Privacy Policy - Pixel Royale Watch Face

Effective date: 2026-10-03

This Privacy Policy applies to 'Pixel Royale: Retro Watch' (package name: 'com.pixelpond.watchface.pixelroyale'), developed by Pixelpond. That Google Play package has two parts: the watch face, and a small phone app, “Setup”, which has its own section below. The watch face runs only on your watch. It does not collect, store, transmit, or share any personal user data, usage analytics, location data, sensor data, or device identifiers with the developer or any third parties.

The watch face reads the following information only to render itself:

• Current system time, day, and date to render the analog hands, the calendar and the sky window.
• Device battery percentage to display the mechanical-style power reserve dial.
• Your configuration selection (Royale, Rouge, Crest or Venom mode) to render your chosen look.
• Ambient and active mode state so the watch face can render the correct display mode.

Because the watch face is built using the declarative Watch Face Format, it contains no executable code (android:hasCode="false") and requests no permissions of its own: Wear OS supplies the values above, and all rendering is handled locally on your watch by the Wear OS operating system. The watch face sends nothing to Pixelpond, and it contains no advertisements, in-app purchases, analytics or crash reporting.

Phone Setup app. Everything above describes the watch face. The same Google Play package also installs a small phone app, “Setup”, that helps you install and apply the face, and Setup does use the internet. It has no ads, no analytics or crash reporting of its own, and no Pixelpond account. Here is what it does:

• Update check. It downloads our public list of current versions from the Pixelpond website. The request carries no account, settings or watch details. Like any web request, it shows our host (Vercel) your IP address and standard request details, which include your Android version and phone model. Our hosting configuration retains runtime logs and request observability data for 30 days. Request records can include your IP address, the country inferred from it, your user agent, the requested path and the response result. We use hosting records to monitor service health, diagnose problems and protect the service.
• No purchase check. Pixel Royale is bought through Google Play, which handles the payment. This version of Setup never contacts our purchase checker and sends no purchase information to Pixelpond. If a later version adds a purchase check, we will update this policy before that version is released.
• Google Play. It asks Google Play whether a newer Setup is available, and opens the face’s Play listing, on your phone or on your watch, when you tap Install or Update.
• Your watch. It uses Google Play services to find your connected watch and show its name and, if the Pixelpond app is installed, asks it which version of the face your watch has. That stays between your phone and watch and is not sent to us.
• The Pixelpond app. Setup checks whether the Pixelpond app is installed on your phone, and reads the same public list of versions to see whether the app is on Google Play. It keeps the latest answer on your phone and relies on it for up to seven days. Links it opens to pixelpond.au or to the Pixelpond app’s Play listing carry fixed tags that name this face and the button you tapped, and nothing about you or your device.
• On your phone. Setup remembers your setup step and your Less motion choice, and does not back them up. The Help email button opens a draft in your own email app; nothing is attached or sent until you send it. Where Setup shows a Privacy policy button, it opens this page in your browser.

If you have questions, contact: support@pixelpond.au

This policy may be updated. The latest version will live at the URL provided in the Google Play listing.