Hello Wenkel LLC ("we," "us," or "our") operates the Unveil mobile application (the "App"), a doll-collection manager. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
Information We Collect
We collect the following types of information:
- Account information — email address, username, date of birth, and a securely hashed password if you sign up directly. If you sign in with Google or Apple, we receive your email address and an account identifier from that provider (if you use Apple's Hide My Email, we receive an Apple relay address instead of your own). For Sign in with Apple, we also store a token Apple issues so we can revoke the App's access to your Apple ID when you delete your account. Date of birth is used to confirm you meet the minimum age to use the App and your eligibility for age-restricted features such as Doll of the Month submissions and Discover, and — only for accounts we determine are under 18 — to request non-personalized rather than personalized advertising for that account.
- Profile and collection content — any photos, names, notes, and other details you add for your dolls, sets, gallery, and profile. This is content you choose to enter into the App.
- Social activity — usernames you follow, dolls and gallery photos you "heart," whether you've joined the Unveil Society, and any reports or blocks you submit (including the doll, set, or gallery photo a report is about), so we can operate the App's social features and keep them safe.
- Suggestions: if you send us a suggestion from the App, we receive what you wrote along with your username, your account email (so we can reply), and your app version.
- Purchase records — if you make a donation or purchase Premium, payment is processed directly by Apple or Google through their in-app purchase systems, and we never receive your card details. We keep a record of each purchase (platform, product, transaction identifier, and date) to verify it, restore Premium, and handle refunds.
- Device and push notification data — a device token used to deliver push notifications, and general platform information (e.g. Android or iOS).
- Crash and diagnostic data — if the App crashes or hits an error, a report is sent to our crash-reporting provider (Sentry) with technical details such as the error, device model, and operating system and app versions, plus a random installation identifier that isn't linked to your account. Crash reports don't include your name, email, username, photos, or collection, and Sentry is configured not to store your IP address.
- Server logs — when the App communicates with our servers, your IP address is used to route the request and to limit abusive traffic, and our servers keep technical logs of requests and errors.
- Advertising identifiers — if you are shown ads, our ad partner (Google AdMob) may collect an advertising identifier and related interaction data, subject to your device's ad tracking settings.
How We Use Information, and Our Legal Basis
We use information for the purposes below. For users in the European Economic Area, UK, or Switzerland, each purpose relies on one of the legal bases GDPR requires us to identify:
- To provide and operate core App features — your collection, sets, badges, and social feed. (Necessary to perform our contract with you.)
- To send emails you ask for, such as password reset codes and collection export links. (Necessary to perform our contract with you.)
- To notify you about activity on your account, such as new followers or hearts, in the App, by push notification, and by email. These are on by default; you can turn app or email notifications off at any time in Profile → My Notifications, and push notifications also need your device's permission. (Our legitimate interest in keeping you informed about your account, which you can object to at any time using those settings.)
- To process donations and Premium purchases, including removing Premium if a purchase is refunded. (Necessary to perform our contract with you.)
- To display advertising to free-tier users (Premium removes ads), and to request non-personalized advertising for accounts we determine are under 18. (Your consent for ad display generally, collected via an in-app consent prompt before any ad-related identifier is used; compliance with a legal obligation for limiting ad personalization to minors.)
- To verify you meet the minimum age to use the App and your eligibility for age-restricted features such as Doll of the Month submissions and Discover. (Compliance with a legal obligation, and — where our minimum age follows the app stores' age ratings rather than a law — our legitimate interest in meeting those ratings.)
- To find and fix crashes and errors. (Our legitimate interest in keeping the App working reliably.)
- To maintain the security of the App and investigate reports of abuse. (Our legitimate interest in keeping the App safe and functioning, balanced against your privacy interests.)
Sharing of Information
We do not sell your personal information. We share information only with the service providers necessary to operate the App:
- Amazon Web Services — hosting for our servers, database, and photo storage, and sending our emails.
- Google Firebase — delivery of push notifications.
- Google AdMob — advertising for free-tier users.
- Sentry (Functional Software, Inc.) — crash and error reporting.
- Apple and Google — sign-in, if you choose to sign in with them, and payment processing for in-app Premium purchases and donations.
People who follow you can see your profile — your username, profile photo, collector title, badges, the date you joined, and your follower, following, and public collection counts — along with any doll or set you choose to make public and every photo in your gallery, which is always public. Unveil has no search feature, so finding an account normally requires already knowing its exact username. If you are 18 or older and choose to turn on the optional, off-by-default Unveil Society setting, other users who are 18 or older and don't follow you yet can also see your profile, your public dolls and sets, and your gallery in Discover. Joining and browsing Discover are free. We use your date of birth to make sure only users 18 or older can be discovered or use Discover. Following itself does not require your approval, but you can see everyone who follows you and remove (unfollow or block) any follower at any time.
One exception: if you submit a doll for consideration as our featured "Doll of the Month" and it is selected, that doll's photo and description are shown to every user of the App, not only your followers, and — unless you choose otherwise at the time you submit — you are credited by your username rather than anonymously. Submitting requires Premium and that you are 18 years of age or older, and you will be asked to confirm you understand how a selected submission is shown before you can submit.
International transfers. Our service providers may process information in the United States or other countries outside your own. Where this involves transferring personal information out of the EEA, UK, or Switzerland, we rely on the Standard Contractual Clauses or equivalent safeguards that each provider makes available under its own data processing terms.
Data Retention and Deletion
We retain your information for as long as your account is active, with these exceptions: read notifications are deleted after 30 days; password reset codes are stored only in hashed form and expire after 15 minutes; collection export download links expire after 72 hours; crash reports are deleted after 30 days; and server logs are kept for up to 30 days.
You can permanently delete your account and all associated data at any time from within the App (Profile → Delete Account). This immediately removes your dolls, sets, gallery, photos, badges, social connections, any pending Doll of the Month submissions, and any collection exports, and — if you signed in with Apple — revokes the App's access to your Apple ID. One exception: if one of your dolls was selected as our featured "Doll of the Month," that entry's photo and description remain in the App after your account is deleted, with your username removed so the credit shows as "a community member" instead. Because our database maintains routine automated backups for disaster-recovery purposes, a copy of deleted data may persist in a backup for up to 7 days before being fully purged. A small number of records (such as trust & safety reports and payment records) have the direct link to your account removed rather than the record itself being deleted, consistent with our recordkeeping obligations (including retaining payment records in a form sufficient for tax and accounting purposes). If you're unable to access the App, you can also request deletion by emailing us at contact.unveil@hellowenkel.com.
Children's Privacy
Unveil is not directed at children. We collect your date of birth at sign-up and require you to meet the minimum age for your region to use the App: 13 generally, 15 if you are located in South Korea, and 16 if you are located in the EEA, UK, Switzerland, Australia, Vietnam, or Brazil. If you believe a child has circumvented these requirements and provided us with personal information, please contact us and we will delete it.
Your Choices and Rights
- You can turn app and email notifications on or off in Profile → My Notifications, and control push notifications in your device settings.
- You can control ad tracking through your device's advertising settings, including through the in-app consent prompt.
- You can request access to, correction of, deletion of, or a copy of your personal information at any time. The fastest path for your own collection data is in the App: Profile → Export & Share → Export Collection emails you a download link to a spreadsheet of your collection (access/portability), and Profile → Delete Account erases your account immediately (erasure). For anything else, contact us at contact.unveil@hellowenkel.com and we will respond within 30 days.
- If you are located in the EEA, UK, or Switzerland, you additionally have the right to restrict or object to our processing of your information, to withdraw consent at any time without affecting past processing, and to lodge a complaint with your local data protection supervisory authority.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Contact Us
Questions about this Privacy Policy can be sent to contact.unveil@hellowenkel.com.