SandForm Privacy Policy
SandForm is an iOS app by Higher Bar Apps for controlling Oasis kinetic sand tables. This policy explains what information the app handles, where it goes, and the choices you have. The short version: we collect the minimum needed to run the app's features, we don't run ads or analytics, we never sell your data, and you can delete your data at any time.
SandForm is an independent app and is not affiliated with, endorsed by, or supported by Grounded.
Your Grounded account credentials
To connect to your sand table, you sign in with your existing Grounded account. Your email address and password are sent directly to Grounded's own service to authenticate — they are never sent to or stored on Higher Bar Apps servers. The app stores your credentials and the resulting access token securely in the iOS Keychain on your device so you stay signed in.
Information our server receives
Some Pro features (push notifications, the home-screen widget, Endless Play, scheduled firmware updates, and device status sync) are powered by a backend service operated by Higher Bar Apps. When you use these features, our server receives and stores:
- Account verification token. The app sends your Grounded access token (never your password) to our server once so it can verify your account and issue its own session token.
- An account identifier. An internal ID used to associate your devices and preferences with your account.
- Push notification token. The Apple push token for your iPhone, so we can deliver notifications you've enabled (for example, drawing finished or device offline). We also store your notification preferences.
- Device information. The serial numbers, names, models, and settings of the sand tables linked to your account, plus recent playback status (such as the current design and queue) used to power the widget and status sync.
We do not collect your location, contacts, photos, browsing activity, or anything unrelated to operating your sand table.
Purchases
SandForm Pro is an auto-renewable subscription processed entirely by Apple through the App Store. We never see or store your payment details. Subscription status is verified on your device using Apple's StoreKit; our server does not receive purchase or billing information.
No ads, analytics, or tracking
The app contains no advertising, no third-party analytics SDKs, and no trackers. We do not track you across apps or websites, and we do not sell or share your information with third parties for marketing. The only third parties involved in running the service are Apple (push notification delivery and payments), our hosting provider (which runs our backend server), and Grounded's own service (sign-in and device communication).
Data stored on your device
App settings, your device list, cached status for the widget, and a local activity log are stored on your iPhone (and in the app's shared container for the widget). This data stays on your device and is removed when you delete the app, except credentials in the iOS Keychain, which you can clear by signing out.
Data retention and deletion
Our server keeps the information above only while you use the connected features. You can permanently delete your account and all associated data from our server at any time in the app under Settings, or by emailing us at the address below. Unregistering from push notifications removes your push token from our server.
Security
All communication between the app, our server, and third-party services uses encrypted connections (HTTPS/TLS). Credentials and tokens on your device are stored in the iOS Keychain.
Children
SandForm is not directed at children under 13, and we do not knowingly collect personal information from them.
Changes to this policy
If we make material changes, we will update this page and the effective date above.
Contact
Questions or requests about your data: support@higherbarapps.com