Privacy Policy
The short version
- Everything you create in IconFlow stays on your phone. We never see your apps, photos, icons or unlock pattern.
- To fix bugs and improve the app, we use Google Firebase Analytics and Crashlytics. They send anonymous usage and crash data to Google.
- If you use Create with AI, the text you type is sent to our server and our AI provider Runware to make the icons. Don't type personal information there.
- The free version of IconFlow shows ads, provided by Google AdMob. To show and measure ads, the ad services may use your device's advertising ID, IP address and device and app information. See Ads. Where the law requires it, we ask for your consent first.
- IconFlow Pro is an optional subscription that removes ads. Payment is handled entirely by Google Play. We never see your card or payment details. See Subscriptions.
- We do not collect your name, email, contacts or precise location. There are no accounts.
- We never sell your personal data. You can turn off usage and crash data, or delete it, any time in Settings › Privacy & security. See How to delete your data.
Who we are
IconFlow: Icon Changer ("IconFlow", "the app") is published on Google Play by Handy Apps Pro ("we", "us"). We are responsible for the data described in this policy. This policy explains what information the app uses, why, who receives it, and what control you have over it.
What stays on your device
To work, IconFlow reads some information on your phone. This information is processed only on your device. It is not included in analytics or crash reports and is never sent to us.
| Information | Why it is used | Where it stays |
|---|---|---|
| List of installed apps | To show your apps (name and icon) so you can pick one to customize, and to open that app from the shortcut you create. The app only sees apps that appear in your launcher, using Android's standard package visibility rules. | On device only |
| Photos you choose | When you use a photo as an icon, you pick it with Android's system photo picker. The app only receives the one image you select, crops it to a square and uses it for the icon. It cannot browse your gallery. | On device only |
| Installed icon packs | To show icons from icon packs you have installed from Google Play and match them to your apps. | On device only |
| Fingerprint or face unlock | Optional, to open a locked shortcut. Authentication is handled entirely by Android. The app only learns whether it succeeded and never receives or stores your biometric data. | Handled by Android |
| Your unlock pattern | Optional, to lock shortcuts. Only a salted, one-way hash of the pattern is saved, never the pattern itself. | On device only |
| Icons, folders and shortcuts you create | So you can see, reuse, edit and delete what you made in "My icons" and "My shortcuts". | On device only |
| App settings | Your chosen language, theme, data-sharing choice, and whether you have finished the introduction screens. | On device only |
Shortcuts and widgets you add to your home screen are stored by your launcher (your phone's home screen app), which is controlled by your device maker, not by us.
Usage and crash data we collect
IconFlow uses two Google services to understand how the app is used and to fix problems. They collect data automatically while you use the app, unless you turn this off.
| Service | What it collects | Why |
|---|---|---|
| Firebase Analytics | App usage events (for example app opened, screens viewed, how long a session lasts, first open), app version, device model and brand, Android version, screen size, language, approximate country or region derived from your IP address, and a random app instance ID. Firebase Analytics does not collect the advertising ID. (Ads are separate, see Ads.) | To see which features are used, find confusing screens and improve the app. |
| Firebase Crashlytics | When the app crashes or has a serious error: the technical error details (stack trace), app version, device model, Android version, free memory and storage, screen orientation, whether the app was in the foreground, and a random installation ID. | To find and fix crashes. |
This Firebase data is not used to identify you, is not combined with other information about you, and is not used for advertising or ad personalization. We do not sell it.
Google's own terms: Privacy and Security in Firebase and Google Privacy Policy.
AI icon generation
The optional Create with AI feature makes icons from a short description you type. When you tap Generate, the app sends, encrypted in transit (HTTPS):
- your description (prompt), the style and colour you picked, to our server (hosted on Cloudflare), which forwards the prompt to Runware, our AI image provider, to create the images;
- a random ID created when the app was installed, and your IP address as seen by our server, used only to count the daily free generations and stop abuse. They are not linked to your name or account.
The generated images are downloaded to your phone. If you report an image, we store the prompt and the image link so we can review it. We do not use prompts for advertising and do not sell them. Please don't include personal information in a prompt.
Providers' terms: Runware Privacy Policy and Cloudflare Privacy Policy.
Ads
The free version of IconFlow shows ads (banners, native ads and full-screen ads, including optional ads you choose to watch to unlock a feature). Ads are provided by Google AdMob, using the Google Mobile Ads SDK, together with an ad-management library that loads and schedules the ads in the app. Users who have IconFlow Pro do not see ads.
To request, show and measure ads, and to prevent fraud and abuse, the ad services may collect and use the following from your device:
- Advertising ID, a resettable identifier on your phone;
- IP address, from which an approximate location (country or city level, not precise) may be derived;
- Device and app information, such as device model, operating system version, language, app name and version, and network type;
- Ad interactions, such as which ads were shown, tapped or watched, and how long they took to load;
- Diagnostic information, such as errors and performance of the ads.
This information is used to show you ads, to measure how ads perform, to personalise ads where you have allowed it, and to keep the ad services secure. It is collected by Google and its advertising partners, who act under their own privacy policies. We do not combine it with your name or contact details, because we do not have them.
Your choices
- Consent. Where the law requires it (for example in the European Economic Area, the United Kingdom and Switzerland), IconFlow asks for your consent before ads that use your data are shown. You can review your choice from the app's privacy options where available, or reset it by clearing the app's storage, which makes the form appear again.
- Personalised ads. You can turn off ad personalisation, and reset or delete your advertising ID, in your phone's settings (usually Settings › Security & privacy › Privacy › Ads, or Settings › Google › Ads; the exact path depends on your device).
- Remove ads. Subscribe to IconFlow Pro. See Subscriptions.
Google's own terms: How Google uses data from ads and Google Privacy Policy.
Subscriptions (IconFlow Pro)
IconFlow Pro is an optional paid subscription, offered weekly or monthly. It removes ads, removes the ad before AI icon generation, and unlocks the premium icons. The price, the renewal period and the cancellation steps are shown on the Pro screen before you buy.
- Payment is handled by Google Play. Your card and other payment details are processed by Google. We never receive or store them.
- What we receive: only whether your Google Play subscription is active, through the Google Play Billing library on your phone. This status is stored on your phone, so Pro keeps working without an internet connection. We do not create accounts or collect your name or email for this.
- Renewal and cancellation: a subscription renews automatically at the end of each period until you cancel. You can cancel at any time in the Google Play app (Menu › Payments & subscriptions › Subscriptions). You keep Pro until the end of the period you have paid for. Refunds are handled by Google Play under its refund policy.
- Restore: if you reinstall the app or change phones, use Restore purchases on the Pro screen to unlock Pro again with the same Google account.
The full subscription conditions are in our Terms of Use.
See Google Play's Terms of Service and how to cancel a subscription.
Who receives the data
Usage and crash data is sent, encrypted in transit (HTTPS), to Google LLC, which provides Firebase to us as a service provider and processes the data on our behalf. Google may process it on servers outside your country, including in the United States, under its standard data protection terms. If you use Create with AI, your prompt is processed by Cloudflare (our server host) and Runware (AI image generation) as our service providers, as described in AI icon generation.
When ads are shown, the information described in Ads is received by Google (AdMob) and its advertising partners, which decide for themselves how to use it under their own privacy policies. If you subscribe to IconFlow Pro, Google Play processes the payment and holds the purchase record. We share no data with anyone else.
How long it is kept
- Analytics data is kept for up to 14 months in Firebase and then deleted automatically. Aggregated reports that cannot identify a device may be kept longer.
- Crash reports are kept for up to 90 days.
- AI generation counters (random install ID and IP address) are deleted after 2 days. Reports of AI images are kept for up to 90 days. Our server does not keep prompts that were not reported.
- Ad data is kept by Google and its advertising partners for as long as their own privacy policies say. You can reset your advertising ID at any time in your phone's settings.
- Purchase records are kept by Google Play. On your phone we keep only a yes-or-no flag saying whether Pro is active.
- Everything on your device stays until you delete it, clear the app's storage or uninstall the app.
How to delete your data
You can delete your data yourself at any time, without contacting us. IconFlow has no accounts, so there is no account to close.
1. Data on your phone
- Delete single icons or whole folders in My icons, and remove shortcuts in My shortcuts.
- To delete everything at once, open Android Settings › Apps › IconFlow › Storage › Clear storage, or uninstall the app. This removes all icons, folders, shortcut records, your pattern and your settings immediately.
- Shortcuts and widgets already on your home screen belong to your launcher. Long-press one and choose Remove to delete it.
2. Usage and crash data sent to Firebase
- Open Settings › Privacy & security in the app and tap Delete my usage data. This resets the random app instance ID, so analytics collected before are no longer linked to your phone, and deletes crash reports that have not been sent yet.
- Switch off Share usage & crash data on the same screen to stop any new data from being sent.
- Data already stored by Firebase is deleted automatically: analytics after at most 14 months and crash reports after 90 days.
3. Ad data and your advertising ID
- Reset or delete your advertising ID, and turn off ad personalisation, in your phone's settings (see Ads). Ad services then stop linking ads to your old ID.
- To clear the ad consent you gave in the app, open Settings › Apps › IconFlow › Storage › Clear storage. The consent form appears again next time (where required).
- Ad data that Google or its partners already hold is controlled by them. See Google My Ad Center to review and delete it.
4. Subscriptions
To stop a subscription, cancel it in the Google Play app (see Subscriptions). Purchase records are held by Google Play and are deleted under Google's policies, not by us.
5. Ask us to delete it
If you want us to delete data sooner or have any other request, email handyappsteam@gmail.com with the subject "Delete my data". Because we cannot identify you from the data we hold, please include the approximate date you used the app and your device model so we can help. We reply within 30 days.
Device backups
If Android Backup is turned on in your phone's settings, Android may include IconFlow's settings and saved icons in your personal Google backup, so they can be restored on a new phone. This backup is managed by Google under your Google account, and we cannot access it. You can turn backups off in Android Settings › System › Backup.
Legal basis (EU and UK users)
We process usage and crash data on the basis of our legitimate interest in keeping the app stable and improving it. You can object at any time by turning off data sharing in Settings, as described in How to delete your data.
Ads that use your advertising ID or other personal data are shown on the basis of your consent, which you can withdraw as described in Ads. Handling your subscription is necessary to perform our contract with you.
Your rights
Depending on where you live, laws such as the GDPR (EU and UK) or the CCPA (California) give you rights to access, correct, delete or object to the processing of personal data about you. Because the data we receive is tied only to a random app instance ID and not to your name or account, the fastest way to stop and remove it is to follow the steps in How to delete your data. You can also email us and we will help with any request.
Permissions
- Internet and network state: used by Firebase to send usage and crash data, by the ad services to load ads, by Google Play for subscriptions, and by Create with AI to make icons.
- Advertising ID (
AD_ID): lets the ad services read your advertising ID to show and measure ads. You can reset it or turn off personalisation in your phone's settings. - Billing (
com.android.vending.BILLING): lets the app offer the IconFlow Pro subscription through Google Play. - Other ad-related permissions: added by the Google ads libraries, for example for privacy-preserving ad measurement on newer Android versions.
- Biometric (
USE_BIOMETRIC): lets you open a locked shortcut with your fingerprint or face, if you turn this on. - Install referrer: added by Firebase Analytics to tell whether the app was installed from Google Play.
- Visibility of launcher apps and icon packs: declared so the app can list apps and icon packs on Android 11 and later. The app does not request access to all installed packages.
IconFlow does not request location, contacts, camera, microphone, phone or storage permissions.
Security
App data is kept in the app's private storage, which other apps cannot read. Usage and crash data is sent over encrypted connections. Locked shortcuts are opened through a screen that cannot be started by other apps.
Children
IconFlow is a general-audience utility and is not directed at children under 13. We do not knowingly collect personal information from children, and ads are not intended for or aimed at children. If you believe a child has provided personal information, contact us and we will delete it.
Changes to this policy
If we change how data is handled, we will update this policy and the Google Play Data safety section before that version is released, and change the effective date above. This update (7 November 2026) adds ads and the IconFlow Pro subscription.
Contact
Questions about this policy or your privacy? Write to us at:
handyappsteam@gmail.com
Handy Apps Pro. We aim to reply within 7 days.