WidgetMix

Privacy Policy

Effective August 23, 2026. Last updated October 14, 2026.

Information handled by the app

WidgetMix brings multiple sources of information into an on-device dashboard and widgets. It stores display settings, quick notes, habits, anniversaries, garbage schedules, fetched usage values, and update times on your device.

Icons can come from the App Store, a website, or a photo chosen by the user. When a user enters a website URL solely for icon retrieval, retrieval starts only after they tap “Get from website” and sends the entered URL and image requests to that website or its image host. Cookies are neither sent nor stored. Images are resized and stored on the device and in the widget App Group; photos and registered lists are not sent to icon sources. A website URL entered solely for icon retrieval is not saved in registration data and does not change the app launch destination.

Device permissions

Only with your permission, the app may access calendars, reminders, Bluetooth devices, and precise location. Location is sent to Apple WeatherKit only when weather is refreshed. Coordinates are not retained, and the app does not continuously or in the background track location.

HealthKit

Only if you choose to connect and grant permission, WidgetMix reads today’s step count, walking/running distance, and active energy from HealthKit. It never modifies health records. Only current-day display values are stored in protected on-device storage shared with this app’s widgets and excluded from backups. They are not used for medical decisions, advertising, analytics, sale, AI training, or external transmission. Disconnecting deletes saved values and registered cards, leaving original health records intact. Revoke Apple’s read permission separately in the Health app.

Selected contacts

Phone-number cards save only the name and phone number you explicitly select using Apple’s contact picker, on your device and in this app’s widget App Group. The app does not read the entire address book or unrelated addresses or photos, and does not send selected contact information externally. Tapping a card opens the saved contact details and does not call automatically. Delete the saved entry from phone-number management without changing the original contact. Register again after a number changes.

Calendar event marks (optional)

Calendar event marks are off by default. After reading the explanation and enabling “Mark days with events” in Data, the app reads event times for the entire displayed month, including past days. Apple uses device calendars for which access is granted; Google uses the primary calendar of each connected account. Google requests for marks exclude titles, descriptions, attendees, and attachments. Apple reads events through EventKit, but event titles and other content are not saved for marks. Only the month, time zone, occupied dates, fetch status, and update time are stored on this device and in the widget App Group, and replaced on refresh. Turning marks off, removing a connection, or detecting revoked access deletes the affected marks. A different month or time zone hides old marks; old-month data is deleted when the app reads or refreshes the cache. Event cards separately retain the next-seven-day, maximum-twenty-event fetch and next-four-event display. An unmarked day does not guarantee no events if fetching is incomplete or events have changed since the last update.

To preserve all-day dates across time zones, Google queries cover the month boundaries in both the device and source calendar time zones. Adjacent-month times may be read at the edges; dates outside the displayed month are not saved.

Google user data

Google integration is optional. Your account identifier, email address, and display name are used to identify and display connected accounts. You can authorize Calendar and Gmail separately for each account.

For Google Calendar event cards, the app reads up to 20 events in start-time order from your primary calendar within the next seven-day window. It uses each event's name, start date or time, end date or time, and all-day status to show up to four current or upcoming events on separate cards. Ended events are removed and later events move up; if fewer than four events are available, the remaining fixed slots stay blank. It does not request event descriptions, attendees, or attachments, create, modify, or delete events, or change calendar settings.

For Gmail, the app retrieves only the unread count of the INBOX label. It does not retrieve message bodies, subjects, senders, or attachments. Although Google's permission includes viewing and editing labels, WidgetMix does not modify labels or messages.

Communication with Google uses HTTPS. Credentials are stored in device-only Keychain. Event-card and Gmail display summaries are stored on your device and in the App Group used by this app's widgets. Summaries are replaced on refresh and retained until you remove the connection. We do not store them on developer servers or create a history database of your events or mail.

Account display information, event summaries, Gmail unread counts, and derived data that WidgetMix retrieves from Google APIs are used to identify connections and display information. This display data is not sent or provided to developer servers, unrelated external services, advertising providers, or data brokers, sold, or used for advertising, credit assessment, or AI model training. Google authentication and SDK processing are described in the next section.

WidgetMix follows the Google API Services User Data Policy, including its Limited Use requirements, when using or transferring data received from Google APIs.

Information handled by Google Sign-In SDK

Google sign-in uses Google's Sign-In SDK. Google says it may collect a user identifier to record consented OAuth grants and an IP address that may be used to estimate a device's general location for fraud prevention. See Google's data collection disclosure.

The bundled SDK's privacy declaration lists name, email address, phone number, and coarse location for app functionality; user ID and other data types for app functionality and analytics; and device ID and other usage data for analytics. These categories are declared as linked to the user and not used for tracking.

This describes the SDK's declared scope, not a claim that every field is always collected from every user. Google authentication and SDK processing are separate from WidgetMix's local storage of event summaries and unread counts. The absence of a developer-operated analytics server does not mean there is no communication with external services or SDK data collection.

Reading signed-in webpages

For services such as Codex, Claude, and generic carrier connections, the app may read usage values and reset times locally from a webpage where the user has signed in. Login state may remain in iOS WebKit storage; cookies and fetched data are not sent to developer servers. Gemini discards the login state when its connection screen closes. Google Calendar and Gmail data are not passed to these connections.

Automatic AI and carrier retrieval starts only after you read the explanation and approve it, using the interval you select as a target. iOS controls when and how often background refresh runs. Retrieval is also available at launch or through manual refresh. Selecting Manual Only stops automatic retrieval; withdrawing approval stops new retrieval and saving but does not itself delete saved cards. Web sign-out deletes the app’s web login data and cache. Each service’s terms still apply; your approval does not replace permission from the service provider.

Storage and third-party disclosure

Display settings and fetched display data are generally stored on the device, in Keychain, or in the App Group shared with the app's widgets. We do not use a developer-operated analytics server or advertising SDKs, and we do not sell or share data for advertising. Google authentication and SDKs, Apple WeatherKit, purchases, and user-selected web services involve communication needed for their respective functions.

Purchases and access

Apple processes purchases and payments. The app checks purchase status to enable main features and restore purchases. Trial or subscription expiry alone does not delete local settings or saved data.

Deletion and revoking access

Before purchase and after trial or subscription expiry, the Premium screen still lets you remove Google integration, delete web login data, disconnect Health and delete saved values, and manage or delete saved phone numbers. These deletion controls do not require paid access.

Open the relevant Google account under “Add & Manage” and choose “Remove Google integration from this device” to delete its Keychain credentials, fetched display data, and display settings from this device. Original Google Calendar events and messages are not deleted.

Separately revoke WidgetMix's access through Google Account connections. Revocation at Google alone may leave saved display data on your device, so also remove the local connection. Manage device permissions in iOS Settings and other local data in the app's management screens.

Contact

For questions about personal data handling, access, correction, or deletion, contact [email protected]. For help using the app or reporting a problem, visit the support page.