Does Nebula collect anything about the person using it?
No. Not a name, not an identifier, not a measurement of what you do. There is no account to make, no server to reach and no address the app could send anything to even if it wanted one.
That answer is worth unpacking, because "we take your privacy seriously" is the sentence every policy opens with and almost none of them mean. What makes it true here is architectural rather than a matter of good intentions: the build contains no advertising framework, no analytics or attribution package, no crash reporter, no sign-in provider and no billing library. Nothing is there to be switched off, and no server stands anywhere that could put it back afterwards.
Listed plainly, the app never reads, derives or sends:
- any detail by which a stranger could contact you or work out where you live;
- whatever Android keeps as an advertising identifier, the Android ID, the serial printed on the handset, or any hardware address belonging to it;
- where in the world you happen to be, established by any means at all;
- contacts, calendar, messages, call history, the microphone or the camera;
- a record of which sliders you moved, how long you stayed, or how often you pressed randomise;
- the scenes you compose, the palettes you keep, or photographs already on the device.
Then what does it put on my phone?
A folder of your own work, and nothing else.
Inside its private storage area Nebula holds the scenes in your gallery — each one with the slider positions and the palette that produced it — together with any duplicate made while trying a favourite under a different palette, whichever scene you have set as the app's backdrop, and your choice of English or Norwegian. That area is fenced off by Android for the app that owns it, so no other installed software is allowed to look inside. Fox AS cannot look either, there being nothing in the build that would obey an instruction sent from elsewhere.
One thing happens that is the platform's doing and not the app's. Android operates an automatic backup service tied to a Google account. Where someone has it switched on, an app's files may be lifted into that person's own Drive by the system, so that a new handset is able to put them back. The lifting is the platform's work, done under settings the account holder sets. We take no part in it, cannot read what it carries and cannot switch it off for anybody; that control is per application, in Android's own settings.
Uninstalling the app takes the folder with it. Clearing the app's data from Android settings empties the folder and leaves the app in place. Export a scene as a picture and the file goes to the system picker; from the moment a destination is chosen, it belongs to whatever you chose — a gallery, a folder, a message — and this document no longer follows it.
Who is Fox AS, and who reads a letter sent to it?
A small Norwegian company, and a person rather than a ticketing system.
Fox AS
Director: Helge Skaret
Sælshagadn 82, 2940 Heggenes
Norway
Mail: stjerne@foxas.homes
Fox AS is the controller — behandlingsansvarlig — for whatever Nebula might process. Nothing is processed on our instructions by anyone else, no second party shares the decisions, and no representative is appointed anywhere, since none of those arrangements has anything to attach to. No data protection officer has been appointed, nor is one required: that falls on public authorities and on undertakings whose core activity is large-scale monitoring or large-scale handling of special categories of data, which an offline drawing toy is not.
På norsk: du står fritt til å skrive på norsk, og svaret kommer på norsk. Bruk adressen over.
What permissions does it ask for, and what does Google see?
Almost nothing, and separately from us.
Very little appears in the manifest. A picture is saved by way of Android's own document and media pickers. They permit one write to the single place you nominate, and give the app no lasting view of your photographs. Nothing is declared for the camera, the microphone, your position, your contacts or the telephone, which is why the system prompt asking you to grant them never comes up.
Cloud layers, star sprites and grain are part of the download rather than something fetched afterwards, which is why the app is complete when installation ends and why every radio can be switched off without changing how it behaves.
Google Play is a different relationship from the app itself. Getting or updating software there is a dealing you have with Google on terms Google sets, and no part of the account or device data in it comes anywhere near Fox AS. What the developer console offers us is aggregated: installs counted by country, crash rates, star ratings. Nothing in it identifies a person, and there is no second source.
Is it suitable for a child?
Yes, and there is nothing collected from one.
Nebula carries no advertising, no chat, no links leading out, no contact between users and no screen asking for money. Nothing is gathered from anyone, so a child's data is not gathered either, and Article 8 of the Regulation — with the age of thirteen that Norway settled on in the Personal Data Act — has no foothold here at all, because consent is never what anything in this app rests on. Any parent who would like that confirmed in writing should write; the answer will not be a form letter.
Which law governs this, and who supervises it?
The Regulation, reaching Norway through the EEA Agreement, supervised by Datatilsynet.
Membership of the European Economic Area, rather than of the Union, is what brings the General Data Protection Regulation to Norway. The 2018 Personal Data Act — personopplysningsloven — gives it force domestically and supplies the national detail the Regulation leaves open to each state. The supervisory authority is Datatilsynet, datatilsynet.no.
Worth saying plainly: duties do not vanish because nothing is collected. Article 13 requires the controller to be identified whether or not data is taken, which is why question three gives a company, a director and a street instead of a brand. Article 5(2) places the burden of demonstrating compliance on us and never on you. And the claim we cannot make is the one most companies make loudest — a long record of guarding your data well. No such record exists here, because nothing is being guarded. It is a thinner boast and a sturdier guarantee: an empty shelf cannot spill.
The listing is worldwide, which means the app is installed by people living in the European Union and in the United Kingdom. A person living in an EU state can put a matter before the authority where they live; a person in the United Kingdom can put it before the Information Commissioner's Office, ico.org.uk, whose authority rests on the Data Protection Act 2018 and the retained British version of the Regulation. Coming to us first is faster and never required.
What can I demand, and what will I actually be told?
Everything Articles 15 to 21 provide — and the honest reply fits in a paragraph.
Those articles cover access, correction, erasure, restriction, portability and objection, and Article 77 adds a complaint to a supervisory authority, which stands whatever anyone writes on a page like this. Write to stjerne@foxas.homes. A month is what Article 12(3) permits; the answer will be quicker than that and brief, because there is no file on you here to produce, correct, erase, freeze or forward anywhere.
No one is asked to establish who they are beforehand. There is no stored material that such a check could protect, and insisting on a photograph of somebody's passport merely to announce that a drawer is empty would be the only point in the entire exchange where anybody's data came near a risk. If the answer does not satisfy you, say so once and it is looked at a second time; beyond that the matter is for Datatilsynet, or for the authority where you live. Nothing written here asks anyone to surrender a right, and nothing written here could.
And if the app changes?
Then this page changes first, and the release follows it.
Should some later build of Nebula take on anything that touches personal data — synchronised storage, a reporter for faults, palettes put up for sale, advertising in any form — these words are redrawn and go up before that build is rolled out, never behind it. The issue line beneath the title moves at the same moment, and a plain summary of what changed goes into the Play release notes as well, so it can be seen from the store by somebody who never opens this page at all.
This address stays where it is while the listing is live. The issue line under the title is the quickest way to tell whether the wording has moved since you last read it.