Privacy Policy
Last updated 26 October 2026
Wallup (“the app”) is made by AIPine Studio (“we”, “us”). This policy explains what personal data the app and its servers handle, why, who else receives it, how long it is kept and what you can do about it. If anything here is unclear, write to wallup.aipine.studio@gmail.com.
1. Data we collect
Your account
When you sign in with Google we receive your Google account ID, your name, your email address and the address of your profile photo. None of these is ever shown to other users. Your public nickname is generated (for example @writer_3f9a1c) and is not taken from your Google account.
Photos and what you publish
The photo you take of a wall, the version of it with your phrase painted on, the phrase itself, the lettering style you chose and the time you published.
Location
- Where you publish. When you publish, the app sends the precise GPS position of your phone. It is stored with the artwork and shown on the public map, and we look up the country it is in.
- Where you are, while you use the app. To show what is near you, the app sends your current position with the request. The server uses it to answer that request and does not store it with your account; it may appear in short-lived server logs (see below).
- The app keeps your last known position on your phone so the map opens where you are.
The app only uses location while it is open. You can refuse location access, but then you cannot publish and the “nearby” features show the whole world instead.
Activity in the app
The artworks you painted, the tags you started and how far they spread, your Ups balance and its history, your position in the rankings, and when you last saw the “what happened while you were away” summary.
Purchases
If you subscribe, Google Play or the App Store gives us the purchase token, the product, and the status of the subscription (start, expiry, renewals, cancellations and refunds). We never receive your card or other payment details.
Reports and blocks
Reports you send about artworks or people (the reason and any text you add), and the people you block.
Technical data
Our servers log requests — IP address, time, the address requested (including its parameters, which can contain a position), and the result — to keep the service secure and to fix problems.
On your phone
Your session token (in the Android Keystore-backed encrypted storage or the iOS Keychain), your settings, your chosen map style and your last known position. Uninstalling the app removes them.
2. Why we use it
| Purpose | Data | Legal basis |
|---|---|---|
| Running Wallup: your account, publishing, the map, feeds, rankings, Ups, share videos | Account, photos, phrases, location, activity | Performing our contract with you |
| Subscriptions | Purchases, account | Performing our contract with you; keeping accounting records required by law |
| Keeping people safe: handling reports, blocks, removing content, banning accounts that break the rules | Reports, blocks, published content, account | Our legitimate interest in a safe community; legal obligations |
| Security and preventing abuse and fraud | Technical data, purchases, the Google account ID of banned accounts | Our legitimate interest |
3. What is public
Everything you publish is visible to everyone who uses Wallup: the painted photo, the phrase, the exact place on the map, the country and the time. Other users can share your published artworks outside the app, for example as a short video of the map flying to your wall.
Your walls are anonymous. Other users are not shown who painted a wall, or that two walls were painted by the same person, and share videos carry no name. Your generated nickname appears only in the rankings, with your counts and without any link to your walls. If you turn off Post anonymously in Settings, your nickname appears under your walls and in share videos; you can turn it back on at any time.
Please do not publish photos in which people can be recognised, or anything that reveals where someone lives, without their permission.
4. Who else receives data
We use these services to run Wallup. They receive only what they need for the task:
- Google — Gemini API. Your uploaded photo is sent to check that it shows a wall outdoors; the photo, your phrase and the style are sent to paint the lettering; your phrase is sent to find tags that say the same thing.
- Google — Sign-In. To sign you in.
- Google — Maps SDK. The map in the app is loaded from Google, which receives your device’s IP address and the area of the map you look at.
- OpenStreetMap Foundation — Nominatim. The position of an artwork, to find the country (and, for share videos, the city) it is in.
- Google Play and the Apple App Store. To sell and manage subscriptions.
- Our hosting provider, which runs the servers and the database Wallup uses.
Google’s handling of data is described in the Google Privacy Policy; the OpenStreetMap Foundation’s in the OSMF Privacy Policy. We may also disclose data when the law requires it, to protect people from harm, or as part of a sale or merger of the business, in which case this policy continues to apply.
Some of these providers process data outside your country, including in the United States. Where the law requires it, the transfer is covered by safeguards such as the European Commission’s standard contractual clauses.
5. How long we keep it
- Your account, photos, artworks and activity — until you delete your account, or until we remove content or an account for breaking the rules. Photos you upload but never publish are kept with your account and deleted with it.
- Share videos — deleted from our servers about an hour after they are made.
- Server logs — a few days, at most 30 days.
- Backups — at most 30 days, after which deleted data is gone from them too.
- Purchase records from Google Play and the App Store — as long as accounting and tax law require, without being linked to a deleted account.
- Reports — kept to document what was decided; the reporter is no longer linked to a report once they delete their account.
- Banned accounts — the Google account ID is kept to stop the same account from signing up again.
6. Deleting your account
In the app: Profile → Settings → Delete account. Deletion is immediate and cannot be undone. It removes your Google sign-in link, name, email and photo, your sessions, every photo you uploaded, every artwork you published, your Ups and rankings, the people you blocked, and the link between you and any reports you sent.
What stays: other people’s artworks. If someone else painted one of your phrases, their artwork stays on the map and the phrase stays as their tag, without your name on it; Ups other people earned stay theirs.
Deleting your account does not cancel a subscription — Google Play or the App Store bills you, not us. Cancel it in the store first.
Without the app, see Delete your account.
7. Your rights
Depending on where you live, you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable format. Write to wallup.aipine.studio@gmail.com from the email address of the Google account you sign in with; we answer within 30 days. You can also complain to your data protection authority.
8. Children
Wallup is not for children. You must be at least 13 years old, and older if the law of your country sets a higher age for using services like this without a parent’s consent. If we learn that a child under 13 has an account, we delete it. See also our Child Safety Standards.
9. Security
All traffic between the app and our servers is encrypted (HTTPS). Session tokens are stored on the server only as one-way hashes, and on your phone in the system’s encrypted storage. Access to the servers is restricted to the people who run Wallup. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.
10. Changes
When this policy changes we update the date at the top. If a change matters to how your data is used, we will tell you in the app before it takes effect.
11. Contact
AIPine Studio · wallup.aipine.studio@gmail.com