Junto · privacy

1. What we see — and what we don't

We only collect what’s necessary to make Junto feel like your private colour diary.

• Your photos: They live on your device and in your private iCloud/Google Drive backup if you enable sync. Junto’s servers never store your full‑resolution images unless you explicitly use a cloud album feature (and even then, they are encrypted and isolated per user).
• Colour grids & palettes: The arrangements you create are stored locally. If you choose to share a screenshot, that’s your choice — we don’t access those shares.
• Basic usage data: We may collect anonymous information about which colour wheel spins are most popular (e.g., “Seafoam Green gets spun more at sunset”) to improve the app. This data cannot be traced back to you.

2. Private albums · local first, private forever

Junto is designed as a private sanctuary. Your colour albums — whether they're called “Today only Blue” or “Rust & Patina” — are not visible to anyone else. No feed, no public gallery. You are the sole viewer unless you deliberately export an image.

3. Camera roll · permission with respect

Junto asks for camera access only when you’re about to capture a new colour. You can also import from your library — we never access your entire camera roll without your explicit selection. The app doesn't upload or analyse your library in the background. It’s your film, you’re the director.

iOS permission read selected only

4. Where you found that ochre · location

Junto may ask for location access if you want to tag where a colour was found — useful for street photographers revisiting a perfect light. Location data is stored only in your photo’s metadata, right where it belongs. We don’t collect location heatmaps or track your movements. You can always disable location in the app settings.

5. Gentle analytics

We use privacy‑focused tools (like TelemetryDeck or similar) that collect no personal information. We might know that the colour #B86A4B was spun 1,200 times today, but never who spun it. This helps us refine the wheel and fix crashes.

6. Who we might share with (almost nobody)

Junto doesn’t sell, rent, or trade your personal data. We use:

• Cloud storage providers (Apple iCloud / Google Drive) if you enable backup — their privacy policies apply to the data at rest.
• Email support — if you write to us, we keep the correspondence only to answer you, and delete it when it’s no longer needed.

No advertisers, no data brokers, no “share with partners” clauses. Just you and your colour hunt.

7. Your colours, your erasure

Since most of your data lives on your device, deleting the app removes almost everything. If you have cloud backups, you can delete them anytime from your account settings. Want us to wipe any server logs tied to your email? Write to us — we’ll do it within 7 days, no questions asked.

8. Young colour seekers

Junto is not directed at children under 13 (or the relevant age in your country). We don’t knowingly collect data from minors. If we discover we have, we’ll delete it promptly — just email us.

9. When the privacy palette evolves

If we ever need to change this policy (to add a new feature or follow better practices), we’ll update the date at the top and notify you in the app. Your continued use means you’re comfortable with the new version. But we promise — we’ll never loosen privacy to sell your data.