SuperPaste Privacy Policy

SuperPaste Privacy Policy

Last Updated: May 6, 2025

Introduction

Welcome to SuperPaste! This Privacy Policy explains how SoftCrunchLabs Inc. ("we" or "us"), based in Alberta, Canada, collects, uses, and protects your information when you use the SuperPaste iOS application (the "App") and its custom keyboard extension. We are committed to safeguarding your privacy and complying with applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), which governs how private organizations collect, use, and disclose personal information. By using SuperPaste, you agree to the collection and use of information as outlined in this policy. If you have any questions, you can contact us at dan@softcrunchlabs.com.

Information We Collect and Use

SuperPaste is designed with privacy in mind. We do not require you to create an account, and we do not collect personal details like your name, email, address, or phone number. Any information we do collect is primarily for providing and improving the App's functionality (pasting your saved phrases) and for analytics/advertising purposes. Below are the types of data the App and its integrated services may handle:

User-Provided Data (Clipboard Items):

You can save phrases or items in the App's list for quick pasting. All such saved items are stored locally on your device (using iOS's UserDefaults or CoreData). We do not transmit or upload this content to our servers (in fact, we have no external servers for this App). The content you save is private to you and remains on your device unless you choose to share it.

Device & Usage Data (Analytics):

We use Google Firebase Analytics to gather anonymous usage information. This includes data such as what features you use, how often you use the App, session duration, device type, OS version, and crash reports if the app crashes. This information helps us understand app performance and fix issues (for example, crash logs help us troubleshoot problems). The data collected by Firebase does not identify you personally – we cannot see your name or any content of your phrases. It's mainly aggregate statistics and technical information (e.g. device model, iOS version). We use this data solely to improve SuperPaste's functionality, stability, and user experience. Firebase may automatically collect some device identifiers or instance IDs for analytics, but we do not combine analytics data with any personally identifying information. (For more details on Firebase's privacy practices, you can refer to Google's Privacy Policy, as Firebase is governed by Google's privacy terms.)

Advertising Data (Google AdMob):

SuperPaste displays advertisements to support our free features. We use Google AdMob for interstitial ads, rewarded ads, and app-open ads. AdMob, as a third-party ad network, may collect certain information from your device for advertising purposes. For example: AdMob can collect your device's IP address (used to estimate your general location, e.g. city or region). It also collects device identifiers such as the iOS advertising identifier (IDFA) or other device IDs. Additionally, AdMob gathers advertising data like information about the ads you view and how you interact with them (e.g. taps on ads). This data is used to serve relevant ads and perform analytics on ad effectiveness. AdMob may also record some technical information (for instance, non-user-related crash logs and performance data related to the ads SDK) to ensure ads function properly and to improve their services. Importantly, AdMob does not receive any of the phrases or content you type; it only collects data necessary for advertising (as described). We do not have access to the personal identifiers AdMob collects – that data is directly handled by Google under their privacy policy. We recommend you review Google's Privacy Policy to understand how Google uses this information. For more details specifically on how Google uses data from apps like ours, you can read Google's explanation.

TikTok Advertising Analytics:

We use the TikTok Ads SDK (provided by TikTok Inc.) to measure the effectiveness of our advertising campaigns run on TikTok. This integration allows us to track certain app events—such as when you install the app or complete an in-app purchase after seeing our ad on TikTok.

The data collected by TikTok SDK includes limited technical information, such as your device's Advertising Identifier (IDFA) (if you've consented), IP address, device type, operating system, and in-app event data (installations, purchases, and page interactions). No personal content, clipboard content, or saved user-generated text is shared with TikTok.

The information collected is solely used to provide us with aggregated reports on how effective our TikTok advertisements are, allowing us to optimize our marketing efforts. This helps us ensure that our marketing investments reach the right audiences and deliver relevant experiences to our users.

This tracking only occurs if you consent through Apple's App Tracking Transparency prompt. If you do not consent, TikTok SDK will not collect your advertising identifier or any other personally identifiable information. You can adjust your tracking preferences at any time through your device settings.

For further details about TikTok's data handling practices, please refer directly to TikTok's Privacy Policy.

International Data Transfers: The data collected via TikTok SDK may be processed on servers located outside your region (including, but not limited to, the United States). By consenting to tracking, you agree to this transfer. Appropriate safeguards, including standard contractual clauses, are used to ensure such data transfers comply with applicable privacy regulations.

App Tracking Transparency (ATT) Consent:

Because our App uses AdMob for ads, we adhere to Apple's App Tracking Transparency framework. This means when you first launch SuperPaste, you will see a prompt asking for your permission to allow the app to "track" you across apps and websites owned by other companies. If you allow tracking, this permits the App to access the device's advertising identifier (IDFA) which AdMob can use to serve personalized (targeted) ads. If you deny tracking, SuperPaste (and AdMob) will be restricted from accessing the IDFA. In that case, you will likely see non-personalized (contextual) ads – i.e., ads not tailored to your profile. Your choice on the ATT prompt is completely respected: the App will function fully regardless of whether you grant or refuse permission. You can change your preference later in your device settings under Privacy > Tracking, where you can enable/disable tracking for SuperPaste at any time.

Keyboard Extension ("Full Access"):

SuperPaste includes an iOS custom keyboard extension to let you paste your saved phrases quickly from any app. To use the keyboard's full functionality, iOS requires you to grant "Full Access" to the keyboard extension. Apple will show a warning that enabling Full Access allows the developer to transmit what you type. We want to reassure you: SuperPaste's keyboard extension does NOT capture or send your keystrokes over any network. The Full Access permission is used only to allow the keyboard to read the list of phrases you saved in the main app (via a shared App Group storage) and to paste them; it is not used to spy on anything you type. In fact, SuperPaste's keyboard extension has no networking capability – it cannot connect to the internet. We have intentionally not given the keyboard any code to send data out. This means anything you type using the keyboard (or any other keyboard) is not being transmitted to us or anyone else by the SuperPaste app. Your clipboard data and keystrokes remain private on your device. Full Access is only there so the keyboard can access the same local data as the main app (your saved phrases) and perform the paste action. If you have any concerns about this, you can choose not to enable Full Access; however, without it the keyboard may not function (it wouldn't be able to retrieve your phrase list). Rest assured, with Full Access enabled, we still do not collect any personal typing data.

No Server Storage:

As mentioned, we do not run a server or cloud backend for SuperPaste. We do not remotely store any personal information. All user data (your saved text snippets) stays on your own device. The only data that leaves your device is the analytics and advertising data described above, which goes to Google's servers (Google Firebase/AdMob) and TikTok's servers (TikTok Ads SDK) and not to SoftCrunchLabs' servers. We do not see or collect any data like contacts, photos, or other content on your device.

How We Use Collected Information

We use the limited information we collect for the following purposes:

To Provide and Improve the Service:

Data about how you use SuperPaste (from Firebase Analytics) helps us understand what features are useful, how the app is performing, and where improvements or fixes are needed. For example, usage stats might tell us a certain feature is rarely used, informing future development. Crash reports tell us if the app is unstable on a certain iOS version so we can fix it.

To Serve Advertisements:

We integrate AdMob to show ads, which allows us to offer SuperPaste for free. The information AdMob collects (device identifiers, etc.) is used by Google to display relevant ads to you and to prevent showing you the same ad too frequently. We may see aggregated ad reports (e.g., how many people clicked an ad), but we do not see personal data about any user.

To Analyze App Performance:

Both Firebase and AdMob provide analytics that let us gauge things like the number of active users, session lengths, screens viewed, etc. We use these insights to make product decisions (for instance, if a new feature is not being used, we might find out why). This analysis is always on anonymized or aggregated data – we look at trends, not individual users.

To Measure Advertising Effectiveness:

We use TikTok Ads SDK to measure the effectiveness of our advertising campaigns on TikTok. This helps us understand which marketing efforts are successful and optimize our advertising spend. The data collected (such as app installations and in-app events after viewing our TikTok ads) provides us with aggregated reports that help us make informed decisions about our marketing strategy. This ensures we can continue offering SuperPaste for free while reaching users who would benefit from our app.

To Ensure Legal Compliance and Prevent Misuse:

Although we do not actively monitor content, if we ever encounter information (for example, if you contact us for support) that suggests misuse of our app (such as someone attempting to use it maliciously), we may use data to investigate or prevent violations of our Terms of Use or illegal activities. However, given we collect very little data, this scenario is rare.

Customer Support:

If you reach out to us via email (for example, to ask a question or report a problem), we will use any information you provide (such as your email address or description of an issue) solely to assist you and resolve your inquiry. We may ask for additional info about your device (e.g., model, iOS version) if needed to troubleshoot, but we will not ask for personal data unrelated to the problem. Any correspondence information you provide is used only for support and not stored long-term (other than as a record of the conversation in our email). You can contact our support team at dan@softcrunchlabs.com for assistance.

We do not sell or share your personal information to third-party companies for their independent marketing or purposes. However, SuperPaste does rely on certain third-party services as described, which will have access to some data by virtue of their integration:

Google (Firebase Analytics and AdMob):

Google is our third-party service provider for analytics and ads. As detailed above, Google may collect device identifiers, IP address, and usage data through their SDKs embedded in the app. This means Google technically processes that data and might associate it with advertising profiles or analytics reports. We do not send Google any data beyond what their SDK automatically collects. Google is responsible for how they use this data in accordance with their own privacy policies. We encourage you to review Google's Privacy Policy for a full explanation. In general, Google may use the collected info to personalize ads (if you allowed tracking), to report aggregate trends to us, and to improve their ad/analytics services. We have ensured our use of Google's services complies with their terms and with privacy laws – for example, we honor the ATT opt-in requirement for ad tracking. Google may also use the data for their own purposes such as improving Google's ad network. You can find more information on Google's site about How Google uses information from apps like ours. We want to be transparent that when you use SuperPaste, Google is a recipient of some data; however, that data typically does not directly identify you by name. It does include online identifiers (your device's IDFA, IP, etc.) which in context could be considered personal data, so we treat it seriously and ensure you have control (via consent) over its collection.

TikTok (Advertising Analytics):

TikTok Inc. is our third-party service provider for advertising analytics through the TikTok Ads SDK. As detailed above, TikTok may collect limited technical information including device identifiers (IDFA if consented), IP address, device type, operating system, and in-app event data through their SDK embedded in the app. This data is used solely to provide us with aggregated reports on advertising effectiveness and to optimize our marketing campaigns on TikTok. We do not send TikTok any personal content, clipboard content, or saved user-generated text. TikTok is responsible for how they use this data in accordance with their own privacy policies. We encourage you to review TikTok's Privacy Policy for a full explanation. We have ensured our use of TikTok's services complies with their terms and with privacy laws – for example, we honor the ATT opt-in requirement for ad tracking. The data collection only occurs with your consent through Apple's App Tracking Transparency prompt, and you maintain full control over this consent through your device settings.

Apple (In-App Purchases and Platform Services):

Apple Inc. distributes SuperPaste via the App Store and handles our in-app subscription payments through its StoreKit system. When you make a purchase (e.g., start a subscription) or use the App Store, Apple may collect personal information (such as your Apple ID, payment information, and device information) according to Apple's own privacy policies. That information is not shared with SoftCrunchLabs except in very limited ways: we receive confirmation from Apple that a purchase was made or a subscription status (no sensitive payment details). For example, Apple provides us a transaction ID or receipt to verify your subscription is active, but it does not give us your credit card number or personal address. Apple may also collect usage stats through features like app crash reports (if you opted to share diagnostics with app developers). Any data Apple collects is governed by Apple's Privacy Policy and the terms you have with Apple. If you want to know more, please refer to Apple's privacy documentation (available on Apple's website). Note that Apple requires all apps to have a privacy policy (hence this document) and to adhere to certain privacy protections. Also, App Tracking Transparency (discussed above) is an Apple-mandated privacy feature which we comply with fully.

Legal and Safety Reasons:

We will not share information with authorities or any third parties unless we are legally compelled to do so (e.g. a court order) or if it's necessary to protect rights, property, or safety. For instance, if in the unlikely event we are required by law enforcement due to a legal process, we will only provide what is legally required (and since we have very limited data, we might have little to provide). Additionally, if SoftCrunchLabs is ever involved in a merger or acquisition, users would be informed and your data (which is minimal) would remain protected by this policy or you'd be given a chance to opt-out if the terms change.

In summary, aside from Google, TikTok, and Apple's involvement as explained, we do not disclose your data to others. There are no other social networks, advertisers (besides AdMob), or analytics companies (besides Firebase and TikTok SDK) getting your data from us.

Your Choices & Rights

We believe in giving you control over your information. Because our data collection is minimal, the primary choices you have relate to analytics and advertising:

Opt-Out of Tracking/Personalized Ads:

You have the ability to opt out of SuperPaste (and its partners) tracking your device for advertising purposes. When the ATT prompt appears, if you select "Ask App Not to Track," this will disable the collection of the IDFA by our app for both AdMob and TikTok SDK. Even after initially choosing, you can change this setting at any time. On iOS, go to Settings > Privacy > Tracking, and adjust the toggle for SuperPaste. If you opt out, AdMob will serve non-personalized ads (which do not use your data for targeting) and TikTok SDK will not collect your advertising identifier or any other personally identifiable information. Additionally, you can opt out of personalized ads from Google by not granting consent and by using Google's ad settings. For example, if you have a Google account, you can visit Google's Ads Settings webpage to control ad personalization on that account. On iOS devices, you can also reset your device's advertising identifier (which gives you a fresh ID). This can be done under Settings > Privacy > Advertising (or Privacy > Ads on newer iOS versions) by selecting "Reset Advertising Identifier." Resetting it will disassociate any prior data from a new ID.

Analytics Opt-Out:

While you cannot directly toggle Firebase Analytics on/off within the app (aside from the tracking consent which covers linking data with your IDFA), remember that our analytics data is anonymized. However, if you truly do not want any analytics at all, the only way would be to not use the app or use it in offline mode (Firebase requires an internet connection to send data). Some users choose to block analytics domains at the network level (with DNS or firewall apps) — that's outside the scope of this policy, but it is something advanced users can do. That said, the analytics data we collect is quite harmless and helps us improve; it does not include personal identity info.

Access & Correction:

Under PIPEDA and other privacy laws, you have rights to access personal information held by organizations and correct it if necessary. However, in our case we do not hold identifiable personal information about users (no account system, no stored profiles). The data we have access to (via Firebase/AdMob and TikTok dashboards) is aggregated and cannot be easily traced back to an individual by us. For example, we might see "100 users opened the app today, 60% in Canada," but we cannot pinpoint who those users are. If you believe we might somehow have personal data about you (for instance, if you emailed us for support and shared some information), you have the right to request a copy of that communication or ask us to delete it. We will be happy to assist in any such requests. Simply contact us at dan@softcrunchlabs.com. We will respond to inquiries about any personal info we hold and correct or delete it as required by law.

Withdrawal of Consent:

Because we operate on consent (for tracking) or user action (using the app), you can withdraw consent at any time. For example, if you previously allowed tracking and change your mind, turn off the tracking permission as described above. If you subscribed to the app and no longer want us to collect any usage data at all, you may choose to cancel your subscription and stop using the app (though we hope you don't have to do that – again, we're not collecting sensitive info). Uninstalling the app will also stop all data collection from the app immediately.

Do Not Track Signals:

Web browsers send "Do Not Track" signals. Since SuperPaste is a mobile app, this is not directly applicable. However, we treat the ATT opt-out as an equivalent to "Do Not Track" for advertising. We also do not perform any cross-app tracking on our own (outside of what AdMob does with your consent).

Cookies and Similar Technologies:

The App itself does not use cookies (cookies are primarily web technology). AdMob might use something analogous to cookies in their in-app advertising (like caching identifiers or using the advertising ID which functions like a cookie). You cannot delete those "identifiers" like a web cookie, except by resetting your advertising ID as noted. There is no web browser in the app where cookies would be stored, except if an ad opens a web view (in which case you'd be subject to that site's cookie usage).

Children's Privacy

We do not knowingly collect personal information from children. SuperPaste is rated 4+ on the App Store, meaning it is deemed suitable for all ages in terms of content. However, SuperPaste is not directed at children under the age of 13 specifically, and we do not intend for children to use the app without parental supervision if they are young. Since we collect virtually no personal data, a child's use of the app is unlikely to expose any personal information. Nevertheless, if you are a parent or guardian and you have concerns about your child's use of SuperPaste or believe that your child may have provided personal information to us (for example, by contacting support), please contact us. We will promptly delete any personal data we may have inadvertently received from a child under 13. AdMob's advertising in the app is general audience and not specifically targeted to children. If we ever decide to tailor the app to children, we would implement appropriate measures in accordance with laws like COPPA (Children's Online Privacy Protection Act). As of now, we treat all users' data with care and minimize data collection for everyone, including minors.

Data Security

We take the security of your data seriously. Given that we do not store user data on our servers, the main vectors of data are through Google's and TikTok's systems. Google Firebase and AdMob, as well as TikTok Ads SDK, employ industry-standard security measures to protect data in transit and at rest. For example, data sent from the app to Firebase/AdMob and TikTok is typically encrypted via HTTPS. We keep our use of Firebase/AdMob and TikTok SDKs up to date to benefit from the latest security improvements. On your device, your saved phrases and preferences are stored in the app's sandboxed storage which is protected by the operating system. We recommend that you use a passcode or biometric lock on your device to further protect any sensitive information on your phone (as a general best practice). The keyboard extension data sharing uses Apple's App Groups and does not expose your data to other apps. No system is 100% secure, but because we collect very little data, the risks are limited. Still, we will promptly notify users in the event we discover any security breach that affects your personal information, and we will take steps to remedy it. It's also good to note: when you paste a phrase using our keyboard, you are placing that text into whatever app or field you choose. From that point, that text is subject to the privacy of whatever context you pasted it in (e.g. if you paste into a messaging app, that message could be sent over the internet via that app). This is within your control, but we want to remind you to be mindful of what you paste and where. SuperPaste itself doesn't transmit those phrases anywhere on its own.

Data Retention

Because we do not directly collect personal data, we do not maintain user data records that need periodic deletion on our side. Data stored on your device (like your saved snippets) remains until you delete the app or remove those snippets yourself. If you want to erase those, simply deleting the app will typically remove all its local data. For analytics data in Firebase: Google may retain raw analytics logs for a certain period (Google's policies currently often retain event data for up to 14 months by default, though this can vary). AdMob advertising data retention is governed by Google's policies as well. TikTok advertising analytics data retention is governed by TikTok's policies. We at SoftCrunchLabs do not have direct control over Google's or TikTok's retention of data that is collected through their respective SDKs. However, we only have access to aggregated reports, not raw personal data, and those reports may be kept indefinitely for our internal analysis. Rest assured, those reports contain no information that could identify an individual user. If you have concerns about data retention, you can contact us, and we can attempt to clarify or assist (for example, we could adjust certain data collection settings if feasible or manually delete any support emails you sent us upon request).

International Users

SuperPaste is offered worldwide via the Apple App Store. If you are using the app from outside Canada (or even outside North America), be aware that the analytics and advertising data may be transferred to and processed in countries including the United States or other locations where Google, TikTok, or their subsidiaries maintain servers. The privacy laws in those countries might be different from those in your home country. By using SuperPaste, you consent to the transfer of your information (limited as it is) to these countries. We rely on Google's and TikTok's robust data protection measures; both companies participate in various compliance frameworks (such as Standard Contractual Clauses for data transfer where applicable). For Canadian users, know that data going to the U.S. will be subject to U.S. laws (like the PATRIOT Act) while in transit or storage there. We strive to ensure any third-party we work with (like Google and TikTok) has appropriate safeguards in place. If you are an EU resident, note that our practices align with GDPR principles (lawful basis of consent for ad tracking, data minimization, etc.), although we do not target the EU specifically. If you have any questions about cross-border data handling, feel free to reach out.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time as our app or privacy practices evolve. If we make significant changes, we will notify you by an appropriate means – for example, by emailing you (if we happen to have an email on file from a support inquiry), or by posting a notice within the app or on our App Store listing, or simply by updating the "Last Updated" date at the top of this policy and publishing the changes. We encourage you to review this Privacy Policy periodically. Continued use of SuperPaste after any modifications to the policy constitutes your acknowledgment of the changes and your agreement to abide by the updated policy. If you do not agree with any update, you should stop using the app and can contact us to express any concerns.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled in SuperPaste, please contact us:

SoftCrunchLabs Inc.
Attn: Privacy Officer
5005 Dalhousie Dr NW Unit 175 #1537
Calgary, AB T3A 5R8 Canada
✉️ Email: dan@softcrunchlabs.com
📞 Phone: +1(587)575-3997

We will gladly assist you and address any issues. Your trust is important to us, and we welcome feedback on how we can make SuperPaste not only a great productivity tool but also one that ensures your privacy and peace of mind. Thank you for using SuperPaste!

Electronic Consent and Agreement

By downloading, installing, accessing, or using SuperPaste, you acknowledge that you have read, understood, and consent to this Privacy Policy. Your electronic consent constitutes your agreement to our data collection and processing practices as described herein.

Date of Electronic Consent: The date you first download, install, or use SuperPaste
Consenting Party: The individual or entity downloading/using SuperPaste
Privacy Policy Version: Last Updated May 6, 2025