Privacy Policy — Emberlens
Effective date: 9 October 2026 Developer: Pankit Shah · Contact: pankit.shah@gmail.com
Fill in the two placeholders before you publish. If the app gets a new name, replace "Emberlens" everywhere.
In short
Emberlens does not collect your data. We have no servers, no accounts, no analytics and no ads. Your photos and labels stay on your iPhone. They leave it only when you export them, and they go only to the place you choose.
1. What stays on your device
| Data | Where it is | Who can see it |
|---|---|---|
| Photos you take with Emberlens or import into Emberlens | In Emberlens's private folder on your iPhone | Only you |
| Projects, labels, outlines, blur areas | In a database in the same private folder | Only you |
| Settings for cloud export (for example a bucket name) | In Emberlens's private folder | Only you |
| Passwords and keys for cloud export | In the iPhone Keychain (encrypted by iOS, not synced to iCloud) | Only you |
- Emberlens never writes to your photo library or camera roll.
- Emberlens's private folder is excluded from iCloud and computer backups. If you delete the app, all of this data is deleted with it, and it cannot be restored.
- When you delete a project, its photos and labels are deleted from your iPhone.
2. Camera and photos
- Camera: Emberlens uses the camera only when you open the capture screen. The photos go into Emberlens's private folder, not into your photo library.
- Import from Photos: Emberlens uses Apple's photo picker. You choose the photos. Emberlens receives copies of only the photos you choose, and it cannot see the rest of your library. Emberlens saves each copy again without metadata, so the location (GPS), the camera details and the date are removed.
3. Features that run on your iPhone
Auto-detect (finds objects), Auto outline (draws the outline of an object) and Find faces (marks faces to blur) all run on your iPhone. No photo is sent anywhere for these features. Face finding only marks where a face is. It does not recognise who the person is, and it stores nothing about faces except the blur areas you keep.
4. When data leaves your device
Data leaves your iPhone only when you tap Export:
- Share sheet: you choose the app or place (for example Files, AirDrop, or email). What happens next is set by that app's own privacy policy.
- Cloud upload: Emberlens sends the export directly to the storage that you set up (for example your own Amazon S3, Azure, Google Cloud Storage, Cloudflare R2, Backblaze B2, Wasabi or WebDAV storage), with your own keys. We do not see the data or the keys. The storage provider's privacy policy applies.
An export contains the photos you choose to export (with your blur areas pixelated), the label files and a short description of the dataset (project name and category, label names, export date and settings). Exported photos contain no metadata.
5. Purchases
Emberlens Premium is a one-time purchase through the App Store. Apple handles the payment. We receive no payment details from you. Emberlens only checks with the App Store whether Premium is unlocked on your Apple ID.
6. What we do not do
- No accounts and no sign-in.
- No analytics, no tracking, no ads, no third-party SDKs that collect data.
- We do not sell or share your data, because we do not have it.
7. Children
Emberlens is not directed at children under 13, and it collects no data from anyone.
8. Your rights
Under laws such as the GDPR (EU and UK) and the CCPA (California), you have rights to access, correct and delete your personal data. We hold no personal data about you, so there is nothing for us to give or delete. You control all of your data in the app: you can export it, change it, or delete it at any time.
9. Changes
If this policy changes, we will update this page and its effective date. If a change would mean that data leaves your device in a new way, the app will ask you first.
10. Contact
Questions: [contact email]