Privacy Policy

Contact for privacy and support: yisheng.jiang@gmail.com.

Camera & photos (device). The iOS app requests camera access to show a live viewfinder, apply field recipes / Auto Optimize settings, and capture photos. Captures are saved to your device Camera Roll (Photos library add permission). We do not sync your full Camera Roll or keep a cloud photo album.

Recommend / Apply look / Auto Optimize vision. When you use Recommend, Apply look, Ask with an image, or Auto Optimize’s vision step, a compressed probe frame or a photo you select may be sent to our API and then to xAI for that request only, solely to return recipe / dial recommendations. We do not upload your full Camera Roll. Images are held in memory for that request (not written to our disk or database as a permanent archive); we do not use your photos for advertising.

Microphone & voice (optional). If you use voice input / dictation for scene description, the app may use the microphone. Speech-to-text prefers on-device recognition first. Cloud STT (and related Recommend text) runs only as a fallback when on-device is unavailable or when you use a feature that needs it. We do not use voice data for advertising.

Push notifications (optional, iOS). After you opt in (typically offered after a first capture path), we may register an APNs device token with your guest / anonymous id and related notification preferences so we can send product notifications you chose to receive. Push tokens and prefs are not sold. You can turn notifications off in iOS Settings at any time.

Personalized notifications. To decide whether a notification is useful (for example a tip a day after install, or a reminder about a shot you started but did not take), the app sends its anonymous telemetry install id together with the push token, and our server reads counts and times of that install’s in-app events (for example “captured 2 photos this week”, “viewed the Pro screen”, the name of a look you used most). We never use your photos, frames, voice, or typed text for this. A short, coarse summary — such as “used Auto Optimize: yes, photos last week: 1–3, favorite look: Warm Film” — with no ids, device token, or timestamps, may be sent to xAI so Grok can write the wording of the notification. Promotional notifications (shooting ideas after a break, feature news, Pro offers) are sent only if you turn on Settings → Notifications → Tips & offers (off by default). We send at most one notification a day and three a week, never during quiet hours in your time zone.

Motion (iOS, optional). Motion sensors may be used on-device for a horizon level while shooting. Motion data is not sent for analytics.

Guest / anonymous identifiers. The Service does not use a traditional login account. On the web we may set an httpOnly guest cookie; on iOS we use anonymous / guest ids. These identifiers support Free Peek quota, Pro entitlements, optional push delivery, and in-house telemetry — not a profile you sign into with a password.

Local app data. Favorites, checklist progress, and similar preferences may be stored in browser localStorage or on-device storage. That data stays on your device unless a feature explicitly syncs it (most Free Peek state is local-only today).

Subscription & billing.

• Web: ProTune AI Camera Pro is sold via Stripe Checkout. Stripe processes your payment details. We receive subscription status, customer/subscription identifiers, and the email Stripe associates with the purchase so we can unlock Pro (signed httpOnly cookies / entitlements). We do not store full card numbers on our servers.
• iOS: In-app purchases use Apple StoreKit / In-App Purchase. Apple processes payment. We verify receipts with Apple to unlock Pro. Manage or cancel iOS subscriptions in your Apple ID subscription settings (ProTune AI Camera Pro).

Email (optional). If you join the waitlist or field notes list on the marketing site, we store the email you submit (locally and/or via our email provider, Resend) to send product updates. You can ask us to remove it (see Contact).

Telemetry (privacy-first). We run in-house product / funnel analytics. Clients may send allowlisted event names and non-sensitive properties to POST /api/telemetry. Events use an anonymous anon_id / guest id and short-lived session_id. We do not send photos, camera frames, GPS, names, emails, or tokens in telemetry props. Apart from Meta App Events for ad attribution (below), we do not use third-party analytics/crash SDKs (no TelemetryDeck, Sentry, or session replay). The server may store an optional salted IP hash for abuse resistance.

Ad attribution (iOS app 1.2 and later). We advertise the app (for example with App Install ads on X or Meta) and use Meta App Events to learn which ads lead to installs, free trials, and subscriptions. The Meta SDK in the app may send:

• Device identifiers: Apple’s advertising identifier (IDFA) only if you allow tracking in Apple’s “Allow … to track your activity” prompt, plus Meta’s anonymous app-instance identifier.
• Usage events: install / session signals (activateApp), and when you start a free trial or buy a subscription (product, price, and currency — never payment details).

We use this only for advertising measurement: counting installs and subscriptions per ad campaign and deciding where to spend on ads. Device-level data is shared with Meta only if you allow tracking. We never send your photos, voice, or scene text to Meta or ad networks. Meta processes this data under its privacy policy.

Your choices: you can decline the tracking prompt, or turn tracking off later in iOS Settings → Privacy & Security → Tracking; the app works the same either way. When tracking is off, the IDFA is not available to us or Meta. The app also uses Apple’s SKAdNetwork / AdAttributionKit, which report installs to ad networks without any device identifier; we receive copies of those Apple-signed reports at grepawk.com and keep them for campaign measurement. To ask us to delete attribution data tied to your device, email us (see Contact).

Technical logs. Our servers and host may automatically receive standard request metadata (e.g. IP address, user agent, timestamps) in access logs for security and reliability.

• Provide live camera coaching, Recommend / Apply look, Auto Optimize, Ask / Photo Vision, and recipes
• Authenticate Pro entitlements (Stripe web or Apple IAP)
• Enforce Free Peek quota and guest entitlements via guest / anon ids
• Deliver optional product push notifications when you opt in
• Choose and word those notifications from anonymous in-app event counts (see “Personalized notifications”)
• Improve the product via aggregated, privacy-preserving funnel metrics
• Measure which of our ads lead to installs, trials, and subscriptions (ad attribution) and prevent ad fraud (iOS app 1.2+)
• Send optional waitlist / field-notes email if you opted in
• Prevent abuse, debug outages, and comply with law

We share data only as needed to run the Service:

• xAI — for Recommend / Apply look frames, Ask, vision, cloud STT fallback, and related AI features when you use them; and, when you have notifications on, a coarse anonymous activity summary (no ids, photos or text) so Grok can write notification wording
• Apple — App Store / IAP billing and receipt verification; APNs to deliver push when you opt in
• Stripe — web payments and billing portal
• Resend — if you submit an email to waitlist / field notes
• Meta (Facebook) — App Events for ad attribution in the iOS app (1.2+): install / session signals and trial / purchase events (product, price, currency); IDFA only if you allow tracking
• Ad networks we advertise on (e.g. X) — attribution results for our campaigns via Apple SKAdNetwork / AdAttributionKit and Meta; device-level only if you allow tracking
• Hosting / infrastructure providers that process data under our instruction to serve the site and API

We do not sell your personal information, including push tokens or guest ids. Sharing device identifiers with ad networks to measure our own ads may count as “sharing” or “targeted advertising” under some US state privacy laws; declining or turning off tracking (see “Your choices” above) opts you out.

The Service does not require a traditional username/password account. Web access uses an httpOnly guest cookie plus Stripe checkout cookies when you buy Pro; iOS uses anonymous / guest ids and Apple ID purchases for Pro.

Local data: clear site data in your browser, or delete the iOS app, to remove localStorage / on-device preferences and local guest state.

Subscriptions: cancel web Pro via Stripe billing portal (Manage billing in the app) or email us; cancel iOS Pro in Settings → Apple ID → Subscriptions.

Push: turn off Tips & offers in the app’s Settings to stop promotional notifications, disable notifications in iOS Settings, or delete the app, to stop delivery. Email us if you want server-side token / preference records removed.

Email / entitlements deletion: email yisheng.jiang@gmail.com with the address used for Stripe or waitlist and we will delete or anonymize associated records we control, subject to legal/accounting retention (e.g. payment records held by Stripe/Apple).

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

Servers may be located in the United States or other regions where our hosting providers operate. By using the Service you understand your information may be processed in those locations.

We may update this policy from time to time. The “Last updated” date at the top will change. Continued use after changes means you accept the updated policy.

Questions or deletion requests: yisheng.jiang@gmail.com. More help: Support.