No accounts.
No sign-in, no profile, no password to forget. The app opens to the work itself.
№ 01 — Redact macOS · iPadOS · iOS
Faces off.
A native app for macOS and iOS that pixelates faces in your photos — automatically, locally, and entirely without the cloud.
The safest image is the one that never leaves your device.
No analytics.
No telemetry. No crash reports. No third-party SDKs. Nothing about your usage is collected, anywhere.
No cloud.
Your photos never leave the device. The app cannot phone home because there is no home to phone.
Built around
a single principle.
Most "privacy-first" apps ask you to trust a privacy policy. Redact removes the need to trust at all — there's no telemetry to disable, no consent dialog to dismiss, nothing hidden behind a setting.
- № 01
On-device intelligence
The face detection model runs through Core ML on the Apple Neural Engine. Every detection happens on the chip in your hand. Works in airplane mode.
- № 02
Zero tracking
No analytics. No crash reports. No fingerprinting. No advertising IDs. There is nothing to opt out of, because nothing was opted in.
- № 03
Native, end to end
SwiftUI on macOS 14+ and iOS 18+, drag-and-drop on the desktop, PhotosPicker on the phone. No Electron, no web wrappers, no compromises.
From a folder of strangers
to a folder you can publish.
- 01
Drop the photos
Drag a folder onto the Mac app or pick from PhotosPicker on iOS. Single image, batch of fifty, or a thousand at once — same flow.
- 02
The model finds the faces
Core ML runs the face detection model on the Neural Engine. Even small or partly occluded faces in crowds get caught, in seconds.
- 03
Export the result
Each face gets a Core Image pixelation filter. Save back to the photo library or export as files. The originals are never touched.
No data ever leaves
your device.
- — No accounts, no sign-ins, no passwords.
- — No analytics, no crash reports, no telemetry.
- — No third-party SDKs, no advertising IDs.
- — No cloud sync, no remote servers.
- — No location, contacts, microphone, camera.
The app cannot phone home because there is no home. That isn't a privacy-policy claim — it's how the app is built.
Read the full policy