HilloColor PRIVACY POLICY

Last updated: 11 September 2026

Controller

Hilloworks is a registered auxiliary business name of Protest Design Oy.

Protest Design Oy
Business ID: 2080773-3
Tampere, Finland
support@hilloworks.com

Protest Design Oy is the data controller for personal data processed by Hilloworks as described in this Privacy Policy.

Scope

This Privacy Policy explains how the HilloColor app for iPhone, iPad and Apple silicon Mac handles data. It also covers HilloColor support, shared palette links and related requests to Hilloworks servers.

Data stored on your device

HilloColor does not require a Hilloworks account. Your palettes, custom colors, settings and other app content are stored locally on your device unless you choose to synchronize or share them.

Photos and image files selected in the Color Picker are processed on your device. HilloColor does not upload those images to Hilloworks.

The ambient music included with HilloColor plays locally. Hilloworks does not collect listening history.

iCloud synchronization

If you enable Sync with iCloud, your My Palettes and My Colors content is stored in your private Apple iCloud database and synchronized between your Apple devices using Apple CloudKit.

Hilloworks does not use your synchronized palette or color content for advertising, analytics or profiling. You can disable synchronization in HilloColor Settings. You can manage your iCloud account and stored app data through Apple services and device settings.

Apple processes iCloud data according to Apple's own terms and privacy policy.

HilloColor servers and technical data

HilloColor may contact Hilloworks servers to retrieve current color-library and inspiration-palette content. These requests do not require a Hilloworks account.

As with ordinary web requests, the hosting system may temporarily process technical information such as:

• IP address
• request date and time
• requested address or resource
• device, operating system or app-related request information made available by the connection
• server error and security information

This information is used only to deliver content, maintain security, prevent abuse and troubleshoot reliability. Hilloworks does not use it to build advertising profiles or track users across apps and websites.

Shared palette links

When you choose to share a HilloColor Link, the palette values are encoded in the link itself. HilloColor passes the link to the Apple share sheet, and you choose where and with whom to share it.

Anyone who receives the link may view its palette. When a shared link is opened on the Hilloworks website, the link and its encoded palette values may be included in ordinary browser history and technical server logs. Do not use a shared palette link for confidential information.

Analytics, advertising and tracking

HilloColor does not include third-party advertising SDKs, third-party analytics SDKs or cross-app tracking.

Apple processes App Store purchases and may provide Hilloworks with aggregated sales, usage or diagnostic information according to your Apple privacy and analytics settings. Hilloworks does not receive your full payment card details from Apple.

Camera and photo library access

HilloColor requests camera or photo-library access only when you choose a feature that needs it. Access is used to let you sample colors from an image. You can change these permissions at any time in the privacy settings of your device.

Support and feedback

If you contact Hilloworks, we may process the information you choose to provide, such as:

• your name and email address
• your message, question or feature request
• screenshots, logs or diagnostic information you choose to send
• device, operating system and app-version information relevant to the request

Please do not send confidential, sensitive or personal information unless it is necessary for support.

Purposes and legal bases

We process the limited personal data described above to provide HilloColor content and support, maintain security, prevent abuse, troubleshoot problems and improve compatibility and reliability.

Depending on the situation, processing is based on providing the service you requested, our legitimate interests in operating and securing HilloColor and its supporting website, compliance with legal obligations, or your consent where required.

Sharing and service providers

We may share personal data with trusted service providers only when necessary to operate HilloColor and provide support. These may include Apple, website hosting providers, email providers and support tools if used.

We may also disclose information when required by law, courts, regulators or other public authorities. We do not sell personal data.

Some providers may process data outside Finland or the European Economic Area. Where required, appropriate legal safeguards are used for international transfers.

Retention and deletion

Local HilloColor content remains on your device until you edit it, delete it or remove the app, subject to device backups and operating-system behavior.

iCloud content remains in your Apple iCloud account until it is deleted through the app or Apple services, subject to Apple's retention and backup practices.

Technical server and security logs are retained only for a limited period needed for security, troubleshooting and abuse prevention. Support messages are retained for as long as needed to handle the request and maintain a reasonable support history. Data is deleted or anonymized when it is no longer needed, unless longer retention is required by law.

Data security

We use reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse or disclosure. No online service can be guaranteed to be completely secure.

Your rights

Subject to applicable law, you may have the right to:

• request access to your personal data
• request correction or deletion
• request restriction of processing
• object to processing based on legitimate interests
• request data portability where applicable
• withdraw consent where processing is based on consent
• lodge a complaint with a data protection authority

To exercise your rights or ask a privacy question, contact support@hilloworks.com. We may need to verify your identity before responding.

Finnish supervisory authority

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with a supervisory authority. In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.

Changes to this Privacy Policy

We may update this Privacy Policy when HilloColor or its supporting services change. The latest version will be published on this page with an updated date.