Privacy Policy

Hex Color Codes

Effective Date: 23 September 2026
Last Updated: 5 November 2026

Althea Group Company Limited ("Althea Group," "we," "us," or "our"), a company based in Thailand, publishes Hex Color Codes, a color and palette app for iOS, iPadOS and Android (the "App"). This Privacy Policy explains what information the App collects and how it's used.

This Policy covers the core color experience and the photo tools, Credits and optional purchases introduced with version 4.0.1, where available. Features can differ by platform; see current availability.

1. Information You Provide

If you choose to sign in, authentication is handled through Firebase Authentication using email and password, Google Sign-In or Facebook Login. Sign in with Apple is also available on iOS, iPadOS and Android. Depending on the method you choose, we may receive your email address, a display name, an authentication identifier, and a profile image URL where the provider makes one available.

You don't need to sign up to use the App's core color tools. If you continue as a Guest, the App creates an anonymous Firebase account for you. It has an authentication identifier but no email address or provider sign-in, and colors you save as a Guest are stored with it.

2. Colors and Palettes You Save

Saved colors belong to your account, including a Guest account, and are stored using Firebase Realtime Database. Signing in with a linked account keeps them available across supported devices. This includes:

Palette drafts you are still building are stored locally on your device. A palette is uploaded when you publish it, as described below.

3. Public Palettes

Publishing a palette requires a linked account; Guests cannot publish. When you publish, the palette becomes public: anyone can see its name, colors, HEX/RGB values and the creator name shown with it (such as your display name or username) in Discover and through its web link on altheagroup.net, without signing in. Shared links and their preview images can be copied, forwarded or cached by other apps and websites. Do not publish a palette you don't want visible to others.

When you share a single color, the link contains that color's HEX value (for example, altheagroup.net/hcc/color/FF004C). Color links do not include your account information.

4. Analytics and Diagnostics

The App uses Google Analytics for Firebase when analytics collection is enabled to understand usage, screen views and feature interactions. This may involve app-instance identifiers, device and app information, and usage events. Operational services may also produce technical error logs. See Firebase privacy information and Google’s Privacy Policy.

5. Advertising

The free version may display advertising through Google AdMob. AdMob and its partners may process device identifiers, ad interactions and related information under their policies and your applicable consent choices. On iOS and iPadOS, tracking permission is handled through App Tracking Transparency (ATT), separately from other consent choices. See Google’s advertising policy.

If you voluntarily choose a rewarded ad for Credits, the App sends AdMob an account identifier and a server-issued reward reference to associate the reward with your account. Google’s signed server callback is verified before a Credit is granted. The backend processes reward transaction identifiers, verification status and timestamps to prevent duplicate grants. Watching an ad does not itself publish your photos or palettes.

6. Purchases

Pro subscriptions are monthly or yearly auto-renewable purchases; permanent Remove Ads is a separate non-consumable purchase. Payments and store purchase records are handled through Apple’s App Store/StoreKit or Google Play Billing. We do not directly receive your payment-card details. Store transaction and entitlement information is used to check and restore your purchase benefits.

For purchase-linked Credit benefits, our backend may receive signed Apple transaction evidence or a Google Play purchase token and verify it with the applicable marketplace. Verification references, hashed purchase identifiers, and protected verification evidence may be retained to prevent reuse, reconcile benefits and detect refunds or revocation. This is separate from public color and palette content.

Credits and photo-tool sessions

Firebase Cloud Functions and a separate access-restricted Firebase Realtime Database ledger manage account-linked Credit grants, balances, usable sessions and reward/purchase verification. Records include account references, grant or session identifiers, amounts, status and timestamps. Welcome-Credit eligibility also uses keyed hashes of eligible sign-in identities to prevent repeated grants. These hashes are verification references, not a claim that the records are anonymous.

7. Photos and Images

Pick from Photo and Auto Palette from Photo let you choose a photo through your device’s photo picker. Color sampling and palette extraction run on the device; the selected photo is not uploaded to generate colors or palettes. The picker can create a temporary local copy, which the App attempts to remove after reading. The original photo is not deleted.

Choosing a photo does not publish it. Saved colors and palettes may sync as described above, and a palette you choose to publish can become public with its colors, name and creator information. The Credit/session service processes access and verification records separately from the selected photo.

8. How Information Is Used

Information described above is used to:

Optional notifications (Firebase Cloud Messaging)

The App integrates Firebase Cloud Messaging (FCM) for app-update notifications. FCM and the platform’s notification services process installation identifiers, registration tokens and delivery information to route messages. You can control notification permission in the App’s notification settings and your device settings. Turning off alerts is separate from deleting your Hex Color Codes account or provider-held identifiers. See Firebase’s privacy information.

9. Data Sharing and Sale

We do not sell your personal information. We share information only with the third-party service providers named in this Policy (Firebase, Google AdMob, and the applicable authentication and app-store providers), to the extent necessary for them to provide their service to the App, or as required by law.

10. Data Retention and Deletion

Account deletion removes your Firebase account, your saved colors and favorite status, the published palettes owned by your account (deleted entirely rather than left in Discover), your block list and your community-guideline acknowledgment. Start from Settings → Danger Zone → Delete Account; see Delete Your Account for the review and confirmation steps, what to do if deletion is interrupted, or to request deletion without the app.

Account deletion does not erase every record. Some moderation and operational records, as well as limited Credit-ledger deletion markers, grant history, hashed sign-in eligibility receipts, purchase/bonus records and anti-abuse references, are retained to enforce community rules, operate the service securely, prevent repeated Welcome grants, duplicate rewards and reused purchase benefits, and block late writes to a deleted account. Such records may still reference the deleted account or a protected purchase identity. They are not public palettes and are not automatically deleted by the account-deletion flow.

Deleting an account does not automatically cancel an Apple or Google Play subscription or refund purchases. Manage subscriptions separately through the store account used to buy them. Apple, Google, Meta and the other named providers may retain their own records under their policies and legal obligations. Copies of published palettes or links that others saved, and link previews cached by other services, may remain outside our control. Contact us for questions about retained records; this Policy does not promise a fixed deletion deadline for purchase or verification records.

11. Children

Hex Color Codes is not directed at children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us using Section 16 below and we will take steps to delete it.

12. Third-Party Services

The App may rely on the following third-party services. Each is subject to its own privacy policy:

13. International Processing

The third-party services named above may process information on servers located outside Thailand.

14. Security

We use reasonable technical and organizational measures to protect information handled by the App. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

15. Changes to This Policy

We will update this Privacy Policy as the App changes, and from time to time. If we make material changes, we will update the "Last Updated" date above and, where required by law, provide additional notice.

16. Contact Us

If you have questions about this Privacy Policy, contact us at:

Althea Group Company Limited
487/39 Ratchaprarop Road, Makkasan, Ratchathewi, Bangkok, Thailand
Email: support@altheagroup.net
Website: altheagroup.net