Privacy Policy
What our website and apps collect, why, who else sees it, and how to reach us about it. Most of our apps keep your data on your device.
1. Who we are and what this covers
HighAcre Labs LLC ("HighAcre Labs", "we", "us") is a Connecticut limited liability company. We make apps for iPhone, iPad and Mac, and we run this website, highacrelabs.com. For personal data collected through the website, we are the controller.
This policy covers the website and the apps in section 3. If an app has its own privacy policy, that policy governs for that app. Some of our apps are still listed on the App Store under their previous publisher while they move to HighAcre Labs. Until an app moves, the privacy policy linked on its App Store page applies to it; the summaries below describe how each app works either way.
2. The website
No analytics, no cookies, no trackers. The website does not use analytics, advertising or tracking cookies, and it does not save anything in your browser's local storage. It loads no third-party scripts, fonts or images; everything comes from highacrelabs.com.
The drawing on the home page happens in your browser. Nothing you draw is sent to us.
Hosting and server logs. We serve the website from a server we operate. Requests reach it through Cloudflare, which delivers and protects the site and so receives your IP address, browser details and the pages you request. Our server keeps a standard access log (IP address, time, page requested and browser user agent). We use it only to keep the site running and secure, and we keep it only as long as we need it for that.
Contact form and email. If you use the contact form, we receive your name (if you give it), your email address, your message, and the IP address you sent it from, which we use to deal with spam. A Cloudflare Worker turns the form into an email and Cloudflare Email Routing delivers it to our inbox, which is hosted by Google (Gmail). The form does not store your message anywhere else. Email you send to an @highacrelabs.com address is forwarded to the same inbox. Please don't include health or other sensitive information.
We don't ask for accounts, payment details or your location on the website.
3. Our apps
Unless an app's summary says otherwise, our apps don't require an account, don't show ads, and don't track you across other companies' apps or websites. Purchases and subscriptions are handled by Apple, and we never see your payment details. Where an App Store "App Privacy" label is given below, it is the label we gave Apple. "Not linked to you" means we don't tie the data to your name or contact details; it can still count as personal data under some laws, and your rights in section 8 apply to it.
App analytics (Aptabase). Where a summary says an app sends usage or diagnostic data, it goes to our analytics provider, Aptabase, which stores app data in the United States and keeps it for up to 5 years. Aptabase receives event names, app version, OS version, device model, language and a temporary session identifier that is kept only in memory. It does not collect device identifiers; it groups events with a hash of your IP address and device details that changes every 24 hours, and says it uses your IP address only to work out your country and does not keep it. Because this data isn't linked to you, we usually can't find one person's records to delete them, but turning analytics off (where an app offers it) stops further collection.
Roar
Roar is a free, open-source desktop browser. It is not sold through the App Store. It has no account, and it includes no analytics or telemetry of its own. Your browsing data (history, cookies, logins, settings and extensions) stays on your computer, in the Roar data folder. Page-text search, if on, saves page text there too, and you can turn it off or clear it. API keys you add for model chat are kept in your system keychain.
Roar contacts the internet on its own for a few things: it checks GitHub for updates, and the default search engine is DuckDuckGo. Model chat sends your messages to OpenAI or Anthropic only when you add your own key, under that provider's terms. AI agents you connect (such as Claude or Cursor) talk to Roar on your computer, and their own policies cover what they send to their makers. If you turn on Gmail alerts, Roar checks Gmail with your existing sign-in. Like other Chromium-based browsers, Roar may contact Google services in the background (for example, component updates). The first time you use dictation, it downloads a speech model from Hugging Face; after that, dictation runs on your computer.
Rerun Timer
App Privacy: Data Not Linked to You
Your timers stay on your device. We collect purchase history, usage data (product interaction) and diagnostics, for analytics, through Aptabase. This data isn't linked to your identity. There is no setting to turn it off.
Chart Crypto
To send price alerts, Chart Crypto stores your push notification device token and the alerts you set (coin, target price, condition) on a server we operate in the United States; its traffic passes through Cloudflare. There is no account, and this data isn't linked to your identity. We use it only to run the alert service, never for advertising, and we don't sell it. Alerts are kept until you delete them in the app or uninstall it, and data for inactive users may be deleted after 30 days of inactivity. Market prices come from Coinbase, and we send no personal information to Coinbase. Subscriptions are processed by Apple, with RevenueCat handling purchase records for us.
Baby Blair
App Privacy: Data Not Collected
Your baby's logs (feeds, sleep, milestones, medication and vaccine entries) are stored on your device. If you share a baby with a co-caregiver, the data syncs through Apple's iCloud (CloudKit) under your Apple account, and we cannot access it. We never use this data for advertising or share it with third parties other than Apple's iCloud. The app sends anonymous usage events (such as which features you use) to Aptabase; these events do not include your baby's logs. There is no setting to turn this off. Baby Blair is meant for parents and caregivers, not for children to use.
Talkeet
App Privacy: Data Not Collected
Talkeet has no analytics. When you dictate, the app turns your speech into text on your iPhone. The audio is held in memory until it is transcribed, then discarded; it is never saved or sent. The keyboard has no network code and does not send what you type anywhere. The only internet use is a one-time download of the speech model (about 600 MB) from Hugging Face (huggingface.co), which sees a normal download request such as your IP address and nothing else.
Full Access lets the keyboard and the app share data through storage on your iPhone that only they can read: your latest dictation, the dictation status, your settings and text shortcuts, and the swipe corrections the keyboard learned from you. You can clear the learned corrections in the app's settings. Optional cleanup and swipe choices use Apple's on-device Foundation Models. Deleting the app removes all of it.
PinkCloud Timer
Your sobriety dates, milestones and relapse history stay on your device. No health data leaves it. We collect purchase history and usage data (product interaction and other usage data), not linked to your identity, only for analytics, through Aptabase. We don't sell it or use it for advertising. It is on by default, and you can turn it off in Settings.
BridgeYourBudget
BridgeYourBudget is a web app with its own privacy policy, which governs for it: bridgeyourbudget.com/privacy-policy.
4. How and why we use data
- To answer your messages. Legal basis (GDPR): our legitimate interest in answering you, or steps you ask for before a contract.
- To keep the website running and secure. Legal basis: our legitimate interest in a working, secure site.
- To run app features you ask for, such as Chart Crypto price alerts. Legal basis: performance of our contract with you.
- To understand how the apps are used and fix problems, using data not linked to you (section 3). Legal basis: our legitimate interests. You can object at any time: use the analytics switch where an app offers one, or email us and we will stop it.
- To meet legal obligations. Legal basis: legal obligation.
We don't sell personal information, we don't "share" it for cross-context behavioral advertising (as the CCPA defines those terms), and we don't use it for automated decisions with legal or similarly significant effects.
5. Who receives data
We use service providers that handle data for us on our instructions: Cloudflare (website delivery and protection, the contact form, and email forwarding), Google (our email inbox), Aptabase (app analytics) and RevenueCat (Chart Crypto purchase records). When you buy or download an app, Apple processes that transaction under Apple's own privacy policy, and Apple gives developers sales reports and, for users who choose to share it, aggregated usage and crash data. We may also disclose data if the law requires it, to protect rights or safety, or to a successor if the business is sold or reorganized.
6. International transfers
We are based in the United States, and our service providers may process data in the US and other countries. If you are in the EEA, the UK or Switzerland, transfers rely on the safeguards our providers offer, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
7. How long we keep data
- Messages and emails: as long as we need them to deal with your message, and no longer than 24 months after we receive them.
- Website server logs: only as long as we need them to keep the site running and secure.
- Chart Crypto alerts: until you delete them or uninstall the app; data for inactive users may be deleted after 30 days.
- App analytics: up to 5 years at Aptabase, not linked to you.
8. Your rights
EEA and UK (GDPR / UK GDPR): you can ask for access to, correction of, or deletion of your data. You can also ask us to restrict how we use it or to give you a portable copy, and you can object to processing based on legitimate interests. Where we rely on your consent, you can withdraw it at any time. You can also complain to your local data protection authority.
California and other US states with privacy laws: you can ask to know what personal information we hold about you, and to have it corrected or deleted. You can also opt out of sale or sharing, though we do neither. We won't treat you differently for using these rights, and an authorized agent can make a request for you.
To make a request, email hello@highacrelabs.com. We may need to confirm it's you, usually by replying to the address you wrote from. We will answer within 30 days (GDPR) or 45 days (CCPA), and tell you if the law lets us take longer. If we refuse a request, you can appeal by replying to our answer.
9. Children
The website and our apps are not directed to children under 13. Some apps are made for parents (for example a newborn tracker) and are meant to be used by adults. We don't knowingly collect personal information from children under 13, or below the age of digital consent in your country. If you believe a child has sent us personal information, email us and we will delete it.
10. Security
The website is served only over HTTPS. No system is perfectly secure, so we can't guarantee that data will never be exposed.
11. Changes to this policy
When we change this policy, we will update the date at the top of this page. If a change is material, we will also post a notice on the website before it takes effect.
12. Contact
HighAcre Labs LLC, Connecticut, United States. hello@highacrelabs.com