Privacy

Collect the minimum needed to run creator accounts and protect the library.

Account data

Creator accounts store a name, email address, Auth0 subject identifier, and upload history. Auth0 handles credentials and sessions; CorosLink does not store passwords.

Content moderation

Watch-face names, descriptions, and supported image assets are sent to OpenAI's moderation service to detect disallowed content. ZIP archives, account credentials, and creator email addresses are not sent for content moderation.

Security records

Package hashes, scan decisions, and redacted audit events are retained to investigate abuse. Raw IP addresses are not stored in the application database.

Rejected uploads

Rejected ZIP files are deleted after the quarantine retention window. Decision codes and package hashes may be retained to prevent repeated abuse.