What Spectra collects
Nothing personal. Spectra does not collect, transmit, or store any personally identifiable information. There are no user accounts, no device identifiers sent to any server, and no behavioral analytics.
The app works entirely on-device. Colors you capture, palettes you build, and preferences you set never leave your device except through your own iCloud account (see below).
iCloud sync
If you have iCloud enabled, Spectra uses CloudKit to sync your palettes and saved colors across your devices. This data lives in your personal iCloud account — Vendrato has no access to it and does not operate any CloudKit backend.
No CloudKit-side analytics are enabled. Apple's standard iCloud data-protection terms apply.
Camera and photos
Spectra requests camera access when you first open the Capture flow. Permission is requested at the moment of use, not at launch.
Camera frames are processed entirely in-memory on your device to extract color data. No frame, thumbnail, or color reading is ever transmitted off-device or written to any log.
Photo library access is requested only when you choose to import an image. Imported images are processed on-device and not retained beyond the current session.
Shared colors and Capture Replay
Color Cards (the shareable images of a color swatch) are rendered on-device by the app and saved to your photo library or shared directly. Nothing is uploaded to any server we operate.
Capture Replay clips are similarly composed on-device using standard system frameworks. The resulting video is stored locally and shared at your direction — we never receive a copy.
App Clip and shared links
When you share a color or palette via a universal link (https://spectra.vendrato.com/c/{token}), the recipient's device opens a tiny landing page on our site. The token in the URL encodes the color data and is decoded entirely on-device by the App Clip or the app. We do not store, parse, or log the token contents.
Our web server (hosted on Netlify) records standard HTTP access logs — the URL path, timestamp, and IP address — as any web server does. Netlify retains these logs for 7 days. No cookies are set. No tracking scripts run on this site.
Third-party services
None. The app contains no third-party analytics SDK, crash reporting service, advertising network, or social login framework. The website contains no analytics tags, tracking pixels, or embedded third-party scripts.
The only external service involved in the normal operation of Spectra is Apple's App Store (for purchase and download) and iCloud (for sync, if enabled by you). Both are governed by Apple's privacy policy.
In-app purchases
Spectra Pro is a one-time purchase processed entirely through Apple's App Store. We never receive your payment information. Apple's standard purchase receipts are validated on-device. No subscription management server is involved.
Children's privacy
Spectra does not collect any data from any user, including children. The app is appropriate for all ages.
Contact
Questions about this policy? Write to a real human:
We aim to respond within 2 business days.
Version history
- — Initial policy, published alongside Spectra 1.0 launch.