Privacy Policy

Effective: 2026-09-28 · Last updated: 2026-10-13

This English text is the authoritative version of this page; translations are provided for convenience. For users in Türkiye, the Turkish version prevails (see section 13).

1. Who we are

Pixfect is made by HD App Studio, a brand of HD Yapımcılık ve Teknoloji Ltd. (“we”, “us”). We are the data controller for the processing described here. Contact: info@hdappstudio.com.

2. What never leaves your iPhone

Everything Pixfect does to your pictures happens on the device, using the iPhone’s own processors and AI models that are either bundled with the app or downloaded once and then run locally. This covers the camera and its live beauty effects, retouching, face analysis, object removal, background tools, filters, Enhance and “Quality” upscaling, and the metadata cleaner.

• Photos and videos — neither the originals nor your edited versions are sent anywhere.
• Face data — face landmarks, skin and hair masks and similar analysis results exist only in the device’s memory and in the app’s private storage while you edit. They are never uploaded and never used to identify anyone.
• Camera and microphone — used only while you use the camera. Audio is recorded only into your own videos.
• Location — the app never asks for location permission and never reads your GPS position. When “Strip metadata” is on (the default), location and camera details are removed from the copy you save; your original photo is not changed.

Access to your photo library

You choose photos with the system photo picker, so Pixfect only ever receives the pictures you pick; it cannot browse your library. To save results, the app asks for “add only” permission, which lets it add new photos and videos but not read existing ones.

Storage on the device

Your in-app library (edit projects, thumbnails and edit history), caches and downloaded models are kept in the app’s private storage on your iPhone. Downloaded models and regenerable image caches are excluded from backups; your edit projects may be included in your own iCloud or computer backup of the device, like other app data, according to your backup settings. We have no access to your device or its backups. Deleting the app deletes all of this.

3. What is collected, by whom, and why

The table below matches the “App Privacy” answers we give on the App Store. None of this data is linked to your identity (we do not know who you are: there is no account, name or e-mail in the app) and none of it is used for tracking.

Not collected: photos or videos, face data, audio, precise location, contacts, name, e-mail address, phone number, health or fitness data, payment card details (Apple handles payment and never shares card data with us), browsing or search history, advertising data, or any other content you create.

Google Analytics for Firebase and Firebase Crashlytics

We use the version of Google Analytics that does not access the advertising identifier (IDFA), and advertising-personalisation signals are switched off. Google processes this data on our behalf. Google states that Analytics does not log or store full IP addresses; they are used to derive the approximate region and then discarded. See Firebase privacy information.

Turning analytics off: in Pixfect, open Settings → Anonymous usage analytics (on by default) and switch it off. From then on the app sends no usage events at all, Google Analytics collection is switched off on your device and the analytics data stored on the device is reset; the choice is remembered. Crash reports from Firebase Crashlytics continue, because we need them to fix crashes; they contain no photos and no record of what you edit (see section 7 — you can object to them by e-mail).

RevenueCat

RevenueCat checks your App Store receipt so that Pixfect Pro unlocks on your devices and can be restored. RevenueCat creates a random anonymous user ID for this; the app never sends a name, e-mail or any other identifier. See RevenueCat’s privacy policy. Payments themselves are processed by Apple under Apple’s privacy policy.

4. When the app uses the network

Pixfect connects to the internet for exactly these purposes, and never to upload an image:

1. Subscriptions — RevenueCat and Apple’s App Store (checking and restoring Pixfect Pro).
2. Analytics and crash reports — Google Firebase, as described above.
3. Model downloads — some AI engines are downloaded the first time you use them (over Wi-Fi or mobile data; downloads over 100 MB ask you first), from our public repository on GitHub (github.com/onurensert/pixfect-models, served through GitHub’s download servers). The request is an anonymous file download: it contains no identifier and none of your data. Like any web server, GitHub sees the device’s IP address and standard request information. Downloaded models can be deleted in Settings → Downloaded models.
4. Pages you open — when you tap Privacy Policy, Terms of Use or a licence link, the page opens in an in-app Safari view and is loaded from pixfect.hdappstudio.com (or, for the model licence, huggingface.co). These pages of ours contain no scripts and set no cookies; our web server receives the normal request information (such as IP address and browser type).

Other things that stay on the device: reminders about your free trial are local notifications scheduled on the iPhone (you can turn them off in Settings → Reminders); rating requests use Apple’s standard prompt.

5. No advertising, no tracking

Pixfect shows no ads and contains no advertising SDKs. It does not use the advertising identifier, does not show the App Tracking Transparency prompt, does not combine data with data from other companies’ apps or websites, and does not share data with data brokers. We do not sell or rent personal data.

6. If you contact us

“Send feedback” in Settings opens your own mail app with a message to info@hdappstudio.com, pre-filled only with the app version, your device model (for example “iPhone16,1”) and iOS version. You can edit or delete that before sending. We use your e-mail address and message only to reply and keep them only as long as needed to resolve your request.

7. Legal bases (GDPR and Turkish KVKK)

• Subscription status and purchase records — needed to provide the subscription you bought (performance of a contract; GDPR Art. 6(1)(b), KVKK Art. 5(2)(c)), and to meet accounting obligations.
• Crash reports and performance data — our legitimate interest in keeping the app stable and fast (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)).
• Anonymous usage analytics — our legitimate interest in understanding which features are used so we can improve them (GDPR Art. 6(1)(f), KVKK Art. 5(2)(f)). You can object at any time by switching off Settings → Anonymous usage analytics in the app, or as described in section 9.
• Support e-mails — answering your request (GDPR Art. 6(1)(b) and (f), KVKK Art. 5(2)(c) and (f)).

8. Where data is processed and how long it is kept

Google, RevenueCat, Apple and GitHub may process data on servers outside Türkiye and outside the European Economic Area, including in the United States. Where required, such transfers rely on the safeguards these providers offer (such as standard contractual clauses) and on the conditions of KVKK Article 9.

• Google Analytics event data: at most 14 months, then deleted automatically.
• Crashlytics crash reports: about 90 days.
• RevenueCat subscription records: for as long as needed to provide and restore your subscription and to meet legal and accounting obligations.
• On your device: until you delete your projects, clear downloaded models or delete the app.

9. Your rights

Under the GDPR and KVKK (Law No. 6698, Article 11) you have the right to learn whether data about you is processed, to request information about it, to learn its purpose and recipients, to request correction or deletion, to object to processing based on legitimate interest, to restrict processing, to data portability, and to claim compensation for unlawful processing. You may also complain to your data protection authority (in Türkiye, the Personal Data Protection Authority — KVKK; in the EU, your local supervisory authority).

Because the app has no account and uses only random identifiers, we generally cannot link data to you personally. Practical ways to exercise control:

• Deleting and reinstalling the app resets the Firebase and Crashlytics identifiers and removes all data stored on the device.
• To manage or cancel your subscription, use Settings → Apple ID → Subscriptions on your iPhone.
• To stop usage analytics, switch off Settings → Anonymous usage analytics in Pixfect. The app then sends no usage events and Google Analytics collection is switched off; crash reports continue.
• For any other request, including an objection to crash reports or analytics, write to info@hdappstudio.com. We answer within 30 days at the latest and free of charge.

10. Children

Pixfect is a general photo editor and is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has sent us personal data (for example by e-mail), contact us and we will delete it.

11. Security

All network connections use HTTPS. Downloaded models are verified with a SHA-256 checksum before use. Images and edits stay inside the app’s sandboxed storage protected by iOS.

12. Changes

If our data practices change, we will update this page and its date before the new version of the app is released, and describe significant changes in the app’s release notes.

13. Governing language

This English text is the original and authoritative version of this Privacy Policy. Translations into other languages are provided for convenience only. In case of any dispute or discrepancy between a translation and this English text, the English version prevails and is used. The only exception is the Turkish version, which prevails for users in Türkiye.