your anonymous identifier. They are never sent to a third-party crash reporting service, and they are automatically deleted after 90 days.

e) Purchase Information

If you purchase a subscription, the transaction is processed by Apple (App Store) or Google (Google Play). We use RevenueCat to manage subscription status. RevenueCat receives a device identifier and subscription purchase receipt from the platform. We do not receive or store your payment card details. Please review RevenueCat’s Privacy Policy for details on how they handle purchase data.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the App
• Verify your subscription entitlement and unlock premium content
• Understand which of our offerings are popular so we can improve our content and create more of what you enjoy
• Respond to your support requests
• Comply with legal obligations

We do not sell your personal information. We do not use your data for advertising.

3. Legal Basis for Processing (EU / GDPR)

If you are located in the European Economic Area (EEA), we process your information under the following legal bases:

• Contract performance — to provide the App and any subscription you have purchased.
• Legitimate interests — to maintain the security and proper functioning of the App, and to understand aggregate usage trends so we can improve our content and the App.

4. Third-Party Services

We use the following third-party services that may process your data:

• Supabase — authentication and database infrastructure. Data is stored on servers operated by Supabase, Inc. See Supabase’s Privacy Policy.
• RevenueCat — subscription management. See RevenueCat’s Privacy Policy.
• Apple App Store / Google Play — payment processing and app distribution.

5. Data Retention

We retain your account data for as long as your account is active. If you request deletion of your account, we will delete your saved items and progress within 30 days. Purchase records may be retained as required by law or for tax and accounting purposes.

We record when your account was last active so that we can identify and remove accounts and their associated data after a prolonged period of inactivity (currently 12 months).

Crash and stability diagnostics are deleted automatically after 90 days.

6. Children’s Privacy

Little Linden is designed for all ages and is family-friendly. The App uses anonymous authentication and does not collect any personally identifiable information from any user, including children under 13. No name, email address, or contact information is required to use the App. If you believe we have inadvertently collected personal information from a child under 13, please contact us at hellocanopy48@gmail.com and we will promptly delete it.

7. Your Rights

All Users

• Access & portability — you may request a copy of the data we hold about you.
• Deletion — you may request that we delete your account and all associated data.

EU / EEA Users (GDPR)

In addition to the rights above, you have the right to:

• Object to or restrict processing of your data
• Lodge a complaint with your local data protection authority

California Users (CCPA)

California residents have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To exercise your rights, contact us at the address below.

To submit a request, email hellocanopy48@gmail.com with the subject line “Privacy Request.” We will respond within 30 days (CCPA) or within one month (GDPR).

8. Data Transfers

Your data may be stored and processed in the United States or other countries where our service providers operate. If you are located in the EEA, these transfers are subject to appropriate safeguards (such as Standard Contractual Clauses) as required by GDPR.

9. Security

We take reasonable technical and organizational measures to protect your information against unauthorized access, loss, or misuse. However, no method of transmission over the internet or electronic storage is completely secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date at the top of this page. Continued use of the App after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: