App Privacy Policy
Effective date: 8 October 2026
Applies to: every mobile app published by Willem Van Zyl t/a “CLC Agency” on the Apple App Store and Google Play, including Beepline: Shot & Drill Timer, Bushwire and Redacta, unless an app links to its own separate policy. LastBar and Ephemeros have their own policies, at https://lastbar.online/privacy and https://ephemeros.app/privacy.
This page is at https://clc.agency/app-privacy-policy.
The short version
- Our apps work on your device. What you create in them stays on your device unless you choose to export, share or back it up.
- We do not run accounts or servers, and we do not sell personal data. With some exceptions, our apps contain no analytics or advertising software and send us nothing. The exceptions are Beepline, LastBar, and Redacta, which tell Meta (Facebook) that it was installed and opened so that we can see whether our adverts work. Your photos and videos are never part of that, and you can turn it off (section 7). The free versions of Beepline and Redacta also show one small banner advertisement, served by Google AdMob and never personalised to you (section 7A); the one-off upgrade removes it. Our website uses Google Analytics.
- Our apps talk to Apple or Google for purchases and for the store’s own rating card, and some of them to RevenueCat, which confirms purchases on our behalf. Bushwire also talks to other phones running Bushwire nearby, over Bluetooth and, if you turn it on, local wifi; that is what it is for.
- Device permissions (microphone, camera, photos, location, Bluetooth and so on) are used only for the feature you are using. Nothing they give access to is uploaded to us; where an app sends something (a voice note, a photo, a location pin), it goes only to the people you send it to.
- After some weeks of use an app may ask Google Play (on Android) or the App Store (on iPhone) to show its own “rate this app” card inside the app. That card belongs to the store: Google or Apple draws it and receives whatever you enter in it, under their own privacy policies. The app never learns whether the card appeared or what you answered, and never asks you anything of its own first.
1. Who we are
CLC Agency (“we”, “us”) develops and publishes the apps covered by this policy. Contact details are in section 11.
2. Data we do not collect
We do not collect names, email addresses, phone numbers, precise location, contacts, photos, videos, audio or crash reports. We have no user accounts and no server of our own that your data is sent to. Apart from the apps mentioned above, our apps contain no advertising SDKs and no analytics SDKs, and collect no usage data or advertising identifiers. These apps contain Meta’s app-events SDK for ad measurement, and their free versions contain Google’s AdMob SDK, which serves one banner advertisement. What each sends, and how to stop it, is set out in sections 7 and 7A.
“Collect” means sent to us. Some apps use such data on your device for a feature you have chosen (Bushwire uses your location for a location pin you send, some apps read the date and location stored inside a photo for an optional stamp, Beepline listens to the microphone for shots). That use happens on the phone, is described in section 5, and none of it reaches us.
3. Data that stays on your device
Everything you create in an app (for example timer sessions, drill definitions, edited photos or videos, messages, contacts, lists, notebooks and settings) is stored only in the app’s private storage on your device. Bushwire keeps its data in an encrypted database whose key never leaves the phone. You can delete it at any time by deleting it inside the app or by uninstalling the app.
Some apps let you export or share your data (for example as CSV, JSON, image or video files) through your device’s share sheet or file picker. When you do this, the data goes only where you send it. Any service you choose as the destination (for example Google Drive, iCloud Drive, email or a messaging app) handles that data under its own privacy policy.
Messages that travel between phones (Bushwire). Bushwire has no server. A message you send moves from phone to phone over Bluetooth, and over local wifi if you turn that on, hopping through nearby phones running Bushwire until it reaches the person it is for or expires. The phones in the middle relay it without being able to read it: private and group messages are end-to-end encrypted, so a relaying phone sees only that a message of some size passed through. Open Mesh is the exception, on purpose: it is a public channel, and anything you post there can be read by everyone nearby, together with the username you chose. Your phone relays messages for others in the same way. Phones nearby can tell that Bushwire is running on yours, and with local wifi turned on, other devices on that network can see your phone’s local IP address. A message that has been delivered is on the other person’s phone and cannot be recalled by you, by the app or by us.
4. This website
This policy covers our apps listed above. Our website uses Google Analytics to count visits and see which pages people read. Google Analytics sets cookies and receives your IP address, the pages you view, and basic device and browser information. We use it only to understand how the site is being found and used – not to identify you, and never to advertise to you. Our apps do not use Google Analytics. The only measurement in any of our apps is the ad measurement described in section 7, and the only advertising is the banner described in section 7A. You can opt out with Google’s browser add-on: https://tools.google.com/dlpage/gaoptout. See Google’s privacy policy: https://policies.google.com/privacy.
5. Device permissions
An app only asks for a permission when a feature needs it, and only uses it for that feature.
Microphone: Detecting sounds in real time, for example shots or clicks in a shot timer, or voice notes in a messaging app. Where an app records audio (e.g. Bushwire voice notes) the recording is stored encrypted on the phone and sent only to the people you send it to.
Camera, photos and videos: Selecting, editing or saving media, for example redacting faces in a photo, scanning a QR code, or sending a photo in a chat. Media is processed on the device and is never uploaded to us. Redacta reads the date and location stored inside a photo to offer an optional stamp and removes them from every file it saves. Bushwire re-encodes a photo before sending it, which removes its location metadata, and sends it only to the people you send it to.
Location: Bushwire uses your location only when you choose to send a location pin (it travels like any other message, to the people you send it to) or ask to join a geofenced group (your claimed position goes over a direct Bluetooth link to one member’s phone). On Android 11 and older the location permission is also required by the system for Bluetooth scanning. Bushwire does not track your location in the background and never sends it to us.
Nearby devices (Bluetooth): Bushwire uses Bluetooth to find and exchange messages with nearby phones. That is the whole app; see section 3.
Notifications: New-message and relay notices. Bushwire’s notifications never show message content unless you turn previews on in its settings.
Biometrics: An optional app lock, checked by your phone; nothing about your face or fingerprint reaches the app or us.
Network (Android `INTERNET` permission): Required by the purchase handling described in section 6 and, in Bushwire, by Android for local wifi connections between phones on the same network. Some of our apps also use it for the ad measurement described in section 7, for fetching the banner advertisement described in section 7A, and to check that they are online before asking for a rating. Our apps make no other internet requests of their own. The store’s rating card (section 6) is drawn and sent by the Google Play or App Store app on your phone, not by ours.
Vibration, keep-screen-awake: Feedback and keeping the display on during use, no data involved.
You can withdraw a permission at any time in your device settings. The related feature will stop working until you grant it again.
6. In-app purchases and the store’s rating card
Some apps offer a one-off purchase or subscription that unlocks additional features. Payment is handled entirely by Apple (App Store) or Google (Google Play). We never see your payment card or bank details.
Bushwire confirms a purchase with Google Play or the App Store directly and uses no purchase-management service; the store keeps your purchase against your Google account or Apple Account and restores it on a new phone signed in to the same account.
To confirm what you have bought and to unlock it across your devices, some of our apps use RevenueCat (RevenueCat, Inc., https://www.revenuecat.com), a purchase-management service. RevenueCat receives the purchase receipt issued by Apple or Google, a random anonymous identifier generated by the app for your installation, and basic technical information such as your device platform, app version and IP address (used for the connection and for fraud prevention). RevenueCat does not receive your name, email address or any content you create in the app. RevenueCat’s own policy is at https://www.revenuecat.com/privacy.
In some apps, if ad measurement is on (section 7), RevenueCat also receives your device’s advertising ID where one is available and the anonymous identifier created by Meta’s software in the app. RevenueCat uses these to tell Meta, from its own servers, when a free trial starts or a subscription / upgrade is bought, renewed or cancelled. The app itself never sends purchase information to Meta.
You can restore a previous purchase on a new device with the “Restore purchases” button inside the app. Refund requests are handled by Apple or Google under their store terms.
The store’s rating card. After some weeks of use an app may ask Google Play (on Android) or the App Store (on iPhone) to show its own “rate this app” card inside the app, a few times at most. That card belongs to the store: Google or Apple draws it and receives whatever you enter in it, under their own privacy policies (https://policies.google.com/privacy, https://www.apple.com/legal/privacy/). The app never learns whether the card appeared or what you answered, and never asks you anything of its own first. Nothing you enter there reaches us except as a public store review, the way any review does.
7. Ad Measurement in some apps (Meta)
This section applies to some apps only.
What it is for. Some of our apps are advertised on Facebook and Instagram. To tell which adverts lead to installs, they include the app-events software provided by Meta Platforms, Inc. (Meta Platforms Ireland Limited for people in Europe).
What is sent to Meta.
– That the app was installed, and each time it is opened.
– On Android, your device’s advertising ID, if you have one. On iPhone, the app does not ask for permission to track you, so the advertising identifier is not available to it; installs are counted through Apple’s SKAdNetwork, which reports them to Meta without identifying you or your device.
– An anonymous identifier that Meta’s software creates for this installation of the app.
– Basic technical information: device model, operating system version, app version, language and time zone.
– Your IP address, as part of the connection. Meta may derive an approximate location (country or city) from it.
– Purchase events (a free trial starting, a subscription being bought, renewed or cancelled, or an upgrade being bought). These are sent to Meta by RevenueCat from its servers, not by the app (section 6).
What is never sent. Your photos and videos, the people, faces, vehicles or text found in them, the regions you blur or black out, your stamps, and any date or location stored inside your media. Beepline and Redacta still do all of their work on your device, and your media is never uploaded to us, to Meta or to anyone else.
How it is used. We use it only to see, in total, how many installs, subscriptions, and upgrades our adverts produce. We do not receive your advertising ID ourselves and cannot identify you from the reports we see. Meta handles what it receives under its own privacy policy (https://www.facebook.com/privacy/policy) and may use it as that policy describes, including to choose the adverts you see on its services, depending on your Meta settings.
Your choice, and the legal basis. In the European Economic Area, the United Kingdom, Switzerland, Guernsey, Jersey and the Isle of Man, nothing is sent unless you choose “Allow” when some apps ask, and the legal basis is your consent, which you can withdraw at any time. Elsewhere, measurement is on from first launch on the basis of our legitimate interest in knowing whether our advertising works, and you can turn it off. Our apps work out which applies from the region set on your device. It does not use your location, and if it cannot tell, it asks.
How to stop it.
– On Android: Settings → Google → Ads lets you reset or delete your advertising ID.
– In your Meta account: https://www.facebook.com/adpreferences controls the adverts you see, and
https://www.facebook.com/off_facebook_activity lets you view and disconnect activity that apps have sent to Meta.
Retention. We keep no copy of this data. Meta keeps it for as long as its own policy provides, and the reports it shows us are totals. To ask about data already sent, contact us (section 12) or use Meta’s tools above.
7A. Advertising in some apps (Google AdMob)
This section applies to the free versions of Beepline and Redacta only.
What it is. The free version of each of these apps shows one small banner advertisement on a few of its screens, and never while the app’s main function is in use (in Beepline, never while a string is being timed). The banner is served by Google AdMob (Google LLC, or Google Ireland Limited for people in Europe). Buying the app’s one-off upgrade removes it.
Never personalised. Every ad request our apps make is flagged as non-personalised. Google then chooses the advert from the content of the app and coarse information such as country and language, not from a profile of you.
What is sent to Google.
– Your IP address, as part of the connection, from which Google may derive an approximate location.
– Basic technical information: device model, operating system version, app version and language.
– On Android, your device’s advertising ID, if you have one. On iPhone, the app does not ask for permission to track you, so the advertising identifier is not available to it.
– That the advert was shown, and whether it was tapped.
What is never sent. Anything you create or do in the app: no strings, drills, photos, videos, settings or screens visited.
Your choice. In the European Economic Area, the United Kingdom and Switzerland the app shows Google’s consent message the first time an advert could appear. You can decline, and you can change your choice later from the app’s settings (“Ad privacy choices”). Declining means no banner is shown; nothing else in the app changes. Everywhere, buying the upgrade removes the banner, and on Android, Settings → Google → Ads lets you reset or delete your advertising ID.
How Google uses it. We see only aggregate earnings reports and cannot identify you from them. Google handles what it receives under its own privacy policy (https://policies.google.com/privacy) and explains its use of data from apps that use its services at https://support.google.com/admob/answer/6128543.
8. Backups
Where an app offers a backup feature, backups are created only when you ask for one and are saved to a location you pick, such as your own Google Drive or iCloud Drive. We do not have access to that location. Restoring a backup reads the file you select and nothing else.
Separately, your phone’s operating system may include app data in its own device backups (iCloud Backup on iOS, Google backup on Android). Those backups are controlled by you and by Apple or Google under their policies.
Bushwire is the exception: it has no backup feature and opts out of the operating system’s backup on both platforms, because its database is encrypted with a key that never leaves the phone (a backup would be unreadable) and because copying your messages to a cloud is the one thing it exists not to do. If you lose the phone, or wipe the app, its messages, contacts and keys are gone.
9. Children
Our apps are not directed at children under 13, and we do not knowingly collect personal data from children.
Apart from some apps’ ad measurement (section 7) and banner advertising (section 7A), where the ad content rating is capped at “General audiences”, the apps collect no personal data, so there is nothing for us to delete; uninstalling the app removes all app data from the device, and a device backup you have kept is yours to delete.
10. Your rights
We do not hold any personal data about you ourselves, so there is no data for us to access, correct, export or erase on request. What you create is on your device and under your control. If an app’s ad measurement is on, Meta holds the data described in section 7; you can stop it in the app, manage it with Meta’s tools listed there, or contact us and we will help. Where an app shows the banner advertisement (section 7A), Google processes the data described there under its own policy; in the EEA, UK and Switzerland the consent message and the app’s “Ad privacy choices” setting let you decline or change your choice at any time. The one thing nobody can undo is a Bushwire message that has already reached someone else’s phone: it is on their device, not on any server, and neither the app nor we can recall it. If you believe an app is behaving differently from this policy, please contact us (section 12) and we will investigate.
Where local law gives you specific rights (for example under the GDPR in the EU/UK, the CCPA in California or POPIA in South Africa), those rights apply and you may exercise them by contacting us.
11. Changes to this policy
We may update this policy when we release new apps or features. The effective date at the top will change, and material changes will be noted in the app’s store listing or release notes. Continued use of an app after a change means the updated policy applies.
12. Contact
Willem Van Zyl
CLC Agency
Website: https://clc.agency
Email: info@clc.agency
Please mention the name of the app you are asking about.