Privacy policy
Effective August 15, 2026 · Ludyem, Norway
The short version: apps using Ludyem Analytics send us anonymous usage events tied to a random install id — never a name, email, ad identifier, location, or anything else about a person. We can't identify your users, and neither can anyone who asks us to.
Two kinds of people, two kinds of data
End users of apps that embed the Ludyem Analytics SDK, and developers who sign into the dashboard. Almost everything below is about the first group, because that's where analytics data comes from.
What the SDK collects from apps
- A random install id — a UUID generated on the device the first time the app runs. It is not the advertising identifier (IDFA), not tied to an Apple ID, a phone number, or any account, and it means nothing outside that one app.
- Events — named signals like
session.start,install, or custom ones the developer tracks, with a timestamp. - App context — app version, OS name and version, and whether the build came from the App Store or TestFlight.
- Country, optionally — the device's region setting (a locale like "US"), never GPS, never derived from an IP address. Developers can turn it off.
- Metadata — small key-value strings a developer may attach to an event. Our documentation and terms require that these never contain personal data.
What is never collected
- No names, emails, phone numbers, or account identifiers of app users.
- No IDFA, no fingerprinting, no cross-app or cross-site tracking of any kind.
- No GPS or IP-based location.
- No contact lists, photos, health data, or anything else from the device.
About IP addresses
Like every internet service, our infrastructure (Cloudflare and Supabase) sees the IP address of incoming connections and may hold it briefly in operational logs. We never write IP addresses into the analytics database, never attach them to events, and never use them to identify or locate users.
Where data lives
Events are received by a Cloudflare Worker at the network edge and stored in a Postgres database hosted by Supabase in the EU (AWS eu-west-1, Ireland). Presence heartbeats — the pings behind "active right now" — are deleted after 8 days. Other events are kept for as long as the app exists in the dashboard.
Deletion
When a developer deletes an app from the dashboard, every event that app ever recorded is erased immediately and permanently — that's the same button as "delete my data". Deleting your developer account removes your apps the same way.
Developer accounts
The dashboard uses email + password sign-in (handled by Supabase Auth). We use your email only to sign you in, confirm your address, and reset your password. The dashboard sets no tracking cookies; your session token lives in your browser's local storage. We don't run third-party analytics or ads on this site.
Sharing
We never sell data and never share it with advertisers or data brokers. The only parties that touch it are our infrastructure providers: Cloudflare (event ingestion and site hosting) and Supabase (database and authentication). Webhook alerts a developer configures are sent to the destination they chose, containing only event names and app context.
For your own privacy policy
If you ship an app with this SDK, tell your users you collect anonymous usage analytics. In App Store Connect terms, this is "Data Not Linked to You" (Identifiers → User ID and Usage Data → Product Interaction) with tracking = No; the dashboard's setup page hands you those exact answers. That's guidance, not legal advice.
Changes and contact
If this policy changes materially, the effective date above changes with it. Questions or requests: open an issue at github.com/LudyemAS/LudyemAnalytics.