Promptlyn is a free Android app for finding ready-made prompts and using them with AI tools, published by Cerrow. In this policy, “we”, “us” and “Cerrow” mean that organisation, “Promptlyn” means the app, and “you” means the person using it.
Cerrow is the data controller for the information described below. For any privacy question, or to exercise a right under section 13, write to support@promptlyn.com; we aim to reply within 30 days.
| Controller | Details |
|---|---|
| Organisation | Cerrow |
| App | Promptlyn (com.promptlyn.app) |
| Contact | support@promptlyn.com |
This policy covers the Promptlyn Android app
(com.promptlyn.app). Prompts are available only in the app;
promptlyn.com is our information site, where you can read about Promptlyn
and find these pages, and it is covered here too.
It does not cover the AI tools the app can send you to — ChatGPT, Gemini, Claude, Midjourney and others — which are run by separate companies under their own policies. See section 15.
The app has no sign-up and no login, so there is no account to attach anything to. Specifically, we do not collect:
AD_ID permission is explicitly removed from the build
so the identifier cannot be read even by accident.These never leave your phone. They are held in the app's private storage and removed when you uninstall the app or clear its data:
We have no copy of any of it and no way to retrieve it.
On first launch the app generates a random identifier and stores it on your device. It accompanies requests to our servers so we can count how many distinct people use the app rather than how many requests arrive.
It is not a device identifier: it is randomly generated by the app, unique to this installation, and derived from nothing about your phone or any account. Reinstalling or clearing app data produces a new value with no link to the previous one. It means nothing outside Promptlyn and cannot identify you.
The app records which parts of the catalogue are used, so we know what to add more of. Each event carries the identifier of the prompt or category involved, and nothing that identifies you:
| Event | Sent when | What it contains |
|---|---|---|
prompt_revealed | You tap Generate Prompt | Prompt ID, which screen |
prompt_copied | You copy a prompt | Prompt ID, category ID |
prompt_launched | You open a prompt in an AI tool | Prompt ID, which tool |
prompt_saved | You add or remove a Collection item | Prompt ID, added or removed |
prompt_search | You run a search | The search term, number of results |
category_opened | You open a category | Category ID |
gallery_image_opened | You open a Gallery image | Prompt ID |
Google Analytics for Firebase also records standard app events such as first open, session start, and screen views, together with general device information — model, operating system version, language, and country. It does not receive your name or contact details, because the app never has them.
If the app stops unexpectedly, a diagnostic report is sent so the fault can be fixed. It contains the error, the point in the code where it happened, the device model, the Android version, and how long the app had been running. It does not contain your Collections, your searches, or anything you have typed.
Our API records standard request logs — the URL requested, the time, the response status, and the IP address the request arrived from. IP addresses are used only to keep the service running and to block abuse; they are never used to build a profile, and they are not joined to your installation identifier for that purpose.
This is the same information we declare on the app's Google Play Data safety page, restated here so the two always agree.
| Data type | Collected | Shared | Purpose | Optional? |
|---|---|---|---|---|
| App activity (in-app actions, search terms) | Yes | No | Analytics, improving the catalogue | Required |
| Crash logs & diagnostics | Yes | No | Fixing faults, app stability | Required |
| Device or other IDs (anonymous install ID) | Yes | No | Counting distinct users | Required |
| Personal info, contacts, location, photos, files, messages, financial info, health | No | No | — | — |
Data is encrypted in transit. Nothing above is used for advertising or marketing, and none of it is sold.
Where the UK GDPR or EU GDPR applies to you, we rely on these bases:
| Purpose | Data used | Legal basis |
|---|---|---|
| Delivering the prompt catalogue you asked for | Request logs, install ID | Performance of a contract |
| Understanding which prompts are useful | Usage events, install ID | Legitimate interests — improving a free product, using data that identifies no one |
| Fixing crashes | Crash diagnostics | Legitimate interests — keeping the app usable |
| Preventing abuse of the API | IP address, request rate | Legitimate interests — protecting the service |
We do not rely on consent for any of the above, because none of it involves personal data of a kind that would require it, and none of it is used for advertising. If that ever changes, we will ask first.
A small number of companies process data on our behalf, under contract and only for the purposes below. They are not permitted to use it for their own purposes.
| Provider | What it receives | Why | Their policy |
|---|---|---|---|
| Google (Firebase Analytics & Crashlytics) | Usage events, crash diagnostics, general device information | Usage statistics and crash reporting | firebase.google.com/support/privacy |
| Cloudinary | Image requests, including the requesting IP address | Delivering prompt artwork sized for your screen | cloudinary.com/privacy |
| Netlify | Requests to promptlyn.com | Hosting this website | netlify.com/privacy |
| Our own servers | Install ID, which prompts are requested | Serving the catalogue and counting distinct users | This policy |
We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are used in the California Consumer Privacy Act. We have never done so.
We may disclose information if required by law, or where necessary to investigate abuse of the service. If that ever happens we will tell users unless legally prevented from doing so.
Our servers are in Europe. The providers above operate globally, so data may be processed outside your country, including in the United States. Where the GDPR applies, those transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision, as set out in each provider's own documentation.
| Data | Retention |
|---|---|
| Analytics events | Up to 14 months, then deleted automatically by Firebase |
| Crash reports | Up to 90 days |
| Daily visitor counts on our server | Kept as totals only; the underlying identifiers expire within 45 days |
| Server request logs | Up to 30 days |
| On-device data | Until you uninstall the app or clear its data |
No system is perfectly secure, but the most effective protection here is structural: we do not hold information that could identify you, so there is very little for an attacker to take.
Promptlyn is intended for a general audience and is not directed at children under 13 (or the equivalent minimum age where you live). We do not knowingly collect personal information from children — and because the app collects no personal information from anyone, there is none about a child to collect either. The app contains no ads and no in-app purchases.
If you believe a child has provided us with personal information, contact us and we will investigate and remove it.
Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, to receive a copy of it, and to complain to your data protection authority.
We want to be straightforward about how these apply here: because we hold no name, email address, or account, we cannot look up “your” data on request — there is no identifier we could match you to. This is a consequence of collecting so little, not a way of avoiding the obligation.
If you have a request or a complaint, write to support@promptlyn.com. You also have the right to lodge a complaint with your local supervisory authority.
The app declares these Android permissions. All of them are “normal” permissions, which means Android grants them at install time and never shows you a prompt — none gives access to anything personal.
| Permission | Why |
|---|---|
INTERNET | To download prompts and artwork. |
ACCESS_NETWORK_STATE | To tell whether you are online, so the app can show cached content and an offline notice instead of failing. |
WAKE_LOCK | Added by the Firebase libraries so a crash report or queued analytics batch can finish sending. |
BIND_GET_INSTALL_REFERRER_SERVICE | Added by Firebase Analytics to read how the app was found on Google Play. |
The app requests no access to storage, camera, microphone, location, contacts, calendar, or any other sensitive capability, and Android will never ask you to approve anything. The advertising-ID permission that the analytics library would otherwise add is explicitly removed from the build.
The app can open a prompt in an external AI tool such as ChatGPT, Gemini, Claude, Grok, Midjourney or others. When you tap one of those buttons the prompt is copied to your clipboard and the tool is opened — after which you are on that company's service, governed by its terms and its privacy policy. We have no visibility into what happens there, and we do not send them anything about you.
If this policy changes, the “last updated” date at the top changes with it. Where a change materially affects what is collected or why, we will say so in the app's release notes before the change takes effect. Continuing to use the app after that means accepting the revised policy.
By downloading or using Promptlyn you agree to the handling of data described here. If you do not agree, please do not use the app — and if you have already installed it, uninstalling removes everything held on your device and stops all collection.
Questions, requests, or complaints about privacy — including a request to delete data:
We aim to respond within 30 days. If you are unsatisfied with our response, you may complain to the data protection authority in your country.