Privacy Policy
Last updated: September 17, 2026
Our Core Privacy Pledge
At CreativeAppsLab, we build apps with a local-first philosophy. We do not sell your personal data, we do not train models on your camera frames, and we process sensitive inputs directly on your hardware whenever technically feasible.
1. Overview & Scope
This Privacy Policy governs the collection, use, and disclosure of information by CreativeAppsLab ("we," "us," or "our") across our studio website (creativeappslab.com) and our suite of native Android applications, including:
- RouseUp (The AI anti-cheat exercise alarm clock — rouseup.creativeappslab.com)
- Plantiva (Offline-first houseplant care tracker — plantiva.creativeappslab.com)
- WonderBaby AI (Bring-Your-Own-Key baby portrait generator — wonderbabyai.creativeappslab.com)
2. App-Specific Privacy Architectures
RouseUp uses Google MediaPipe pose estimation running 100% on your device to verify exercises (squats, jumping jacks, pushups) and dismiss alarms.
- RAM-Only Processing: Camera video frames are evaluated in volatile device memory and discarded immediately after joint detection.
- Zero Video Storage or Transmission: No video, image, or raw skeletal coordinate is ever recorded to flash storage or transmitted over the network.
- Offline-First Storage: Alarm times, streaks, and workout metrics reside in the device's private SQLite database.
- Dedicated Policy: You can read the standalone RouseUp policy at rouseup.creativeappslab.com/privacy.
Plantiva operates completely without a remote server or mandatory user accounts.
- Local Database: Plant species, watering logs, fertilization notes, and photos stay entirely inside your phone's private sandbox.
- Exact Alarms: Uses native Android
setAlarmClock()APIs to guarantee notifications trigger on time without network dependencies. - Zero Tracking: Plantiva collects zero analytics and zero personally identifiable information.
WonderBaby AI empowers parents to generate concept portraits without expensive recurring subscriptions using their own AI API keys.
- Direct API Communication: Generative requests travel directly from your phone to Google Gemini or the designated AI provider.
- Key Security: Your personal API key is stored strictly on-device in Android EncryptedSharedPreferences. CreativeAppsLab never receives or stores your API key.
- Zero Intermediary Logging: We do not log, retain, or train on photos submitted to your own AI provider keys.
3. Information Collected & Third-Party Processors
Depending on which app and features you interact with, limited operational data may be processed through trusted third-party providers:
Google Sign-In (Authentication)
For apps offering unified cloud backup (such as RouseUp), authentication is managed through Google Sign-In. We securely store your name, email, avatar URL, and Google user ID in our PostgreSQL database.
Google AdMob (Advertising)
Free tiers of our apps display non-intrusive ads via Google AdMob to cover hosting and development costs. AdMob collects standard device identifiers (Android Advertising ID, IP address) in compliance with Google Play Developer Policies. You can reset or opt out of personalized ads via Android Settings → Google → Ads.
Mixpanel (Product Analytics)
We capture anonymous app lifecycle milestones (e.g., app opens, session duration, feature error codes) to diagnose crashes and ensure alarm reliability. Camera feeds, biometric points, and private notes are never sent to analytics.
Contact & Feedback Forms
When you submit feedback or bug reports through our Contact Hub, we collect your name, email address, message, and optional app diagnostics solely to respond to your support request.
4. Data Retention & Deletion Rights
We adhere to strict data minimization principles:
- Local Data: You can completely erase all locally stored data, alarms, notes, and photos at any time by clearing app data in Android System Settings or uninstalling the app.
- Account Deletion: For apps with cloud accounts, you can trigger immediate account erasure within the app via Profile → Delete Account, or request full deletion via our web portal at rouseup.creativeappslab.com/delete-account.
- Email Erasure Requests: You can directly email our data privacy team at creativeappslab29@gmail.com with the subject "Data Deletion Request" and we will permanently purge all matching records within 30 days.
5. Your Global Privacy Rights
Regardless of your residency, you have the right to access, rectify, port, or request erasure of personal data held about you:
- EEA / UK (GDPR): Right to access, rectify, delete, restrict processing, and lodge complaints with national supervisory authorities.
- California & US States (CCPA/CPRA): Right to know categories of collected information, right to delete, and right to opt-out of cross-context behavioral advertising. We do not sell personal data.
- India (Digital Personal Data Protection Act, 2023): Right to access a summary of processed personal data, right to correction and erasure, and right to grievance redressal.
6. Contact Us & Grievance Redressal
If you have questions, feedback, or legal data inquiries, please reach out to us: