Privacy Policy

Last updated: 21 August 2026

This policy explains how KP Studio ("we", "us") handles personal information. It covers this website (kpstudio.au) and the mobile apps we publish: The Porcupine, StampSnap, Local Springs and LocalList.

KP Studio is based in Melbourne, Victoria, Australia and handles personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). Where the EU/UK GDPR applies to you, the rights described below apply as well.

1. Information we collect on this website

This website does not use advertising cookies and does not have logins, carts or comment forms.

• Basic analytics. When you load a page we record the page path, the referring page, any campaign parameters in the URL (for example utm_source), and which download buttons are tapped. This is used only to understand which pages lead people to our apps.
• Server logs. Our hosting provider records standard request logs, which include IP addresses, for security and abuse prevention.

We do not use this information to build advertising profiles, and we do not combine it with data from third-party ad networks.

2. The Porcupine

The Porcupine is a free-market news reader. It is designed to work without an account.

• No account. The app does not require sign-up and does not collect a name, email or payment details inside the app.
• On-device preferences. Topic filters, saved stories, theme and similar settings are stored on your device.
• Content loading. When you open stories or feed content, standard network requests are made to fetch public content. Those requests create ordinary server/CDN logs.
• No advertising SDKs. The Porcupine does not include third-party advertising or behavioural-analytics SDKs.

App-specific notes also live at kpstudio.au/porcupine/privacy/.

3. StampSnap

StampSnap is a timestamp camera app. It is designed to work entirely on your device.

• Photos and captions. Photos you capture and the captions you add are processed on your device and saved to your device. We do not upload, store or have access to your photos.
• Camera access. The app requests camera permission so it can take photos. This is the only purpose it is used for.
• No account. StampSnap does not require you to sign up or provide an email address to use it.

If you email us a screenshot or photo as part of a support request, we only use it to answer that request.

4. Local Springs

Local Springs helps you find springs, saunas and swimming spots on a map. It uses Google Firebase for accounts, its place database and photo storage.

• Account information. If you create an account, we store your email address and display name so you can sign in and so your saved places follow you between devices.
• Location. Approximate and precise location is used to centre the map on you and show nearby springs. This is processed on your device and is only sent to our servers when you submit a spring. Optional background location can be enabled for proximity notifications; it is off unless you turn it on. Location permission is optional — you can browse and search the map without it.
• Springs you submit. When you add or correct a spring we receive the name, type, coordinates, description and any photos you upload, so we can review and publish them. Submissions become part of the public place database, so please don't include personal information in them.
• Saved preferences. Visited and wishlisted springs, plus app settings, are stored so the app remembers them between sessions.
• Diagnostics. Standard app and crash diagnostics may be collected so we can identify and fix faults.

Local Springs does not use advertising SDKs or behavioural analytics. You can delete your account and its associated data at any time by emailing us.

5. LocalList

LocalList lets you save places you want to visit and tells you which ones are nearby. It has no accounts and no backend of ours holding your data — your saved places, notes and settings are stored only on your device.

• Saved places and settings. Everything you save — places, notes, categories, visited marks and preferences — is stored on your device. We cannot see it, and uninstalling the app deletes it.
• Location. Your location is used on your device to sort places by distance, centre the map, and (if you turn proximity alerts on) notify you when you are near a saved place. On Android, optional background location powers those alerts; they are off by default. Your location is never uploaded to us.
• Place search. When you search for a place, your search text and approximate location are sent to Google (Google Places) — or to the OpenStreetMap-based Photon service as a fallback — to return suggestions. These providers process the query under their own privacy policies; we do not attach your identity to it.
• App updates. The app periodically checks our update server for a newer version. That request carries no personal information beyond standard server logs (such as IP address).
• No account, no ads, no analytics. LocalList has no sign-up, no advertising SDKs and no behavioural analytics.

6. Service providers we use

We use a small number of third parties to run our services. They process information on our behalf and are not permitted to use it for their own purposes:

• Google Firebase / Google Cloud — authentication, hosted database (Firestore), photo storage, backend functions and diagnostics where an app needs them.
• Google Maps Platform — maps and related location services in apps that show a map.
• Vercel — website hosting and delivery for kpstudio.au.
• Expo / EAS — app build, update and notification infrastructure where used.
• Apple App Store and Google Play — app distribution, payments and the aggregate, non-identifying statistics they provide to developers.

Some of these providers store data outside Australia. We only use providers that apply recognised security and data-protection standards.

7. What we never do

• We do not sell or rent personal information.
• We do not share personal information with advertising networks or data brokers.
• We do not use your photos, saved places or location for advertising or profiling.

8. How long we keep information

Analytics records are kept only as long as they remain useful for understanding traffic, and are deleted or aggregated after that. Support emails are kept while the matter is open and for a reasonable period afterwards for reference. Local Springs account data is kept while your account is open and deleted when you close it, though springs you contributed to the public map may remain in the database without your name attached. Content that lives on your device stays on your device until you delete it or remove the app.

9. Children

Our apps are general-purpose tools and are not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

10. Security

We use encrypted connections (HTTPS/TLS) for data in transit, restrict access to backend systems, and keep the data we hold to a minimum. No system is perfectly secure, but keeping very little data is the strongest protection we can offer you.

11. Your rights

You can ask us to:

• tell you what personal information we hold about you;
• correct information that is wrong;
• delete information we hold about you;
• stop using your information for a particular purpose.

Email support@kpstudio.au and we will respond within 30 days. You can also withdraw app permissions (camera, location) at any time in your device settings, and delete all locally stored app data by uninstalling the app.

If you are not satisfied with how we handle a privacy matter, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

12. Changes to this policy

If we change how we handle personal information we will update this page and change the "last updated" date above. Significant changes will also be noted in the relevant app's release notes.

13. Contact us

KP Studio
Melbourne, Victoria, Australia
support@kpstudio.au