Mosaic does not sell personal information, track people across apps or websites, serve advertising, or use personal information for third-party advertising.
Information Mosaic handles
- Account: Sign in with Apple user identifier, email address (including an Apple private relay address when chosen), and required display name.
- Purchases: purchase history and subscription or Event Pass entitlement state; Mosaic does not receive your payment-card details.
- Event content: Mosaic name, community name, description, activities, membership, timing, and tile progress.
- Contributions: activity completion, tile position, optional note, contributor, and timestamps.
- Photos: the permanently developed JPEG, photographer, event, film look, dimensions, capture time, and safety state.
- Safety: photo reports, blocked-user relationships, and support communications you choose to send.
Mosaic does not collect kindness evidence, video, audio, contacts, precise location, Photo Library contents, payment-card details, advertising identifiers, or configurable privacy choices.
Device processing and permissions
The camera captures still photos only. Sensitive Content Analysis runs on-device before upload. Mosaic permanently applies the event film look and uploads only the developed JPEG; the original capture bytes are discarded. Add Photos permission is requested only when you save a locally rendered recap. The app does not request microphone or Photo Library read access.
Visibility
Nonmembers cannot read event content or media. Before reveal, members can see shared tile counts and occupied positions but only their own notes and photos. The organizer has no special access to other members' photos. At the fixed reveal, members who joined in time may see eligible contributions and photos. Reels contain photos only and never embed names, notes, activities, artwork, captions, or statistics.
Safety
Photographers may delete their photos. A report immediately quarantines a photo from gallery and recap queries pending developer review. Blocking hides that contributor's photos from the blocker's gallery and recap choices. Contact biswas06@iastate.edu for safety support.
Service providers
Supabase provides authentication, database, private storage, and server operations. RevenueCat validates App Store purchases, reconciles account entitlements, and provides subscription analytics using Mosaic's account identifier and purchase history. Apple provides Sign in with Apple, in-app purchase, on-device platform analysis, and add-only Photos access. GitHub Pages hosts this website. Providers process ordinary technical and security logs under their own terms. Advertising and crash-reporting SDKs are not included.
Retention and deletion
Content remains while needed to operate a Mosaic or account. Photographers may delete photos, creators may delete Mosaics at any time, and users can permanently delete their account in You → Delete account. Deletion removes the account and associated memberships, contributions, photos, reports, created Mosaics, and RevenueCat customer record from active systems, subject to limited backup, abuse-prevention, or legal retention. Deleting the account does not cancel an Apple subscription; use Manage Subscriptions first if you want to stop renewal.
Children, security, and contact
Mosaic is not directed to children under 13. Schools and youth groups remain responsible for required consent and safeguarding. Mosaic uses private storage, explicit grants, Row Level Security, server-enforced timing, and account-bound operations, but no online service can guarantee absolute security. For privacy requests email biswas06@iastate.edu.