Canvio ("the App") is developed and operated by Aftab Fazal Qayum, an independent developer based in Pakistan ("I", "me", or "my"). This Privacy Policy explains what information I collect, how I access, use, store, and share it, and your rights regarding your data. By using Canvio you acknowledge the practices described here.
Account information from Apple. When you use Sign in with Apple, Apple provides a unique account identifier and may provide your name and email address. If you choose Apple's "Hide My Email" feature, Apple provides a private relay email address.
Account information from Google. When you use Sign in with Google, Google and Supabase Auth may provide or process your unique Google account identifier, email address, name, and profile image, depending on the information available in your Google account and the permissions you approve. Canvio requests only the basic openid, email, and profile scopes. Canvio does not receive your Google password and does not request access to your Gmail, Google Drive, contacts, calendar, photos, or other Google content.
Authentication data. Supabase Auth stores the identity and session information needed to keep you signed in and associate your cloud data with your account. Authentication session data is also stored securely on your device as needed to maintain your session.
User-generated content. Everything you create in Canvio — canvases, text, sticky notes, drawings, images, PDFs, audio recordings, tables, and todo lists — is stored locally on your device. If you are signed in and cloud sync is enabled, this content is also synced to Supabase so you can access it on your other devices.
Technical data. Supabase may log standard server-side data such as IP addresses, device or browser information, request timestamps, and diagnostic information as part of operating and securing its infrastructure. I do not use third-party advertising or behavioral analytics SDKs.
Google user data is used only to authenticate you, identify your Canvio account, and provide account and sync functionality. I do not use Google user data for advertising, profiling, surveillance, credit decisions, or training machine learning models.
I do not sell or rent your personal information. I do not share your personal information with third parties for their own advertising or marketing purposes.
Your information is shared only as necessary to provide and secure the App:
Canvio does not send Your Content to Google or Apple through the sign-in process. I do not use or intentionally disclose Your Content for advertising or machine learning training.
Your cloud data is stored using Supabase. Data is encrypted in transit using TLS and protected at rest by Supabase's infrastructure controls. Files such as images, PDFs, and audio recordings are stored in a private Supabase Storage bucket and are subject to account-based access controls.
Guest users' data is stored only on-device and is not uploaded to Canvio's cloud services.
No method of storage or transmission is completely secure. While reasonable safeguards are used, absolute security cannot be guaranteed.
Canvio is rated 4+ on the App Store. A parent or guardian should supervise use by children and must approve any account creation where required by law. Apple and Google may apply their own age and parental-consent requirements. I do not knowingly collect personal information from children under 13 without appropriate parental consent. If a parent or guardian believes their child has provided personal data improperly, please contact me at ak375456@gmail.com and I will take appropriate steps to delete it.
Your account information and synced content are retained while your Canvio account exists or as needed to provide the service, comply with legal obligations, resolve disputes, and protect the service. You can delete your account from Settings → Delete Account within the App. Account deletion permanently removes your Canvio account and associated synced canvases and files from active Supabase systems, subject to limited backup retention or legal obligations. Deletion is irreversible.
If you are a guest user, you can delete local data through the App where available or by uninstalling the App.
Deleting your Canvio account does not delete your Apple or Google account. You can review or revoke Canvio's access to your Google account from your Google Account connections.
Depending on your location, you may have rights including access, correction, deletion, objection, restriction, and data portability. To exercise these rights, contact me at ak375456@gmail.com. I will respond within 30 days or within the period required by applicable law.
You may choose not to sign in and use guest mode where available. You can also stop future cloud processing by deleting your Canvio account.
The App uses the following third-party services:
These third parties process information under their own privacy policies and terms.
Canvio contains no advertisements. No advertising SDKs are integrated, and Google Sign-In data is not used for advertising.
Because I am based in Pakistan and use international service providers, your information may be processed in countries other than your own. Those countries may have different data-protection laws. I use service providers and safeguards intended to protect information as described in this Policy.
I may update this Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. If a change materially affects how Google user data or other personal information is used, I will provide additional notice or request consent where required before applying the new use.
If you have any questions, requests, or concerns about this Privacy Policy or Canvio's use of Google user data, contact me at:
Aftab Fazal Qayum
Email: ak375456@gmail.com
Pakistan