Privacy Policy

Connection Canvas · Last updated: August 17, 2026

This policy describes how the iOS, iPadOS, and Android app Connection Canvas (“the App”) handles information. The App is an unofficial assistive tool and is not affiliated with The New York Times.

Summary

• No ads and no third-party analytics or tracking SDKs in the App as shipped.
• Your puzzle work is stored on your device. Optional private iCloud sync (iOS) uses your Apple ID. Optional Google Drive app-data sync (Android) uses your Google account, not the developer’s.
• Photos are used only when you choose photo OCR import or save a screenshot of your grid.
• Optional tips are processed by Apple as In-App Purchases; tips do not unlock features.
• You can delete individual History saves (by calendar day or undated session) from the App.
• We do not sell your personal information.

Information the App stores

Depending on how you use the App, it may store on your device (and, if you enable sync, in your private iCloud/CloudKit data):

• History sessions — grid faces you loaded or entered (words, emoji, or image data), optional image-day alt labels when present, your color marks, card order, hypotheses text, notepad text, memory snapshots, timestamps, and optional puzzle date / source labels.
• Settings — preferences such as appearance, Auto-save History, sort priority, high-contrast cards, and whether History iCloud sync is enabled (stored via system UserDefaults / app settings).
• Private puzzle fingerprints (when enabled in the build) — a hash of a board’s faces linked to a date you already loaded from the NYT endpoint, used only to suggest a match for later OCR/manual import on your account. This is not a public database.

Google Drive app data (Android)

If you turn on Sync History with Google on Android and sign in, History may be stored in your Google account’s hidden Drive app data folder so you can resume on another Android device using the same account. The App requests only the drive.appdata scope. It cannot see, list, or change your regular Drive files or Photos. The developer cannot open other users’ app-data folders. This is not a public Drive folder and does not sync with iPhone / iCloud. You can turn sync off in Settings; local History stays on the device. You can also revoke access in your Google Account permissions.

Connection Canvas’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

iCloud

If you turn on Sync History with iCloud and are signed into iCloud on your device, History (and related private app data in the same store) may sync through Apple’s private CloudKit / iCloud for your Apple ID across your devices. Apple’s handling of iCloud data is governed by Apple’s privacy policy and your Apple ID settings. You can turn sync off in the App’s Settings (restart may be required) or manage iCloud for the App in iOS Settings.

Photos

• Photo Library (read) — only if you pick an existing photo for on-device OCR import of a 4×4 grid.
• Photo Library (add) — only if you choose to save a screenshot of your marked grid to Photos.

The App does not use the device camera hardware for capture. OCR and image processing run on device. The App does not upload your photos to a developer-operated server.

Network

If you choose to load a dated board, the App may request board faces from a publicly available New York Times JSON URL over HTTPS. That request is made from your device. Category titles/solutions are stripped and not intended to be stored as answers. On image-based puzzle days, card images may be downloaded; image alt text is stored only as optional metadata and is hidden by default (you may turn on “Alt text” in the app if you want to see it). You can avoid network board load by using manual entry, samples, or photo OCR instead.

No developer analytics endpoints are used by the App as described in this policy.

Purchases (Tip Jar)

The App offers optional consumable tips (In-App Purchases: small, medium, and large). Payment is processed by Apple through StoreKit. The developer does not receive your full payment card number. Tips are voluntary thank-yous; they do not unlock features, remove limits, or change App functionality. Apple’s App Store and purchase privacy terms apply.

Children

The App is not directed at children under 13. Do not provide personal information of children through the App.

Data retention and deletion

• Delete a single day’s saved work from Load & History: long-press a purple-ring day on the calendar and confirm.
• Delete undated sessions (manual, photo OCR, saved sample practice) under Other sessions (swipe to delete).
• Delete the App to remove remaining on-device data.
• For iCloud-synced data, also remove the App’s iCloud data via device Settings → [Your Name] → iCloud, or by disabling sync and clearing History, as applicable.

Your choices

• Decline Photos permissions; photo OCR and/or save-to-Photos simply won’t run.
• Keep iCloud History sync off for device-only storage.
• Turn off Auto-save History in Settings if you prefer only manual Save.
• Use manual entry or samples if you prefer not to fetch a board over the network.
• Leave Alt text off (default) so image-day labels stay hidden.
• Skip the Tip Jar entirely; the App works fully without tips.

Third parties

The New York Times is a third party unrelated to this App. Use of any NYT services or content is subject to their terms and policies. Apple provides the App Store, iOS, iCloud, and In-App Purchase processing; their terms and privacy policies apply to those services. Google provides Google Sign-In and Drive app data when you opt in on Android; Google’s terms and privacy policies apply to those services.

Changes

This policy may be updated when the App’s data practices change. The “Last updated” date at the top will change accordingly.

Contact

Questions about privacy: rodrcode@gmail.com

Home · Support