Privacy
policy.

01 What data does Redact process?

No personal data ever leaves your device.

Redact only processes the images that you actively load into the app from your photo library or your file system. Those images are analysed and anonymised locally on the device, then either saved back to your photo library or exported as a file — at your explicit request.

Redact collects none of the following:

• No account creation, no sign-in
• No analytics, no usage statistics
• No crash reports
• No advertising IDs, no tracking
• No location data
• No contacts, no calendar, no microphone, no camera
• No cloud synchronisation

02 Face data

Redact uses an on-device Core ML model to detect the location of faces in your photos. The detection result is a set of bounding-box coordinates that indicate where a face appears in the image — no facial features, biometric templates, face prints, or other identifying information is ever extracted.

Face data is not collected, stored, or retained. Bounding-box coordinates exist only in volatile memory for the duration of the active editing session and are discarded as soon as you close the image or quit the app. They are never written to disk, never uploaded, and never transmitted over a network.

Face data is not shared with any third party. Redact contains no third-party SDKs, no server connections, and no analytics services. Because no face data is shared, there are no third-party recipients and therefore no third-party storage or retention practices to disclose.

03 Where is data processed?

Entirely and exclusively on your iPhone, iPad or Mac. Face detection runs through Core ML directly on the device. There is no connection to any server — Redact works in airplane mode.

Temporary copies of imported photos are stored in the app's own cache directory to speed up processing, and are cleaned up when the app exits, or at the next launch at the latest.

04 Third parties

Redact bundles no third-party SDKs. No ad networks, no analytics services, no crash reporters, no cloud back-ends.

05 Purchases & in-app purchases

Redact is available as a freemium app on the App Store: the core features are free, and individual Pro features can be unlocked through a one-time in-app purchase.

All purchases are handled exclusively through Apple's App Store / StoreKit. This means:

• The developer of Redact never receives your payment data (credit card, Apple ID, name, billing address). That information stays with Apple.
• The app only receives, from Apple, the information about whether a particular in-app purchase is valid for your Apple ID. This check (receipt validation) happens locally on the device — Redact runs no licensing or activation server of its own.
• Apple provides the developer with aggregated, anonymised sales and download statistics in App Store Connect. None of this data can be linked back to an individual person.

For the processing of your payment data, Apple's privacy policy applies.

06 Permissions

Redact requests two iOS permissions, both exclusively for the core feature:

Both accesses happen locally — the images are never uploaded.

07 Storage & retention

Original images stay where you keep them (the Photos app, the Files app). Redact creates short-lived working copies inside the app container's cache during processing; those are cleaned up automatically.

Anonymised results are only saved if you explicitly trigger it — either back into the photo library or as a file export.

08 Children

Redact is rated 4+. Because no data is collected at all, there are no special rules for minors.

09 Changes to this policy

If anything in this privacy policy changes, the updated version will be published at the same URL. The date at the top of this document indicates the version currently in effect.

10 Contact

For privacy questions or notes, please reach out at hello@vortex-labs.de.