Privacy Policy

1. Photos, face analysis and local storage

Shift reads the photo you select or capture to apply effects. Image pixels, editing text, masks, depth estimates and face geometry used for rendering are processed on your device, not uploaded to us, Firebase or Qonversion. Face analysis is for visual effects, not identity recognition or authentication. Working photo-analysis caches are released when the photo session is replaced or closed. Exported photos stay in your chosen library until you delete them; iCloud Photos or a share destination may handle them under your own settings.

2. Permissions, photo locations and model downloads

Camera and Photos permissions are requested for relevant features and can be changed in iOS Settings. A date stamp can read the selected photo’s saved date. When you choose a place-title effect, available GPS coordinates from that photo can be sent to Apple’s geocoding service to obtain a city or country; Shift does not track your live device location. You can enter a title manually instead. AI-model downloads transfer model files from Apple, not your photos, and require storage and a network connection.

3. Apple and Qonversion subscriptions

Apple handles checkout. Qonversion starts with the app to validate purchases, restore them and keep access in sync, even if Firebase analytics is off. It receives an app-specific user or installation identifier, receipt or transaction and entitlement information, app/device/OS versions, language, country or timezone and network information such as IP address. This supports subscription status and subscription lifecycle reporting. We do not send it your photos, photo coordinates or editing text, or receive your full card details. Shift does not request advertising tracking permission or run an advertising network.

4. Optional usage analytics

Google Firebase Analytics collection is disabled until you choose to allow it. If enabled, events cover screens, filter identifiers, export results and timings, and subscription actions. Firebase also processes an installation identifier and standard device/app information and derives approximate geography. This is not completely anonymous data. Photo pixels, photo GPS coordinates and entered text are not event parameters. Advertising personalization is disabled. Declining does not limit your purchase or editing features.

5. Your analytics choice

Change Usage analytics in Shift Settings at any time. Turning it off stops future Firebase Analytics collection and resets the local analytics identifier; it does not automatically erase information already sent. Your consent choice is stored on your device. You can contact us to request deletion or exercise your rights. Subscription verification continues independently so an analytics choice does not remove purchased access.

6. Website and support messages

This website has no analytics SDK, advertising cookies, photo upload service or user account. Firebase Hosting receives technical requests including IP addresses to deliver pages and detect abuse; its published retention for Hosting IP data is a few months. Cloudflare provides the domain’s DNS service. If you email us, we receive the contact details and message you choose to send. Please do not send passwords, full payment-card details or unnecessary sensitive photos. Support correspondence is used to answer and resolve your request.

7. Purposes, legal bases and recipients

Where GDPR applies, processing needed to provide requested editing, place lookup, support and subscription access is based on performing our contract with you. Optional Firebase usage analytics relies on consent. Service security, subscription reconciliation and resolving disputes rely on our legitimate interests in operating a reliable service, balanced against your rights; required legal records rely on legal obligations. Apple, Qonversion, Google/Firebase, DNS and email providers receive data only for the roles described here. We do not sell your photos or personal information. Providers are subject to applicable data-protection requirements and contractual safeguards.

• Apple ↗
• Qonversion ↗
• Google / Firebase ↗
• Cloudflare ↗

8. Retention and international processing

Local settings and downloaded models remain until removed through app/device storage controls or uninstallation, subject to iOS backup behaviour. We retain support and subscription records only as needed to resolve requests, verify entitlements, meet legal duties or handle claims; duration depends on the active subscription, issue and applicable limitation periods. Consented analytics follows the provider’s configured retention and deletion processes, not indefinite retention by us. Providers may process information outside your country, including the US. Where required, transfers use applicable adequacy decisions or appropriate safeguards such as Standard Contractual Clauses; contact us for details relevant to your data.

9. Your rights and requests

Depending on your location, you may request access, correction, deletion, restriction, portability or object to processing, and withdraw analytics consent without affecting earlier lawful processing. Email the contact below; we may ask for proportionate information to locate your app-related record, but not your Apple password. Deleting the app alone neither deletes provider-side records nor cancels an Apple subscription. You may complain to your local data-protection authority, including Romania’s ANSPDCP. We do not use this data for decisions producing legal or similarly significant effects based solely on automated processing.

• ANSPDCP ↗

10. Children, security and updates

Shift is a general-audience photo editor and may be used by minors, including children under 13, where permitted by law and the App Store age rating. A parent or guardian should review permissions, sharing, optional analytics and purchases with the child. The current app does not ask for a date of birth or provide age verification or a verified parental-consent flow. Enabling Firebase analytics is not verified parental consent; Qonversion subscription verification operates separately as described above. Nothing here replaces any parental consent or protection that we are legally required to obtain or provide. A parent or guardian can contact us to request access to or deletion of a child’s information, subject to proportionate verification and legal limits. Do not send unnecessary photos or identity documents. If we learn that a child’s personal information was processed without legally required authority, we will investigate and take the required steps to stop that processing or delete the information. We use reasonable security safeguards but cannot guarantee absolute security. We update this policy and seek a new choice where required when practices change.