Privacy Policy

Data Collection

• No account and no sign-in.
• The App uses PostHog for pseudonymous product analytics.
• Bundled PostHog and Meta SDK components may collect crash reports for app functionality and limited technical or operational diagnostic data for app functionality and analytics. Neither is used for tracking.
• The App uses RevenueCat to validate, unlock, restore, and analyze Inset Lab purchases.
• Data that may be collected: pseudonymous app or device instance identifiers, usage events such as app opens, screen views, frame additions, preset saves, export success or failure, app version, OS or device type, and similar technical information. These are not account names or direct identifiers, but Apple App Privacy may treat them as identifiers linked to a user or device.
• When the App is installed through Apple Ads, it may send Apple's attribution result and campaign, ad group, keyword, and ad IDs, claim or conversion type, country or region, and placement to PostHog with pseudonymous usage events to measure campaign performance.
• The Apple Ads attribution token, raw Apple API response, and ad click or impression timestamps are not stored or sent to PostHog.
• Meta ad measurement is enabled only in a supported production release after you allow tracking through Apple's App Tracking Transparency (ATT). The App may then send Meta app activation and first photo export completion events, while RevenueCat may send trial start, purchase, subscription, renewal, and similar purchase lifecycle information to Meta server-to-server.
• If ATT is not authorized, is denied or restricted, or required production configuration is unavailable, the App does not initialize the Meta SDK or send in-app events or Meta's anonymous identifier to Meta. Your choice does not affect using the App, purchasing, or restoring purchases.

Photo Access

• The App requests photo access only to save (add) your edited images to your photo library (“add-only” permission).
• It never reads your existing photo library. Only the photo you choose is passed to the App.
• Photo processing happens on-device. Photos and edited images are not uploaded or transmitted.
• Photo filenames, photo metadata, location data, preset names, and exact custom color values are not included in analytics events.

Information Stored on Your Device

• Saved presets (numeric settings only, such as frame color, width, and ratio) are stored locally on your device. They contain no images or location data.
• Preset names and preset contents are not sent to analytics services. Deleting the App removes local presets.

Third Parties and Ad Measurement

The App sends pseudonymous usage events to PostHog (PostHog, Inc.) for product analytics and advertising measurement, and purchase history and pseudonymous identifiers to RevenueCat (RevenueCat, Inc.) for purchase functionality and analytics. Only after ATT authorization, it may send Meta Platforms, Inc. a Meta anonymous identifier, limited in-app events, and purchase or subscription lifecycle information to measure whether Meta ads lead to downloads or purchases and to improve future ad delivery. Apple defines this purpose as tracking. The App does not display third-party ads, sell data, or provide data to data brokers.

Purchases

• Inset Lab purchases (auto-renewable subscriptions and the one-time Lifetime) are processed by Apple (App Store and StoreKit). The App never collects or stores payment information such as credit card numbers.
• RevenueCat receives purchase history such as receipt and transaction information, product ID, purchase, renewal, expiration, and restore status. It uses this data to validate purchases, unlock Lab, and provide purchase analytics.
• The App sends RevenueCat an automatically generated pseudonymous App User ID and a pseudonymous PostHog user ID. RevenueCat automatic device-identifier collection is disabled. The App has no account system and does not set a name, email address, phone number, Apple Account, or photo on these IDs.
• RevenueCat sends purchase lifecycle events to PostHog. In a production release where ATT is authorized and the Meta integration is explicitly enabled, RevenueCat may also send configured trial start, purchase, subscription, renewal, and similar events to Meta. Server-to-server delivery without ATT authorization is not enabled. The App does not send purchase or revenue events to Meta from both the client and RevenueCat.

Choices, Retention, and Deletion

• You can change Meta ad measurement permission at any time in iOS Settings. After permission is withdrawn, the App stops sending new tracking data to Meta. Data already sent remains subject to each recipient's retention and deletion practices.
• Deleting the App removes local presets and local App state. Pseudonymous data held by PostHog, RevenueCat, or Meta may be retained under their retention policies and as needed for security, fraud prevention, accounting, or legal obligations.
• The App has no account system. Contact the address below with a privacy inquiry or deletion request. To locate pseudonymous records, the developer may ask for an identifier displayed on your device, limited to what is necessary to fulfill the request.

Children’s Privacy

The App is not directed to children. It does not ask for directly identifying information such as name, email address, or age.

Changes to This Policy

This policy may be updated. Material changes will be noted in the app’s release notes or on this page.

Contact

For questions about the App or privacy, contact contact@atelier-yohaku.com.