Privacy Policy

This Privacy Policy explains how Yeehaw Technologies LLC (“we,” “us,” or “our”) collects, uses, and protects your information in connection with the Ünflat application (the “App”) and the website at unflatlowpoly.com (the “Site”).

1. Executive Summary

We believe in data minimization. Here is how we handle your information:

• Local by Default: The App works fully without an account. Your creations live locally on your device unless you choose to share them.
• No Ads, No Data Selling: We do not serve advertisements, and we never sell your personal data.
• Optional Accounts: Signing in is optional. You interact using a handle, not your real name or email address.
• You Control Your Content: You can delete your account or un-share public creations at any time.
• Age Restricted: Ünflat is for users 13 and older.

2. Device-Only Data (No Account Required)

By default, Ünflat runs locally on your device. Your figs, scenes, patterns, clips, and exported files (.glb, .png, .gif, .mp4, .stl, and .usdz) are stored on your device's local storage. Photos you import to use as textures, references, or backdrops are processed locally and are never uploaded to our servers unless you explicitly share a creation containing them to the public community.

3. Account Data (Optional)

If you choose to create an account, authentication is handled securely via Firebase Authentication (a Google service) using Apple, Google, or an email address. If you sign in, we collect and store the following on our secure servers:

• Credentials & Identity: An account ID, the email address provided by your sign-in method (never displayed publicly or used for marketing), and your chosen handle.
• Preferences: Your confirmation that you are 13 or older, and your toggle preference for viewing mature community content.
• Profile & Activity Data: Your profile bio, star points, the makers you follow, creations you have shared publicly, applause/favorites given, and in-app inbox messages.
• Usage Telemetry: A periodic, anonymized snapshot of your usage (e.g., total number of figs/scenes created, session counts, app version). We do not track individual taps or precise behavioral data.
• Cloud Backup (Plus Users Only): If you subscribe to Ünflat Plus, we store one cloud backup of your library via Firebase Storage, which is overwritten each time you manually sync.

4. Community Sharing, Remixing, & Marketing Rights

When you choose to share a fig, scene, pattern, or clip to the public community, we store the creation, its thumbnail, your handle, and the remix lineage.

• What is Uploaded: Any textures or paint applied to the creation—including textures generated from your personal photos—are uploaded so others can view the creation. Unused reference photos and backdrops are stripped before uploading.
• Remixing: Shared creations can be opened, modified, and remixed by other users. Your handle remains on the credit line.
• Marketing Usage: By sharing a creation to the public community, you grant us the right to display and use that creation in our promotional, advertising, and marketing materials (including app store listings, social media, and video trailers).
• Content Moderation: Public shares are actively moderated. You may un-share a creation at any time from its card, which revokes our right to use it in future marketing materials.

5. Diagnostics & Analytics

• Analytics: We use Google Analytics for Firebase to record generalized event data (e.g., app opened, fig created, export sent). This data is anonymized, named by event category rather than specific content, and used strictly to understand overall app stability and feature usage. We do not use this data for advertising or cross-app tracking.
• Crash Reports (Opt-In): Crash reporting is disabled by default. If you enable "Send crash notes" in Settings, the App sends a brief, anonymous technical log (app version, screen name, error type) when a crash occurs. This log contains no user IDs, device IDs, or personal content.
• Bug Reports: If you manually submit a bug report via the App, it sends your written description alongside basic diagnostic data (device type, recent error logs) to our support inbox.

6. Third-Party Integrations

• Connecting a Roblox Account (13+): Connecting to Roblox is entirely optional. You authenticate directly on Roblox’s secure portal. Roblox provides the App with an API key, which is stored entirely in your device’s secure local storage (Keychain on iOS, Encrypted Keystore on Android). Our servers never receive, process, or store your Roblox API key. Uploads go directly to your Roblox account and are subject to Roblox’s Privacy Policy and moderation.
• Purchases & Subscriptions: Ünflat Plus subscriptions are processed securely by the Apple App Store or Google Play. We never receive or store your credit card information. We use RevenueCat to validate store receipts and unlock your premium features.
• Push Notifications: If permitted, the App sends your device’s notification token to our service to alert you to in-app inbox events. You can revoke this permission at any time in your device settings.

7. Website & External Communications

• Contact Forms & Submissions: Information submitted via the unflatlowpoly.com contact or "Made with Ünflat" forms (name, handle, email, message) is sent to our support inbox via Resend. We use this solely to respond to your inquiry and do not add you to marketing lists.
• Newsletter: If you explicitly opt-in to our newsletter on the Site, your email is managed by Buttondown. You may unsubscribe at any time via the link in any email.
• Embedded Video: Walkthrough videos on the Site are hosted by YouTube in "privacy-enhanced mode" (youtube-nocookie.com). YouTube does not track your data on our Site unless you actively click play, at which point YouTube’s Privacy Policy applies.
• Hosting: The Site is hosted securely by Cloudflare, which may process standard technical routing data (like IP addresses) for security and anti-spam rate-limiting.

8. Children's Privacy

Ünflat is strictly for individuals 13 years of age and older. We do not knowingly collect personal information from children under 13. We do not profile users or serve targeted advertisements. If you believe a child under 13 has provided us with personal information, please contact us at info@yeehawtech.com, and we will delete the data immediately.

9. Third-Party Service Providers

We rely on the following trusted partners to operate the App and Site. Their processing of data is governed by their respective privacy policies:

• Apple App Store / Google Play: App distribution and payment processing.
• Firebase (Google): Secure account authentication, cloud database, cloud backups, and analytics.
• RevenueCat: Subscription receipt validation.
• Roblox: Direct API connection for user-initiated asset uploads.
• Cloudflare: Website hosting and secure media delivery.
• Resend: Transactional email delivery for support forms.
• Buttondown: Opt-in newsletter management.

10. Data Retention & Deletion

We retain your account data only as long as your account remains active. Bug reports and support emails are retained only as long as necessary to resolve the inquiry. Analytics data is retained according to Google Firebase's standard data retention limits.

Your Deletion Rights: You may delete your account and all associated data at any time via the Settings menu in the App. Deleting your account permanently removes your handle, profile, cloud backups, and public shared creations from our servers.

11. Changes to this Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. When we do, we will revise the "Last updated" date at the top of this document.

12. Contact Us

If you have any questions or concerns about your privacy or this policy, please contact us at info@yeehawtech.com. See also our Terms & Conditions.