Privacy Policy

The app and your pages

There is no Papering account or separate sign-in. The app does not ask for your name, email address, or phone number.

Papering does not collect your handwriting, photos, PDFs, or other page contents. Handwriting recognition runs on your iPad. App usage statistics and purchase verification are handled separately as described below.

What this site collected (launch waitlist)

papering.app ran a waitlist to email people when Papering launched on the App Store. It closed when Papering launched on September 30, 2026, and no longer accepts sign-ups.

Sign-ups were accepted only from people aged 14 or over who consented to the collection and use of their information. We collected the following, for these purposes:

• Email address (required) — sending the launch notice and managing your request
• Note-taking habits and device (optional) — product improvement
• Consent preferences — updates and product news after launch require separate consent
• Referral source (automatic) — referring page and campaign tags for understanding how visitors arrive
• Language, sign-up date, and request type — choosing the notice language and managing your request

Keeping and deleting sign-up information

Sign-up information was received through Vercel, our website host, and is stored in a private Notion workspace. It was kept in a private Craft document until October 2026. The operator uses it to manage requests and send the news you agreed to receive. We do not sell this information or provide it to advertising businesses.

We keep it until September 30, 2027, one year after launch, then delete it. You can ask for deletion sooner at contact@papering.app. If you agreed to news after launch, you can withdraw only that consent at any time. Withdrawing consent does not affect use of the app.

We do not use sign-up information beyond the purposes consented to at sign-up, and sign-up contents were not written to server error logs.

Cookies and visit statistics

This site uses Vercel Web Analytics without cookies. Its temporary visitor hash is discarded after 24 hours, and IP addresses are not stored in those statistics. These statistics do not track activity across other sites.

Statistics may include event time, page URL and path, selected query parameters, referrer, country or city, browser, operating system, device type, and analytics script version.

App usage statistics

In versions that provide the usage-sharing choice, analytics starts only after you choose to share. You can decline without losing any Free or Pro features and change your choice under Settings → Usage Statistics. Earlier versions started analytics automatically; this change does not retrospectively authorize or erase that data.

Turning sharing off stops new collection and clears pending analytics on this device. Requests already in transit may finish. Choosing to share again does not upload earlier setup answers or purchases. Setup choices may include the intended use, frequency, and previous note-taking method selected while creating a binder.

We retain app analytics while needed to evaluate and improve the product, review that need periodically, and delete data when that purpose ends or a verified deletion request is processed. This is a purpose-based retention criterion, not a promise of automatic deletion after a fixed number of days.

We send app usage events to PostHog's US cloud to improve features and understand purchases. We do not identify users by name or email. A randomly assigned installation identifier distinguishes return visits and usage patterns. It does not directly identify you by name, but can connect activity from the same installation.

Analytics events exclude handwriting, recognized text, photos, PDF contents, binder names, and other user content. We do not use advertising identifiers for tracking or record your screen.

• Usage events — app launches and return visits, starting to write, creating binders, using inserts or decorations, and importing PDFs, including quantity ranges
• Purchase and content events — viewing purchase screens, purchase attempts and outcomes, purchase restore results, refunds or other revocations with days owned, product and pack identifiers, price, currency, offer type, and content installation results
• Crash and hang reports — diagnostics that iPadOS provides to the app through MetricKit: the type of crash or how long the app was unresponsive, and the call stack of the affected thread as code locations in app and system libraries, with the app build, operating system version, and device model. Reports contain no page contents.
• Sync status — when iCloud sync needs your action (iCloud storage full, a different Apple Account, or the iCloud copy deleted), when that is resolved, and how long it lasted. Sync contents are not sent.
• App environment — app, operating system and device information, language, analytics start time and consent periods, and distribution channel
• Setup and analytics context — whether you had binders and your Free or Pro status when sharing started, the binder setup steps you reached or closed, completed setup answers, and system review request attempts. Handwriting and review contents are not sent.
• Approximate location — PostHog estimates country, region, or city from the connection IP address for analytics. Client IP addresses are discarded after this processing and are not stored with analytics events. The app does not request GPS location access.

Storage and iCloud sync

Your work is stored on your iPad first. When iCloud is enabled for Papering, your library, including handwriting, photos, and PDFs, syncs through your private iCloud database.

The Papering operator cannot view or download page contents in that private database. Synced data counts toward your iCloud storage.

Content downloads and purchase verification

The app connects to papering.app to find and download inserts, stickers, and other provided content. For protected downloads, the server verifies an Apple-signed purchase proof containing product and transaction identifiers and purchase status.

Purchase proofs are used to verify download access and are not kept as a separate customer register. Apple handles payment and billing details. Papering does not receive card numbers or your Apple Account password. Hosting infrastructure may process technical information such as request URLs, timestamps, and IP addresses for security and service operation.

Backups and exports

Vault copies, PDFs, and backup files contain your work. When you export through Files or sharing, they are saved to the location you choose under that service's policies and your settings. Papering cannot delete exported files for you.

App data may also be included in a whole-device iCloud or computer backup under Apple's policies and your settings.

External services

We use Vercel for website hosting and visit statistics, Notion for sign-up storage, PostHog for app usage statistics, and Apple for distribution, payments, and sync. Each processes information needed for the purposes described above. Processing may take place outside your country, depending on the provider's infrastructure. Our PostHog endpoint is in the United States.

See the providers' privacy information: Vercel, Notion, PostHog, and Apple.

Contact and your privacy rights

The Papering operator is responsible for privacy requests and can be reached at contact@papering.app. You may request access, correction, deletion, restriction of processing, or withdrawal of consent. We check only the information needed to verify the request and respond under applicable law.

When you email support, we use your reply address, message, and any attachments you choose to send to resolve the issue. Please send only what is needed. We delete unnecessary information after resolution, except where a legal retention requirement applies.

Report a Problem in Settings opens a draft in your mail app that already includes the app version and build, device model, operating system, language, battery level and charging state, Low Power Mode, thermal state, free storage, memory size, iCloud sync status, and plan. You can review or delete any of it before sending, and nothing is sent unless you send the email.

Deleting data

Permanently deleting a binder or sheet in the app also syncs that deletion through iCloud. Removing the app deletes its local copy, but an iCloud copy may remain and sync again after reinstallation. You can manage it in your iCloud settings.

Vault copies, exported files, and device backups must be managed separately. To delete your waitlist information, write to contact@papering.app. To delete usage statistics sent from the app, tap “Request deletion of usage statistics” under Settings → Usage Statistics. It opens an email to contact@papering.app that already includes this device’s analytics IDs. Those IDs remain on this device after sharing is turned off, so you can still make the request. Turning sharing off does not itself delete previously sent data. If the app was removed or its local data was erased, those IDs may no longer be available; contact us so we can assess what can be located without asking for unnecessary information.

Children's privacy

The launch waitlist accepted only people aged 14 and over. If we learn that someone younger signed up, we promptly delete the entry. The app does not ask for age or collect page contents.

Changes to this policy

When data handling changes, we update this page and its revision date. If a change in purpose or scope requires further notice or consent, we provide it in advance as required by applicable law.