PhotoFitPrivacy Policy
PhotoFit is an Android and iOS app for compressing, resizing, cropping, converting, fitting ID photos, and removing metadata from photos. Photo content is processed on the user's device and is not uploaded to the operator's server. The operator does not run a server for the app.
Summary: PhotoFit has no accounts, sign-in or operator-run cloud storage. Google AdMob (ads) and Firebase Crashlytics (crash reports) are always active. Firebase Analytics runs when "Share anonymous diagnostics" is on in Settings. Starting with Android and iOS version 1.0.30, it is enabled by default if no choice has been saved; earlier versions default to off. Existing opt-outs are preserved, and you can turn it off at any time.
1. Information processed and purposes
| Category | What is processed | Purpose |
|---|---|---|
| Photos and results | Photos you pass to the app through the system photo picker or sharing, and the results the app creates | Compression, resizing, cropping, format conversion, metadata removal, saving and sharing. Processed only on the device |
| Face position detection | The position of faces in a photo for the ID photo feature (Android: Google ML Kit face detection, iOS: Apple Vision) | Cropping to ID photo specifications. Processed on the device; faces are not identified or stored |
| On-device AI request text | The task description you type (Android: Gemini Nano, iOS: Apple's on-device model) | Suggesting task settings. Processed on the device and not sent to external servers |
| Local settings and history | Default quality, format and display mode, recently chosen specifications, save count, ad pacing, etc. | Keeping settings and showing recent work. Stored only on the device |
| Crash diagnostics (always) | Stack traces when the app crashes, device model, OS and app version, device state such as memory and storage, Crashlytics installation identifier | Analyzing and fixing errors with Firebase Crashlytics |
| App usage (optional, on by default from 1.0.30) | If "Share anonymous diagnostics" is on: app instance ID, automatic Firebase events such as app opens and screens, ad impression and revenue events, on Android also target-size and output-format events, device, OS and app version, approximate region estimated from the IP address. On iOS the IDFA may also be processed if you allow tracking | Understanding feature use and improving quality with Firebase Analytics |
| Advertising (always) | Advertising identifiers (Android advertising ID and app set ID, iOS IDFA when tracking is allowed), approximate region estimated from the IP address, ad impressions and interactions, device, app and diagnostic information, consent status | Serving and measuring Google AdMob ads, frequency capping, invalid-traffic prevention, consent management with Google UMP |
| Unity Ads (AdMob mediation bidding partner) | The Android and iOS apps include the Unity Ads SDK, which may process advertising identifiers, approximate location, ad interactions, and device and diagnostic information when ads are served through AdMob. Handling follows the Unity Privacy Policy | Serving ads and preventing fraud |
Events sent to Firebase Analytics never include photos, file paths, file names or AI request text. PhotoFit does not access location permissions, the camera, the microphone or contacts.
2. Photo content and device permissions
- The operator does not collect or store original photos or results on its own server. The app's code has no network path that sends photos off the device.
- Android uses the system Photo Picker and iOS uses the system PhotosPicker, so the app can access only the items you select and does not request full photo library read access.
- On iOS, add-only photo library access is used only when you save a result. On Android, results are saved to Pictures/PhotoFit or Documents/PhotoFit.
- Location (GPS) metadata inside a photo is only read to show and remove it, and is not sent anywhere.
- On Android, the face detection model is provided by Google Play services. Google ML Kit may send Google diagnostic information such as device and app information, installation identifiers, performance metrics, input and output sizes and error codes, but not the image content.
- If you choose to share, the result is sent to the app or service you pick, and that service's policy applies from then on.
- Depending on device settings, local app data may be handled by Google or Apple backup and device-transfer features.
3. Third-party services and international processing
PhotoFit uses Google AdMob, Google User Messaging Platform, Firebase Crashlytics, Firebase Analytics (when enabled in Settings) and Google ML Kit (Android), all provided by Google LLC. Google may use servers or processors in the United States and other countries, and the actual items, locations and retention can vary with your platform, region, settings, consent status and the provider's policies.
- The ad SDK starts only after the UMP consent flow has finished and ad requests are allowed. Firebase Crashlytics runs regardless of ad consent or the "Share anonymous diagnostics" setting.
- iOS App Tracking Transparency (ATT): the iOS app asks whether you allow tracking for ads. If you do not allow it, the IDFA is not used.
- Google Privacy Policy
- Firebase privacy and security
- How Google uses information in advertising
4. Retention and deletion
- Local settings and history remain on the device until you delete the app data or the app. The Android app can reset recent history in settings.
- Saved results are managed by you in the photo library or the storage location you chose.
- Crashlytics crash reports are kept by Google for 90 days and then deleted.
- Firebase Analytics data is deleted according to the Google Analytics data retention setting (user- and event-level data for at most 14 months); aggregated statistics that do not identify individuals may remain. Turning off "Share anonymous diagnostics" stops further collection.
- Retention and deletion of advertising data follow Google's policies.
- Because the operator holds no accounts or server-side user identifiers, it cannot link SDK data to a particular user or delete it from the app. Contact us and we will explain the options available.
5. Your choices and rights
- Turn Firebase Analytics collection on or off with "Share anonymous diagnostics" in the app's settings (off by default).
- Where ad consent is required, you can change your choice from the privacy options in the app's settings.
- Manage the advertising ID (reset or delete on Android) or app tracking permission (iOS) in device settings.
- Change photo access in the operating system settings, and remove local settings and history by clearing app data or uninstalling the app.
- Requests to access, correct, delete or restrict processing under applicable law can be sent to the email address below.
6. Sharing, sale and protection
The operator does not sell photo content or personal information and does not provide information it holds to third parties except where required by law. SDK processing follows the purposes above and each provider's policies, and SDK communication uses encrypted connections (HTTPS).
7. Children's privacy
PhotoFit is not designed primarily for children under 14 and does not intend to knowingly collect children's personal information directly. If we become aware of such processing, we will take reasonable steps under applicable law and provider procedures.
8. Changes and contact
This revision (September 14, 2026) reflects how the app actually works: Firebase Analytics is opt-in, Crashlytics is always active, and face detection and AI requests are processed on the device. We will post important future changes on this page before they take effect. Send privacy questions to gwangy.claw@gmail.com.