Privacy Policy — Musée

Effective: 22 July 2026 · Contact: support@vestige.one

The short version

Your learning stays on your device. What you study, write, and say is kept on your phone — it is never uploaded to us, and we could not read it if we wanted to. Musée has no accounts, no ads, and no ad tracking. One screen — the Patron subscription screen — is delivered by a paywall service (Superwall), which collects basic device and purchase information to show and measure that screen; never your learning, and never for ad tracking. We never sell your personal information.

What the app processes (on your device only)

• Your learning progress: which artworks and French phrases you have studied, your review history, streaks, ranks, and settings.
• The French you write and say is used to teach you, on your phone. It is graded on your device against the lesson's own text and is never sent to us.

Your iCloud backup (yours, not ours)

If you are signed in to iCloud, Musée keeps one backup copy of your museum in your own private iCloud, under your Apple ID, so a new phone can pick up where you left off. It is stored in your personal iCloud space, managed and encrypted by Apple — we have no access to it and no way to read it. Erasing your data inside the app also deletes this backup. If you are not signed in to iCloud, nothing is backed up.

What leaves your device

• Not your learning. The app fetches painting images and content packs from our content server (a content-delivery network) as plain, anonymous file downloads, and caches them on your device for offline reuse. These requests contain no account, no identifier we assign, and none of your learning data — like any web download, the server sees only the standard connection metadata (e.g. IP address) needed to deliver the file.
• Purchases, if any, are handled by Apple's App Store (StoreKit). We never see your payment details. Apple's privacy policy governs that processing.
• The subscription screen is delivered by Superwall (see the next section).

The paywall service, ads, and analytics

• The Patron subscription screen is powered by Superwall, a paywall service. To show that screen and measure whether it works, Superwall collects device information (a device identifier, model, OS version), purchase and subscription status, usage counts for the paywall itself, an approximate region derived from your IP address, and a few progress markers we set — your level band, rank, streak length and collection size — so the screen can be relevant to where you are. It does not receive the French you write, your collection, or anything you learn — the learning path never touches it. Superwall states this data is not used to track you across other companies' apps, and no advertising identifier (IDFA) is used — so iOS will never show you an ad-tracking permission prompt for it. Superwall's own privacy policy: https://superwall.com/privacy
• Musée contains no advertising — no ad networks, no advertising identifier. If ads are ever added, this policy will be updated first with a new effective date, and iOS will ask your permission before any advertising identifier is used.
• We do not sell personal information and we do not share it with data brokers.

Your voice

The spoken-French check uses Apple's on-device speech recognition. Your voice never leaves your device, and Musée keeps no recordings.

Your controls

• Export all your data, or erase everything — including the iCloud backup above — at any time in Settings → Your data. Your learning lives on your device, so erasing it there erases it.
• Grant or revoke Microphone, Speech Recognition and Photos access at any time in iOS Settings.
• Your learning data has one copy: yours. We operate no server that holds it. For the paywall data described above, write to the address below and we will pass a deletion request to Superwall on your behalf, or answer any other question about your data.

Permissions we request and why

• Microphone + Speech Recognition — to hear you say the French aloud and check it on this device. Only when you use the spoken check.
• Photo Library (add only) — to save a masterpiece to your photos when you ask. We never read your library.
• Notifications — gentle reminders about your streak and words to tend. Only if you enable them. (Mirrors the Info.plist purpose strings — update both together.)

Children

Musée is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes

Material changes are announced in the app's release notes and on this page with a new effective date.

No warranty

Musée and its content — translations, descriptions, pronunciations, and audio — are provided "as is," without warranty of any kind, including any warranty of accuracy or fitness for a particular purpose. See the Terms of Use for the full disclaimer of warranties and the limitation of liability.

Contact

support@vestige.one · Tyson Pham, Halifax, Nova Scotia, Canada