Wall Privacy Policy

Effective date: 31 October 2026
Last updated: 31 October 2026
Public address: https://hopin.it/wall/privacy/
Applies to: the Wall app for iPhone and iPad, including its widgets, Control Center controls, the Charging Island Live Activity and the theme icon profiles it creates.

This policy is a plain-language description of how the app works. It is not legal advice.

The short version

• You do not need an account to use Wall. We never ask for your name or email address.
• Wall has no analytics, crash reporting or advertising tools, and it does not track you across other companies' apps or websites. It does not use your advertising identifier.
• Your favorites, saved and created wallpapers, widgets, controls, Charging Island settings, photos you pick and settings stay on your device.
• Photos you pick for collages, widgets, custom icons or the Charging Island are read through Apple's photo picker and never leave your device. Saving a wallpaper only adds it to your Photos; Wall cannot read your library.
• Wall downloads its wallpaper catalog and widget designs from our server (api.hopin.it). Like any internet request, this shows our server your IP address.
• AI Create is optional. When you tap Create, the description you typed is sent through our AI server to AI providers to make your wallpaper. Our server does not store your description or the image.
• Subscriptions are handled by Apple. RevenueCat helps us check whether your subscription is active. We never see your card details.
• Theme icons are installed as an iOS configuration profile that Wall builds and serves on your device only. Nothing about it is sent to us.

1. Who we are

The controller of the personal data described in this policy is:

HOPIN.IT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (HopIn.IT sp. z o.o.)
ul. Marsz. Józefa Piłsudskiego 74/320, 50-529 Wrocław, Poland
KRS 0001117479, NIP 8971940626, REGON 529197668

The App Store listing for Wall shows a different seller name; HOPIN.IT is the controller of the personal data described in this policy.

You can contact us about privacy at [email protected]. Based on our current assessment, the law does not require us to appoint a Data Protection Officer. We will reassess this if our processing changes.

UK representative. We have not appointed a representative in the UK under Article 27 UK GDPR. If you are in the UK, contact us directly at [email protected].

2. What stays on your device

The following is stored only on your device. We do not receive it:

• Favorites, saved wallpapers and the wallpapers you create (AI creations, together with the description you typed, and DIY collages, together with any caption), stored in the app's private storage.
• Downloaded wallpapers and widget designs. Images are cached on your device so Wall works offline.
• Photos you pick. Wall uses Apple's photo picker for collages, widget photos, custom icons and the Charging Island. The picker gives Wall only the photos you choose; Wall does not ask for access to your photo library. Collage photos are used in memory to build the collage. Photos for widgets and the Charging Island are resized and stored in storage shared only between Wall and its widgets, so they can show them. Photos for custom icons are cropped and placed in the icon profile (section 2.1).
• Images you save. When you save a wallpaper or collage, iOS asks for permission to add it to your Photos. Wall only adds images; it does not read your library.
• Widgets, Control Center controls and the Charging Island Live Activity. Their settings and content (including text you type into a widget, such as a name or a date) are stored in storage shared only between Wall and its widgets on your device. The Live Activity is started and updated on your device; we do not use a push notification server.
• Settings and usage counters, such as your chosen app icon, your free AI creation, how many locked previews you have opened and when Wall last asked you for a rating.
• A random app ID. If subscriptions are not set up on your device, Wall creates a random ID and stores it on your device to use with AI Create (section 4.2).

Wall asks only for permission to add images to Photos. It does not use your camera, microphone, location, contacts, calendar or Apple Health data, and it does not send notifications.

2.1 Theme icons

When you install theme icons or icons made from your own photos, Wall builds an iOS configuration profile on your device containing the icons and a link that opens the matching built-in app (for example Phone, Messages or Camera). Wall serves this profile from your own device (a local address that only your device can reach) and opens it in a Safari view so iOS can install it. The profile and your icons are not uploaded anywhere and nothing is sent to us. After you install it, the profile is managed by iOS and stays on your device even if you delete Wall. You can remove it in iOS Settings, General, VPN & Device Management.

3. What we collect, why, and our legal basis

The legal bases below apply under the EU and UK General Data Protection Regulation (GDPR). "Legitimate interests" (Art. 6(1)(f) GDPR) means we have weighed our interest against your rights; you can object at any time (section 9).

3.1 Wallpaper catalog and widget designs

What: Wall downloads its wallpaper catalog and widget designs from our server (api.hopin.it, served through Cloudflare) and the images from our storage at DigitalOcean (Frankfurt, Germany). The catalog request includes the app name, your app language, your device's date and whether you are a subscriber. The widget design request includes only the app name. Like any internet request, both services see your IP address and basic technical details of the request.
Why: to show wallpapers and widget designs, and to keep the service running and secure.
Legal basis: performance of our contract with you (Art. 6(1)(b)); our legitimate interest in running and securing the service (Art. 6(1)(f)). api.hopin.it is served through Cloudflare from our own server at DigitalOcean. Image storage is DigitalOcean Spaces in Frankfurt. Access logs are kept only as long as needed to keep the service running and secure, then deleted.

3.2 Subscriptions and purchases (Apple and RevenueCat)

What: purchases are made and paid through Apple's App Store; we never receive your payment card or Apple Account details. RevenueCat receives your App Store receipts and transactions (product, price, currency, dates, trial and renewal status), a random app user ID created by RevenueCat, and device and app information.
Why: to unlock Wall+, restore purchases and show the subscription options available to you.
Legal basis: performance of our contract with you (Art. 6(1)(b), providing what you paid for); legal obligation for tax and accounting records (Art. 6(1)(c)).

3.3 Contacting us

The "Request a wallpaper" option in Settings opens your email app with a message addressed to [email protected]. If you email us, at that address or at [email protected], we receive your email address, your message and anything you attach. Wall does not add device or app information to the email.
Why: to answer you and consider your wallpaper request. Legal basis: legitimate interests (Art. 6(1)(f)), or contract (Art. 6(1)(b)) where your question is about your purchase.

3.4 Ratings and links

Wall may show Apple's standard rating prompt after you save or create wallpapers; ratings and reviews go to Apple under Apple's terms. The "Rate Wall" option opens the App Store. The Terms of Use and Privacy Policy links open those pages in your browser; the website's own privacy terms apply there.

3.5 Whether you must give data

You do not have to give us any personal data to use Wall. Downloading wallpapers and AI Create cannot work without an internet connection, which shows our providers your IP address. AI Create cannot work without sending the description you type.

4. AI Create (optional)

AI Create makes a wallpaper from a description you type. It is optional; nothing is sent unless you tap Create. Free users get one free creation; Wall+ subscribers get a monthly allowance.

4.1 What is sent

• Your description as you typed it, and, if you chose a style, a short description of that style added to it.
• Your app language.
• Technical data: an app user ID (the random ID RevenueCat created for you, or, if subscriptions are not set up on your device, the random app ID Wall created, section 2), the app's identification token and your IP address.

Wall does not send your photos, favorites, saved wallpapers or anything else from your device to the AI.

4.2 Where it goes

1. Our AI server, which runs on Cloudflare (Cloudflare, Inc., USA, global network). It checks your subscription status with RevenueCat using your app user ID and applies usage limits.
2. OpenRouter (OpenRouter, Inc., USA), which forwards each step to the AI model host we have selected. Our server tells OpenRouter which hosts may be used, does not allow it to fall back to other hosts, and instructs hosts not to collect your data.
3. AI model hosts that we select. Your description is first checked for harmful content by a text model, using a host with zero data retention. If it passes, the check rewrites it into a short image prompt, and only that rewritten prompt goes to an image model that creates the wallpaper. The finished image is then checked by a model, again using a zero data retention host, before it is sent back to you. Hosts may process requests in the United States or other countries. Email [email protected] for the current list of hosts.

4.3 What is kept

• Our server does not store your description, the rewritten prompt or the image. Its technical logs record the time, feature, outcome (including the safety category if a request was blocked, without any identifier), model, cost, region and whether you are a subscriber, never the text, your app user ID or your IP address.
• To apply usage limits and prevent abuse, our server keeps counters linked to a one-way scrambled (hashed) form of your app user ID, and spending and blocked-request counters linked to your IP address (stored as is) for up to 48 hours (Art. 6(1)(f) GDPR, our legitimate interest in preventing abuse). Daily counters expire after 48 hours, monthly counters after 40 days and free-use counters after up to 24 months. Your subscription status is remembered for up to 10 minutes. After several blocked requests within a few minutes, AI Create pauses for 30 minutes, and after many blocked requests in one day it pauses until the next day.
• The safety checks use hosts with zero data retention, which do not store your requests. For the image step, we instruct providers not to collect or train on your data, but the image host may keep requests for a limited time under its own terms (for example for abuse monitoring).
• We do not use your personal data or your content to train AI models, and we instruct our AI providers not to.

4.4 Safety

Every description is checked automatically. Requests for harmful content are refused, and if a request suggests you may be going through a hard time, Wall suggests reaching out to someone you trust instead of creating an image. AI output can be wrong or unexpected.

4.5 How to avoid sending data to AI

Do not use AI Create. Nothing is sent to AI providers otherwise.

Legal basis for AI processing: performance of our contract with you (Art. 6(1)(b)): we process your description to create the wallpaper you ask for, including your free creation and subscribers' allowances. Our legitimate interest in preventing abuse and applying usage limits (Art. 6(1)(f)).

5. Who we share data with

We do not sell your personal information and we do not share it for advertising. These providers process data on our behalf:

Each of these providers is bound by a contract or by its published terms to protect your data at least as well as this policy describes and to use it only for the purposes listed here.

We may also disclose data if required by law, to protect our rights or users' safety, or as part of a business transfer, in which case this policy continues to apply.

6. International transfers

Some of our providers are in the United States or other countries outside the European Economic Area. The safeguard we rely on for each is:

• RevenueCat, OpenRouter and Cloudflare: Standard Contractual Clauses (Commission Decision 2021/914, Art. 46(2)(c) GDPR) in their data processing terms, with the UK Addendum for UK users. We do not rely on the Data Privacy Framework for these three.
• AI model hosts: the EU-U.S. Data Privacy Framework (adequacy decision under Art. 45 GDPR) where the host is certified, and otherwise Standard Contractual Clauses. Email us for the hosts and the safeguard used.
• DigitalOcean (Frankfurt storage) and Zoho (EU data centre): processed in the EU.
• Apple: under Apple's own transfer terms and privacy policy.

You can get a copy of the clauses by emailing [email protected].

7. How long we keep data

8. Security

We use encrypted connections (HTTPS) for all data the app sends to the internet, keep on-device data in the app's protected storage, store app user IDs on our AI server only in hashed form, and limit access to our provider accounts to staff who need it. The theme icon profile is served only to your own device and only while you install it. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.

9. Your rights (EU, EEA, UK and similar laws)

You have the right to:

• access your personal data and get a copy;
• correct inaccurate data;
• delete your data (section 10);
• restrict processing;
• data portability.

Your right to object. Where we rely on legitimate interests (running and securing the service, abuse prevention), you can object at any time by emailing [email protected]. We will stop unless we have compelling legitimate grounds.

Automated decisions. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Our automatic safety check only decides whether an AI request is answered and may pause AI Create for up to a day; if you think this happened by mistake, email us.

To use these rights, email us (section 15). We will reply within one month. Because Wall has no accounts, see section 10 for how we find your data.

You also have the right to complain to a data protection authority. Our lead authority is the Polish President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, Poland, https://uodo.gov.pl. You can also complain to the authority in the country where you live or work. In the UK, this is the Information Commissioner's Office (https://ico.org.uk).

10. Deleting your data (no account needed)

We keep no user profile or content on our own servers, only the anti-abuse and usage counters in section 4.3, which expire on their own. Your data is on your device and, as described in sections 3 to 5, with our service providers.

1. In the app: delete created wallpapers in Library, Created, and remove favorites and widgets you no longer want.
2. Deleting the app removes everything Wall stores on your device, including the storage shared with its widgets. It does not remove images you saved to Photos or installed theme icon profiles (remove those in iOS Settings, General, VPN & Device Management).
3. Subscriptions are managed by Apple and are not cancelled by deleting the app (section 11).
4. Copies held by our providers (RevenueCat subscription records, support emails): email [email protected] with your request. To help us find your subscription record, include the order ID from Apple's purchase receipt email. We pass the request to the provider and tell you if we cannot match any data to you.

11. Subscriptions through Apple

Wall's subscriptions are sold and billed by Apple. Manage or cancel them in iOS Settings, your name, Subscriptions. Refunds are handled by Apple at https://reportaproblem.apple.com. Deleting the app does not cancel a subscription.

12. Children

Wall is a general-audience app and is not directed at children. We do not knowingly collect personal data from children. If you are under 16 in the EEA, or under 13 in the UK and elsewhere, use AI Create only with a parent's permission. If you believe a child has given us personal data, contact us and we will delete it.

13. US privacy rights (California and other states)

Categories we collect (in the last 12 months): identifiers (a random app user ID and IP address); commercial information (subscription purchases, including price and currency); internet or other electronic network activity (requests to our server); content you type into AI Create (processed to give you a result, not stored on our servers). Sources: you, your device, Apple and RevenueCat. Purposes and recipients: as described in sections 3 to 5. We do not create profiles about you.

No sale or sharing. We do not sell your personal information and we do not share it for cross-context behavioral advertising or targeted advertising. Wall contains no advertising or tracking tools. We do not use sensitive personal information to infer characteristics about you.

Your rights: to know what we collect, and to access, delete and correct it. Email us (section 15); you may use an authorized agent. Because Wall has no accounts, we verify requests using the details described in section 10. We answer within 45 days.

Appeals. If we decline your request, you can appeal by replying to our answer with the subject "Appeal". We will answer within 60 days. If you are not satisfied, you can contact your state attorney general.

Non-discrimination: we will not deny you service, charge a different price or give you a different quality of service because you exercised your privacy rights.

Do Not Track. Our app does not respond to web browser Do Not Track signals, because it is an app, not a website. Wall does not track you.

14. Changes to this policy

If we change this policy, we will update the dates above and, for significant changes, tell you in the app or in the App Store release notes before the change takes effect.

15. Contact

HopIn.IT sp. z o.o., ul. Marsz. Józefa Piłsudskiego 74/320, 50-529 Wrocław, Poland
Email: [email protected]