Privacy policy
Effective 2 October 2026
In short. Our watch faces collect nothing. The Tempus Arcanum app collects only what we need to run it and make it better: which faces are popular, crash reports, and - when you buy Premium - a check with Google Play that your purchase is active. No accounts, no advertising, no advertising ID, and we never sell or share your data for ads.
This policy covers the Tempus Arcanum app for phones and watches (com.tempusarcanum.faces) and every
watch face that Bicher09 publishes on Google Play under the name Tempus Arcanum, now and in future. "We" means Bicher09,
the developer named on Google Play.
1. The watch faces
Our watch faces are made in Watch Face Format, a design format from Google: each one only describes the dial - its pictures, text and animations - and your watch's own system software draws it. They contain no program code, no advertising, no analytics and no trackers, and they request no permissions, internet access included.
To draw the dial, your watch passes the face information already on your watch: the time and date, the battery level, your step count and goal, the number of unread notifications (never their content) and, on some faces, the weather, the moon's phase or the watch's tilt. If you add complications, they show what the apps you choose for them provide (for example your heart rate or your next event); that data goes from those apps to the dial, not to us. All of this is used only to draw the dial while it is shown. Nothing is stored or sent to us or to anyone else. The choices you make in the face editor stay on your watch. A few faces can show a photo of your own: you choose it on your phone, Wear OS copies it to your watch, and we never see it.
2. The Tempus Arcanum app
The app shows the collection on your phone and installs the faces you choose on your watch. You do not create an account, and we do not ask for your name, e-mail, contacts or location.
What the app sends, and why
| Data | Why | Who handles it |
|---|---|---|
| Usage events: faces viewed, sent to the watch, saved or shared, screens opened, searches (only their length, never the words), the Premium page shown, purchases and purchase errors, update and review prompts, notifications opened, where the install came from (for example a campaign link), and how often and how long the app is used. Each with a random app-instance ID, the device model, Android version, language and approximate location (country, region or city, which Google derives from the IP address). | To see which faces people like (the "popular this week" lists) and where the app needs work. | Google Firebase Analytics |
| Crash reports: the error, the place in our code, the device model and Android version, the device's state at the time (such as free memory and storage), the last usage events before the crash, and a random installation ID. | To find and fix crashes. | Google Firebase Crashlytics |
| Your Google Play purchase token for Premium, and your device's IP address when it downloads a face or checks your subscription. | To confirm with Google Play that your Premium purchase is active before a Premium face is delivered, to show when your subscription renews or ends, and to stop abuse (too many requests from one address). | Our download service on Cloudflare, which asks Google Play |
| Requests for the catalog, pictures and videos (your IP address and the file asked for). | To show the collection. | Cloudflare (our content network) |
The app does not use the advertising ID, shows no ads, and has no advertising or marketing SDKs. Analytics are switched off in test versions of the app.
You can switch it off. In the app, Profile → About → Share usage statistics stops both the usage events and the crash reports, and deletes the analytics ID kept on your phone. The download service and Google Play's purchase check keep working, since Premium needs them.
What stays on your devices
Your favourites, the faces you have seen, your notification settings and the record of your Premium status are kept in the app's storage on your phone. If Android backup is on, your favourites, history and settings are part of your phone's backup to your Google account, like other apps' data; the Premium record is not. Faces travel from your phone to your watch over the Wear OS connection between them, not through our servers. The notifications about new faces and seasonal collections are decided on your phone from our public catalog; we do not run a push server. Through the usage events above we learn only that a notification was opened, not by whom.
Purchases
Payments are handled by Google Play under the Google Privacy Policy; we never see your card or payment details. Google Play gives us order information (such as the product, price, country and order number), which we use only for accounting, taxes and refunds. Our download service keeps a purchase check's result for at most 15 minutes, and your subscription's dates for at most 30 minutes, filed under a one-way hash of the token, not the token itself.
Google Play features
The app uses Google Play's in-app updates and in-app reviews. If you rate the app from inside it, Google handles the review exactly as on the Play Store; we see only what is published on our store page.
3. How long we keep it
- Analytics events: deleted automatically by Google after 14 months at most (anonymous totals, such as how many times a face was viewed, can stay longer).
- Crash reports: deleted automatically by Google after 90 days.
- Purchase checks: up to 15 minutes, subscription dates up to 30 minutes, in our download service's cache. IP addresses: used only to count requests per address for one minute, not stored by us; Cloudflare's own short-lived security logs aside.
- E-mails to support: as long as needed to answer you, then deleted on request.
4. Legal bases and your rights
If you are in the European Economic Area, the United Kingdom or Switzerland: we use usage and crash data on the basis of our legitimate interest in running and improving the app, and purchase data to provide the Premium you bought. You have the right to access, correct, delete or object to the use of your data, and to complain to your data protection authority. To object to usage statistics and crash reports, switch off Share usage statistics in the app (see above).
Because the app has no accounts, the data above is not linked to your name, and we cannot look it up by name or e-mail. Switching off Share usage statistics, uninstalling the app or clearing its data ends the collection, and a reinstall starts with new random IDs; the old data is then deleted automatically within the periods above. For any request, write to us. California residents: we do not sell or share personal information for cross-context behavioural advertising.
5. Where the data goes
Google (Firebase, Google Play) and Cloudflare process data for us as service providers, mainly in the United States and the European Union, under their data processing terms, the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses. We do not share data with anyone else, except where the law requires it.
6. Children
The app and the watch faces are not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has sent us data, write to us and we will delete it.
7. Security
All connections from the app use HTTPS. Purchase tokens are sent only to our own download service and never logged.
8. Contact
Developer: Bicher09. Questions about privacy: support@tempusarcanum.com.
9. Changes
If this policy changes, we will update this page and its date, and for important changes say so in the app.