Who is responsible
Central Content Co., Ltd. (CENTRAL CONTENT COMPANY LIMITED), Thailand, is responsible for personal information processed for Artmulet Wisdom and these website pages. Contact Suphasit Thongniam at suphasit@centralcontent.co.th about privacy or your rights. This policy describes this service, not all other products operated by the company.
Account and sign-in information
If you create an account, we process your name, email address, internal account identifier and sign-in provider identifiers. Email passwords are hashed. Google and Apple authenticate you through their own services; we do not receive your Google or Apple password. Sign-in and reset tokens protect account access. If you connect more than one sign-in method, those identities are associated with your account.
Purchases and service operation
Apple processes payments; we do not receive your full payment card details. Adapty supports purchase validation, subscription status and purchase-service events. Account IDs, product identifiers, transaction information, refunds and expiry dates are used to determine access. Adapty also processes installation and device information needed for its SDK. Adapty receives your account ID, name and email to associate your purchases with your signed-in profile. Adapty IP-address collection remains disabled. On iOS, advertising-ID collection is subject to your App Tracking Transparency permission. Our own hosting and media servers may process IP addresses, request times and security/error logs to deliver and protect the service.
Information kept on your device
Onboarding answers, including age range, gender and practice intention, app language, local practice and reflection records, offerings and daily cards are stored locally by the app rather than uploaded to our account server. Downloaded artwork and audio are cached locally. Local notes can reveal personal feelings or beliefs, so consider what you choose to enter or share. Photos and sharing features run when you request them. Copies you export to Photos, another app or a recipient are outside the app’s deletion control.
Why we use information
We process account and purchase information to provide the service and perform our agreement with you. We use necessary connection, fraud-prevention and security information for legitimate operational interests, subject to your rights. We retain records required by legal obligations. Where consent is required for optional processing or device permissions, we request it; you may withdraw it without affecting prior lawful processing. In app versions that include Meta advertising measurement, we ask for permission through Apple’s App Tracking Transparency dialog after onboarding. If you allow tracking, Meta receives app activation events and device identifiers, and Adapty shares purchase and subscription events with Meta, including product IDs, transaction IDs, amounts, currency and your internal account identifier. The Meta anonymous device identifier is also linked to your Adapty profile. We use this to measure installs and purchases from our ads and improve advertising. If permission is denied, restricted or not yet given, the app does not send Meta activation events or link a Meta anonymous identifier to Adapty. You can change permission in iOS Settings → Privacy & Security → Tracking; your account and paid features remain available. Local practice intentions, reflections and onboarding answers are not sent to Meta.
Service providers and international processing
We share information only as needed with hosting, storage and email providers, Apple and Google for sign-in, and Apple and Adapty for purchases. With advertising-tracking permission, Meta also receives the advertising-measurement data described above. Meta processes this information under its own privacy policy at https://www.facebook.com/privacy/policy/. DigitalOcean Spaces delivers catalogue media. These providers may process information outside Thailand. We use appropriate contractual and security measures and any safeguards required by applicable law. We may disclose information when legally required, to protect rights and security, or in a business transfer subject to applicable privacy protections. We do not sell your personal information.
Retention and deletion
We keep identifiable app account information while needed to provide your account, then delete or anonymise it when you delete the account, subject to legal retention requirements. In My account → Delete account, confirm the request. We revoke app sessions, remove app sign-in links and purchase-profile data, and remove app access. App-only profile details are erased or anonymised. On this device, deletion also clears local practice history, reflections, offerings, daily cards and onboarding answers; copies on other devices or exported outside the app must be removed there. If your identity is also used for the separate Artmulet shop, records needed for that service, orders, tax, accounting or legal claims may remain. Contact us to exercise rights over those records. Backups and security logs expire under their normal retention and access controls; we do not promise immediate removal from all backups.
Subscriptions and third-party accounts
Account deletion and uninstalling do not cancel Apple subscriptions or delete records Apple must retain. Manage cancellation in Apple Account subscriptions. Provider authorization and purchase profiles are revoked or deleted through the relevant provider interfaces as part of the deletion process where available. You can also manage authorizations in your Google and Apple account settings. Provider records are subject to their own legal retention rules.
Your rights and choices
Subject to applicable law, you may request access, a copy, correction, deletion or anonymisation, restriction, portability, or object to processing, and withdraw consent. You may complain to the competent data protection authority, including Thailand’s Personal Data Protection Committee. Email suphasit@centralcontent.co.th. We may verify your identity and will respond within applicable legal time limits. You can use supported guest features without submitting account details; account and paid features require the necessary information.
Security, children and changes
We use encrypted connections, hashed passwords and access controls, but no system can guarantee absolute security. We do not knowingly collect account information from children under 13; contact us if you believe this has occurred. We update this policy when practices change and provide notice or obtain consent where the law requires it. The effective date appears above.
Operator: Central Content Co., Ltd. (CENTRAL CONTENT COMPANY LIMITED), Thailand. Contact: Suphasit Thongniam — suphasit@centralcontent.co.th.