Charmed Privacy Policy
Last updated: November 8, 2026
Charmed (“the App”) is operated by Formio Labs Inc. (“we”, “us”, “our”). The App lets you collect digital charms, decorate physical products with them, and order those products printed and shipped to you. This policy explains what information we collect, how we use it, and the choices you have.
If you have any questions, contact us at charlie@formiolabs.com.
Information We Collect
Information you provide when you place an order. To fulfill and ship a physical product, we collect the shipping details you enter in the order form: your full name, email address, and shipping address (street, city, province or state, and postal or ZIP code). We ship to Canada and the United States, and the App also keeps the shipping country you choose so it can show the products and prices for where you live. At checkout you can optionally tell us how you heard about Charmed. We store your answer with your order and use it only to understand which channels bring us customers.
The design you create. The product design you assemble in the App (the arrangement of charms on your selected product) is saved as an image so it can be printed on your order.
Payment information. Payments are processed by our payment provider, Stripe. Your card number and payment credentials are entered on Stripe’s secure checkout and are handled by Stripe — we never receive or store your full card details. We receive a confirmation of payment and limited transaction details (such as amount, currency, and tax) to record your order.
In-app purchases. Coin packs are sold through Apple’s in-app purchase system. Apple processes the transaction, and we never receive or store your payment details. When a purchase completes, the App sends Apple’s signed transaction receipt to our server so we can verify it, and we store a purchase record containing Apple’s transaction identifier, the product you bought, the number of coins granted, the store environment, and a timestamp. We use that record to grant your coins, to prevent the same purchase from being redeemed more than once, and to resolve support questions about a purchase.
Usage and analytics data. We use Google Firebase Analytics to understand how the App is used and to improve it. This includes app interactions (such as screens viewed and actions taken), your device type and operating system version, app version, a randomly generated identifier assigned to your app installation, and the shipping country you choose when you select or order a product. When you make an in-app purchase, we also send purchase details to Firebase Analytics: the product purchased, its price and currency, and Apple’s transaction identifier. Analytics may infer approximate (city/region-level) location from your IP address. We do not attach your name, email, or address to analytics data.
Advertising measurement. To understand whether our ads work, the App includes a measurement tool from Singular. It collects an identifier Apple assigns to the App on your device (which is not shared with other companies’ apps), your device type and operating system version, the App version, your IP address (used to infer approximate location), when the App was installed and opened, and a small set of in-app events: claiming free coins, your first spin, completing and placing your first charm, submitting a design, opening checkout, and completed purchases, including their amount and currency. We share this event information with the advertising platforms we run campaigns on, so they can report on and improve our ads. We do not attach your name, email, or address to it, we do not ask for permission to track you, we do not access your device’s advertising identifier, and we do not use fingerprinting. Ad results are measured through privacy-preserving methods: Apple’s SKAdNetwork and AdAttributionKit, and Meta’s Aggregated Event Measurement, which report on campaigns in aggregate. Test purchases made during development are not sent.
Anonymous account identifier. When you first launch the App, we create an anonymous account through Firebase Authentication. This is an anonymous identifier used to securely associate your orders and uploaded designs with your installation. It is not linked to a name, email, or social login unless you choose to sign in to such an account in the future.
How We Use Your Information
- To create, process, fulfill, and ship your product orders.
- To process payments and calculate applicable sales tax.
- To verify in-app purchases with Apple and grant the coins you bought.
- To send you transactional emails, such as an order or payment confirmation.
- To operate, maintain, secure, and improve the App.
- To measure how well our advertising works.
- To detect, prevent, and address fraud, abuse, or technical issues.
- To comply with our legal, accounting, and tax-reporting obligations.
How We Share Your Information
We share information only with the service providers needed to run the App and fulfill your orders, and with the advertising platforms we use, as described below. We do not sell your personal information. We do not track you across other companies’ apps and websites, and we do not use your information to show you ads.
- Apple — in-app purchase processing. Apple handles the payment and card details for coin purchases and provides us with a signed record of the transaction (privacy policy).
- Stripe — payment processing and sales-tax calculation. We share your name, email address, and shipping address so Stripe can calculate the tax for where your order ships (privacy policy).
- Google Firebase — app backend, order storage, design-image storage, anonymous authentication, and analytics (privacy & security).
- Printful — print-on-demand production and shipping. We share the shipping name, address, and the design image needed to produce and deliver your order (privacy policy).
- Singular — advertising measurement. Receives the device and in-app event information described above, and passes it to the advertising platforms we use (privacy policy).
- Advertising platforms — currently Meta (Facebook and Instagram). They receive install and in-app event information through Singular, not your name, email, or address, so they can report on and improve our ads (Meta privacy policy). We will update this list when we start advertising with another platform.
- Resend — sending transactional order and confirmation emails (privacy policy).
We may also disclose information if required by law or to protect our rights, users, or the public.
Data Retention
We retain order and transaction records (including shipping details) for as long as needed to fulfill the order and to meet our legal, tax, and accounting obligations. Design images are retained to support order fulfillment and reprints. Analytics data is retained according to our analytics provider’s default retention settings. You may request deletion of your personal information as described below.
Your Choices and Rights
Subject to applicable law (including Canada’s Personal Information Protection and Electronic Documents Act, PIPEDA, and the privacy laws of your U.S. state where they apply), you may request access to, correction of, or deletion of the personal information we hold about you. To make a request, email us at charlie@formiolabs.com. We will respond within a reasonable time.
Children’s Privacy
Charmed is not directed to children, and we do not knowingly collect personal information from children under the age of 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
International Data Transfers
We use service providers (including Stripe, Google, Printful, Resend, and Singular) and advertising platforms (including Meta) that may store and process information on servers located outside your province, state, or country, including in the United States. Formio Labs is based in Canada. By using the App, you understand that your information may be transferred to and processed in those locations.
Security
We use industry-standard safeguards, including encryption in transit (HTTPS/TLS) and access-controlled storage, to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
Changes to This Policy
We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be reflected here.
Contact Us
Formio Labs Inc.
Email: charlie@formiolabs.com