Privacy policy

Last updated: 30 September 2026

This Privacy Policy explains how Palette Well-being LLC ("Palette", "we", "us") collects, uses and shares personal information when you use our website and online store at palette-wellbeing.com, the Palette mobile app for iOS and Android, Palette subscriptions, and our kits and kit codes (together, the "Services"). If this policy and our Terms of Service conflict about personal information, this policy controls.

We keep this simple: we collect what we need to run Palette, we do not sell your journal entries or artwork, and you can delete your account at any time.

Information we collect

Information you give us:

  • Account details: name, email address, and login information. If you use Sign in with Apple or Google Sign-In, we receive your name and email (or an Apple private relay email) from them. We do not receive your Apple or Google password.
  • Your Content: journal entries and other personal writing, photos of your artwork, and reflections you choose to add in the app. This can be personal, so we treat it with extra care (see "Your journal and artwork").
  • Onboarding answers and preferences: for example your goals, experience level and reminder settings.
  • Orders: name, shipping and billing address, email, phone number (if you give it), items bought, and kit codes redeemed.
  • Payment information: payments are handled by Shopify, Stripe, Apple or Google. We see limited details such as the card type, last four digits and expiry, but not your full card number.
  • Messages: what you send us when you contact support.

Information collected automatically:

  • Device and log data: device type, operating system, app version, IP address, browser type, language, time zone and crash data.
  • Usage data: which screens and sessions you open, how long you use them, and features you use.
  • Identifiers: device and advertising identifiers (only where you allow it; on iOS we ask for permission before tracking), push notification tokens, and cookies or similar technologies on our website.
  • Approximate location derived from your IP address. We do not collect precise GPS location.

Information from others:

  • Apple, Google, RevenueCat and Stripe tell us about your subscription status (for example, trial, active, cancelled).
  • Advertising partners such as Meta and TikTok may tell us that someone who saw an ad later installed the app or bought a kit.

How we use your information

  • To provide the Services: create and run your account, save your journal and gallery, deliver sessions, and sync across devices.
  • To process orders and subscriptions: take payment, ship kits, activate kit codes, and manage renewals and cancellations.
  • To communicate with you: send receipts, order and shipping updates, account and security messages, and renewal or trial-ending reminders. With your permission, we also send reminders, tips and offers by email or push notification. You can turn these off at any time.
  • To improve Palette: understand which features and sessions are used, fix bugs, and develop new content.
  • For marketing and advertising: measure how our ads perform and show ads to people who may be interested in Palette. See "Advertising and your choices".
  • For safety and legal reasons: prevent fraud and abuse, secure the Services, enforce our Terms, and meet legal obligations.

We do not use your journal entries or artwork photos for advertising, and we do not share them with advertising partners.

Your journal and artwork

Journal entries and artwork photos are private to your account. They are stored with our database provider, Supabase, in the United States, protected by access controls, and encrypted in transit and at rest. Our team does not read them except where you ask us to (for example, for support), where needed to keep the Services secure, or where the law requires it. We do not sell them or use them for advertising.

Who we share information with

We do not sell your personal information for money. We share it only with:

  • Service providers who help us run Palette, under contracts that limit how they use it:
    • Supabase: account login and database (hosted in the US), including journal entries and artwork photos.
    • RevenueCat: subscription management.
    • Stripe: web payments.
    • Apple App Store and Google Play: in-app purchases.
    • Shopify: online store, orders and shipping. Shopify also processes some data under its own privacy policy (see "Shopify").
    • Shipping carriers (such as USPS or UPS): to deliver your kit.
    • Mixpanel: product analytics.
    • OneSignal: push notifications.
    • Resend: transactional email (receipts, account messages).
    • Our email marketing tool (Shopify Email or Klaviyo): newsletters, if you subscribe.
    • Apple (Sign in with Apple) and Google (Google Sign-In): login.
  • Advertising partners: Meta (Facebook and Instagram, through the Meta Pixel and Conversions API) and TikTok (through the TikTok Pixel). We share limited data such as hashed email, device identifiers, IP address, and events like "purchase" or "started trial" so we can measure our ads. Under some US state laws, this may count as "sharing" or "selling" for targeted advertising. You can opt out (see below).
  • Legal and safety: when required by law or valid legal process, or to protect the rights, property or safety of Palette, our users or others.
  • Business transfers: if Palette is involved in a merger, acquisition, financing or sale of assets, your information may be transferred as part of that deal, subject to this policy.
  • With your consent or at your direction.

Shopify

Our store is hosted by Shopify. Shopify collects and processes information about your use of the store to provide and improve it, and some Shopify features use information from your interactions with our store and other merchants. For those features, Shopify is responsible for your information. To learn more, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal at privacy.shopify.com.

Advertising and your choices

  • Opt out of targeted advertising: use the "Your privacy choices" link in our store's footer, or email info@palette-wellbeing.com.
  • Global Privacy Control: if your browser sends a Global Privacy Control signal, we treat it as an opt-out request for that browser, where the law requires. We do not respond to other "Do Not Track" signals.
  • In the app: on iOS we only use tracking across other companies' apps and websites if you allow it in the App Tracking Transparency prompt. You can change this in iPhone Settings → Privacy & Security → Tracking. On Android you can reset or delete your advertising ID in device settings.
  • Marketing email: use the unsubscribe link in any marketing email. We will still send you order and account messages.
  • Push notifications: turn them off in the app or in your device settings.

Cookies

Our website uses cookies and similar technologies to keep your cart working, remember preferences, understand how the site is used, and measure ads. You can control cookies through your browser settings and the cookie banner on our store. Blocking some cookies may stop parts of the store from working.

How long we keep information

We keep personal information only as long as we need it for the purposes above.

  • Account data and Your Content: while your account is open. When you delete your account, we delete your account data and Your Content within 60 days, except where we must keep something longer.
  • Order and payment records: as long as required for tax, accounting and legal purposes (usually up to 7 years).
  • Analytics data: kept in a form that does not directly identify you, or deleted on our providers' standard schedules.

Deleting your account

You can delete your account at any time in the app: Settings → Delete account. This deletes your account, journal entries and artwork photos within 60 days. Copies in backups are removed as those backups expire. Deleting your account does not cancel an App Store or Google Play subscription; please cancel through the store too. You can also email info@palette-wellbeing.com to request deletion.

Security

We use reasonable technical and organisational measures to protect your information, including encryption in transit, access controls and trusted providers. No system is completely secure, so we cannot guarantee absolute security. Please keep your login details private.

Children

The Services are for adults. You must be 18 or older to buy a kit or subscription. The Services are not directed at children under 13 and we do not knowingly collect personal information from them. We do not knowingly sell or share the personal information of anyone under 16. If you believe a child has given us personal information, email info@palette-wellbeing.com and we will delete it.

Palette is not a healthcare service

Palette is a wellness product, not a medical or counseling service, and we are not a healthcare provider. Information you add to the app, such as journal entries, is not a medical record. Please do not rely on Palette to contact anyone in an emergency. If you are in crisis, contact your local emergency services.

Your rights

Depending on where you live, you may have the right to:

  • know and access the personal information we hold about you;
  • correct inaccurate information;
  • delete your information;
  • get a copy of your information in a portable format;
  • opt out of targeted advertising and the "sale" or "sharing" of your information;
  • withdraw consent where we rely on it;
  • appeal our decision on your request.

To make a request, email info@palette-wellbeing.com. We may need to verify your identity. You can use an authorised agent, but we may ask for proof that they are acting for you. We will not treat you differently for exercising your rights.

California residents

If you live in California, the California Consumer Privacy Act (CCPA) gives you the rights listed above. In the past 12 months we have collected these categories of personal information, from the sources and for the purposes described in this policy:

  • Identifiers (name, email, IP address, device and account IDs).
  • Customer records (shipping and billing address, phone number, limited payment details).
  • Commercial information (purchases, subscriptions, kit codes).
  • Internet and app activity (usage and device data).
  • Approximate location (from IP address).
  • Audio or visual information (photos of your artwork).
  • Sensitive personal information: account login details, and the contents of your journal entries. We use these only to provide the Services you request, and not to infer characteristics about you.
  • Inferences (for example, content preferences).

We disclose identifiers, commercial information and internet activity to our service providers for business purposes. We "share" or "sell" (as those terms are defined in California law) identifiers and internet activity with advertising partners (Meta and TikTok) for targeted advertising; you can opt out as described above. We do not sell or share sensitive personal information. California's "Shine the Light" law also lets you ask for information about disclosures for direct marketing; email us to make that request.

Visitors from the European Economic Area and United Kingdom

If you are in the EEA or UK, Palette Well-being LLC is the controller of your personal information. We rely on these legal bases:

  • Contract: to provide the Services and process your orders and subscriptions.
  • Consent: for marketing messages, non-essential cookies, advertising tracking, and processing your journal entries where they may reveal information about your health. You can withdraw consent at any time.
  • Legitimate interests: to improve and secure the Services and understand how they are used, where these interests are not overridden by your rights.
  • Legal obligation: for tax, accounting and legal compliance.

In addition to the rights above, you may have the right to restrict or object to our processing, and to complain to your local data protection authority.

International transfers

We are based in the United States and our providers mainly store data in the US. If you use Palette from outside the US, your information will be transferred to and processed in the US. Where required, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses (or the UK equivalent).

Third-party links

Our Services may link to other websites and services. Their own privacy policies apply, and we are not responsible for them.

Changes to this policy

We may update this policy from time to time. We will post the new version here and update the date above. If we make material changes, we will tell you by email or in the app before they take effect.

Contact us

Palette Well-being LLC, Tucson, AZ · info@palette-wellbeing.com

Email: info@palette-wellbeing.com