Privacy Policy

Carthage Labs ("we", "us") makes the Passport Photo app for iPhone, iPad and Android (the "App"). This policy explains what the App collects, why, where it is kept and the choices you have. In short: your photos are processed on your phone, we keep only what the App needs to work, and we never sell your data.

1. Your photos

Face detection, background removal, sizing and the photo check all run on your device, using Apple Vision on iPhone and Google ML Kit on Android. Your photos are not sent to us for processing.

• Saved on your phone: the photos you take or pick, and the finished photos you save to your gallery or share.
• Photo history: to show your History, the App stores a record of each finished photo in our database: the document type, the date, the photo check results and where the files are on your phone.
• Photo backup (optional, off by default): only if you sign in with Google or Apple and turn on Photo backup in Settings, the finished photo and the original are uploaded to secure cloud storage (Google Firebase) in your account, so you can restore them on another phone. You can turn this off at any time.

2. Device identifier

The App reads an identifier for your device: the Android ID on Android, and a random ID the App creates and keeps in the iOS Keychain on iPhone and iPad. We use it for one purpose only: to count the free exports used on this device, so the free limit can't be reset by signing out or reinstalling the App.

• We store it with only the number of free exports used and when that number last changed.
• It is not linked to your name, email or account, and contains no personal information.
• It is not used for advertising, tracking or profiling, and is not shared with anyone.
• It is kept when you delete your data in the App, so the free limit stays fair. It changes if you factory-reset your device. You can ask us to delete it at any time (see section 9).

3. Your account

• Guest account: when you first open the App, an anonymous account is created automatically (Firebase Authentication). It has no name or email and lets the App keep your history and purchases.
• Sign in with Google or Apple (optional): we receive your email address and name from Google or Apple. With Sign in with Apple you can choose to hide your email.
• Account record: your plan (Free or Pro), number of exports and the date you joined.

4. Purchases

Pro is bought through the App Store or Google Play, who handle payment. We never see your card details. We use RevenueCat to confirm your subscription; it receives your anonymous account ID and your purchase history from the store.

5. Advertising

The free version shows ads from Google AdMob and its partners (Meta Audience Network, Unity Ads, ironSource and Liftoff). They may collect your device's advertising ID, IP address and ad interactions to show and measure ads. In the EEA, UK and Switzerland you are asked for consent first (Google's consent form), and on iPhone the App asks for tracking permission (App Tracking Transparency). You can reset or limit your advertising ID in your device settings. Pro has no ads.

6. Analytics and crash reports

We use Firebase Analytics to see how the App is used (for example, which screens are opened and whether a photo check passed), Firebase Crashlytics to receive crash reports (device model, OS version and what went wrong) and Firebase Remote Config to adjust settings without an update. This data is not used to identify you.

7. Feedback

If you send feedback from the App, we receive your message, your email if you add it, the App version, your phone's system and language, and whether you have Pro. We use it only to reply and improve the App.

8. Permissions

• Camera: to take your photo.
• Photos: to pick an existing photo and to save the finished one.
• Tracking (iPhone, optional): for personalised ads; the App works the same if you refuse.

9. Keeping and deleting your data

We keep your data while you use the App. You can delete it yourself: Settings → Account → Delete my data. This removes your account, your photo history, your backed-up photos and your account record. See Delete your data for details. Subscriptions must be cancelled separately in the App Store or Google Play. To delete anything else, including the device record in section 2, email us at medshi8@gmail.com.

10. Service providers

Each provider handles data under its own privacy policy. Data may be processed in the United States and other countries where these providers operate, with the safeguards they provide.

11. Your rights

Depending on where you live (for example under the GDPR in Europe or the CCPA in California), you can ask to access, correct, delete or receive a copy of your data, object to or restrict its use, and withdraw consent. We don't sell or share your personal information for cross-context advertising beyond the ad providers above, and you can turn off personalised ads in your device settings. Email us to use any of these rights; you can also complain to your local data protection authority.

12. Children

The App is not directed at children under 13 (or the minimum age in your country). Parents can make photos for a child using their own phone. We don't knowingly collect personal information from children.

13. Security

Data is sent over encrypted connections and stored with Google Firebase, which encrypts it at rest. Access to your records is limited to your own account by our database rules.

14. Changes

If we change this policy, we'll update the date at the top, and tell you in the App if the change is significant.

15. Contact

Carthage Labs · medshi8@gmail.com