WLED Max Privacy Policy

This WLED Max-specific Privacy Policy supplements our Company Privacy Policy. It explains how WLED Max handles your data and personal information.

1. Data Collection Overview

Data We Do NOT Collect

• Your WLED device configurations or LED settings
• Your network topology
• Your location or address
• Your Wi-Fi credentials or network passwords
• Your WLED device names or custom presets

Data Stored Locally on Your Device

• WLED device IP addresses and custom names
• App preferences and settings
• Saved presets and effect configurations
• Device groupings and room assignments

Data That May Be Sent to Apple (Opt-In Only)

• Crash reports and diagnostics - only if you enable this in iOS Settings

Data That May Be Sent to MeowScript (Opt-Out)

• Automatic error reports when app issues occur - enabled by default, can be disabled in app Settings
• Error reports may include: error type, error message, WLED device IP address, WLED firmware version, app version, iOS version, device model, and timestamp
• Error reports are sent to MeowScript servers and used solely for improving app stability
• Error reports are deduplicated (same error sent at most once every 5 minutes)

2. Local Network Connections

WLED Max connects to WLED controllers on your local network:

WLED Devices

• Connection: Direct to your WLED devices over your local network
• Protocol: HTTP/WebSocket communication with WLED JSON API
• Data flow: All communication stays within your local network

Apple StoreKit

• Used for in-app purchases
• Purchase transactions are handled entirely by Apple
• MeowScript does not receive or store your payment information

Important: WLED Max communicates directly with your WLED devices on your local network. MeowScript does not operate any servers that receive, intercept, or process your WLED data. No data leaves your local network through our app.

3. Error and Crash Reporting

Automatic Error Reports (MeowScript)

When the app encounters errors, brief error reports are automatically sent to MeowScript servers to help us improve the app. This is enabled by default and can be disabled in the app's Settings.

What's included in error reports:

• Error type and error message
• WLED device IP address (local network IP, e.g. 192.168.x.x)
• WLED firmware version
• App version, iOS version, and device model
• Timestamp

What's NOT included:

• Your WLED device names or custom configurations
• Your LED presets, colors, or effects
• Your Wi-Fi credentials or network passwords
• Your email or any personally identifying information

Error reports are deduplicated (same error sent at most once every 5 minutes) and are used solely for improving app stability. They are never shared with third parties.

Apple Crash Reports (Opt-In)

If you enable crash reporting in iOS Settings, Apple may collect standard crash diagnostics:

• Crash logs and stack traces
• App version and iOS version
• Device model

These are managed through Apple's standard crash reporting system and accessible to MeowScript only through App Store Connect.

User Feedback (Manual)

When you voluntarily submit feedback through the app, you provide a message and optionally your email. We also include your app version, iOS version, device model, and number of WLED devices to help diagnose issues. No WLED device IPs or configurations are included in feedback submissions.

4. Anonymous Usage Analytics (Opt-In)

WLED Max includes an optional, anonymous analytics feature that helps us understand which features are used and where the app has rough edges. This feature is OFF by default. You can enable it anytime in the app's Settings, and disable it just as easily. No analytics events are sent unless you explicitly opt in.

What's included when enabled

• Anonymous device ID (random UUID generated on first launch, not tied to your Apple ID, email, name, or any personal identifier)
• Session start/end, app version, iOS version, device model
• Coarse screen-view events (e.g., "Effects page opened") and feature usage events (e.g., "Preset applied")
• Number of WLED devices on the account (count only, not IPs or names)

What's NOT included

• Your Apple ID, name, email, or any personally identifying information
• Advertising identifiers (IDFA), precise location, contacts, photos, or browsing history
• WLED device IPs, device names, preset names, or LED color values
• Microphone audio (microphone input is processed on-device only and never leaves your device)

Events are transmitted over HTTPS with HMAC-signed requests and certificate pinning. Raw events are retained on our servers for up to 90 days, after which only anonymized daily aggregates are kept. We do NOT use third-party analytics SDKs (no Google Analytics, no Firebase, no Mixpanel, etc.), advertising SDKs, advertising identifiers, cross-app tracking, or fingerprinting.

5. Other Permissions and Platform Features

Microphone (Music-Reactive Effects)

WLED Max can stream ambient audio to compatible WLED devices for music-reactive lighting effects. If you opt into this feature, the app requests microphone access. Audio is processed on-device and streamed directly to your WLED device over your local network. We do NOT record, store, or transmit audio to MeowScript or any third party. You can revoke microphone access anytime in iOS Settings.

Local Network Access

WLED Max requires local network access (via Bonjour/mDNS) to discover and communicate with WLED devices on your Wi-Fi network. iOS will prompt for this permission on first launch. Local network traffic stays within your network.

Hotspot / Wi-Fi Provisioning (Guided ESP32 Setup)

If you use the guided ESP32 setup flow to bring a new WLED device onto your Wi-Fi, the app temporarily joins the device's Wi-Fi Access Point via the iOS NEHotspotConfiguration API, transmits your Wi-Fi SSID and password directly to the device, and then rejoins your Wi-Fi. Your Wi-Fi password is sent only to your WLED device and is NEVER transmitted to or stored by MeowScript.

iCloud Key-Value Store (Sync Across Your Devices)

WLED Max uses Apple's iCloud key-value storage to sync a small set of user preferences (e.g., saved presets, group names) across your own Apple devices signed into the same iCloud account. iCloud sync is managed entirely by Apple's iCloud infrastructure; MeowScript does not have access to the synced data. You can disable iCloud for WLED Max in iOS Settings > iCloud.

App Version Check

To notify you when a new version of WLED Max is available, the app periodically queries Apple's public iTunes lookup endpoint (itunes.apple.com) for the current App Store version. This request contains no personal information — it is the same unauthenticated metadata query a browser would make. Apple's own privacy policy governs this endpoint.

Embedded WebKit (In-App Effect Previews)

Starting in version 1.1.0, WLED Max renders live effect animations inside the app using an embedded WKWebView. The simulator runs bundled local JavaScript and does NOT load third-party tracking scripts, cookies, or remote content. No browsing history, form data, or cookies are collected or transmitted.

Community Preset Sharing (Optional, iOS)

If you choose to share a preset to the community or send one to another user by username, the preset content (name, colors, effect parameters) is transmitted to our community preset server. Your chosen display name is public on shared presets; your Apple ID and email are NOT shared.

In-App Purchases (Apple StoreKit)

Purchases are handled entirely by Apple StoreKit. MeowScript receives an anonymous transaction receipt from Apple and does NOT receive your name, email, payment method, or Apple ID. Refunds are handled by Apple per their App Store refund policy.

6. Data Security

• All local network communications use your existing network security
• Local data protected by iOS data protection
• Error reports transmitted over HTTPS to MeowScript servers
• No user WLED configurations or personal data stored on our servers
• Purchase transactions secured by Apple's StoreKit framework

7. Your Rights

Data Deletion

Most WLED Max data is stored locally on your device: deleting the app removes all local data. For the optional opt-in analytics data retained on our servers, you can request deletion by emailing with your anonymous device ID (found in Settings > About). If you use community preset sharing, you can delete your account and associated shared presets from within the app.

Data Access and Portability

All local data is accessible within the app. For server-side data (anonymous analytics, shared community presets, feedback submissions you made), you can request a copy by emailing .

Opt-Out Controls

• Automatic error reports: toggle off in the app Settings
• Anonymous usage analytics: toggle off in the app Settings (off by default)
• Microphone (music-reactive effects): revoke anytime in iOS Settings > Privacy > Microphone
• Local network: revoke anytime in iOS Settings > Privacy > Local Network
• iCloud sync: disable for WLED Max in iOS Settings > iCloud

8. Children's Privacy (COPPA)

WLED Max is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact and we will delete it promptly.

9. California Residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, request deletion of that information, opt out of the "sale" or "sharing" of personal information, and not be discriminated against for exercising these rights. MeowScript does not sell or share personal information. To exercise your rights, email .

10. European Economic Area and UK Residents (GDPR / UK GDPR)

If you are in the EEA, UK, or Switzerland, you have rights under the GDPR including access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. The lawful bases we rely on are: consent (Art. 6(1)(a)) for opt-in analytics and microphone use, and legitimate interests (Art. 6(1)(f)) for automatic error reports used to improve app stability. You can lodge a complaint with your local data protection authority. To exercise your rights, email .

11. International Data Transfers

MeowScript operates servers in the United States. If you use server-dependent features (opt-in analytics, community presets, feedback), data will be transferred to and processed in the United States. We use standard industry safeguards (TLS 1.2+ in transit, AES-256 at rest) for any transferred data.

12. Data Breach Notification

In the unlikely event of a data breach affecting server-stored data, we will notify affected users within 72 hours of discovery, as required by GDPR Art. 33, and provide information about what was affected and what steps you can take.

13. Changes to This Policy

We may update this privacy policy. Material changes will be notified through the app. The "Last Updated" date at the top of this policy reflects the most recent revision.

14. Contact

MeowScript LLC
Privacy:
Support:
Website: meowscript.com