KayePic is a local-first photo toolkit. This policy avoids boilerplate and explains, feature by feature, which data always stays on your phone, which data leaves it, why, and how you can control it.
Picking photos: KayePic uses the system photo picker. We can only read the photos you explicitly select — we cannot scan or browse your photo library.
On-device processing (the only kind): layouts, collages, creative compositions, drawing, subject selections and selective color adjustments, cutouts, nine-grid slicing, screenshot stitching and redaction, batch resizing, Live Photo handling, motion collages, photo soundtracks, and export all run on your device. The current version of KayePic has no feature that sends photos off your device; neither photos nor data derived from them are uploaded to our servers. Originals are never overwritten; exporting only adds new images, videos, or Live Photos.
Historical note: versions before September 2026 offered a cloud restoration feature that required confirmation for each upload. It was discontinued in September 2026. If you used it and want photos retained on our servers deleted, contact us using the address at the end of this page.
KayePic requires no account. To record your subscription (supporter) status, the app exchanges the system-provided, app-scoped device identifier for an access token on our servers; the only data sent with that request is this identifier, the device model, and the OS version. The identifier contains no name, phone number, or email. The system may generate a new identifier after you uninstall and reinstall; a subscription can be restored through your Apple ID.
Payments are handled entirely by Apple In-App Purchase; we never see your card or payment details. To verify purchase status, transaction receipts are validated through RevenueCat (a subscription-verification service), based on which we record your supporter status.
To learn which features are used and where people get stuck, the app reports anonymous usage events to our own self-hosted analytics service (a self-hosted Matomo — no third-party analytics or ad SDKs). Events include: screens viewed, buttons tapped, feature success/failure with error codes, device model, OS version, app version, and interface language.
Reporting uses a randomly generated anonymous identifier that is never linked to your device identifier, account, or purchase history. Reports never include your photos, file names, the names you give to projects or recipes, any text you type, or the aliases you create in screenshot anonymization.
When the app crashes or hangs, iOS produces a diagnostic report (Apple MetricKit), and the app sends it to the same self-hosted service so we can fix the problem. A report contains only the app version, device model, OS version, and where in the program the failure occurred. It does not include any device identifier, the anonymous identifier above, account information, photos, or anything you type; parts of system exception messages that could carry text are removed before sending.
You can turn analytics off anytime (this also turns off crash diagnostics) in Me → Permissions & Local Storage. Once off, nothing is reported and any unsent data is discarded.
Projects, recipes, and saved assets live on your phone; our servers hold no copy. You can delete all local project records in Me → Permissions & Local Storage; deleting the app removes all local data. Screenshot projects still contain the editable originals — share only the output images you have reviewed.
Photo library: we request add-only access, used exclusively to save your exports; we never request read access to your whole library. Denying it does not affect editing — you just cannot save to the photo library.
All communication between the app and our servers uses HTTPS. We collect data on a minimization principle: whatever can be done on-device is not uploaded.
KayePic is not designed for children under 14. If we learn that we have inadvertently collected personal information from a child, we will delete it promptly.
When this policy changes, we update this page and the date at the top; material changes to what we collect will be announced in the app.
For any privacy question, or to request deletion of photos retained by the discontinued cloud feature, email dma_le@outlook.com; Me → Feedback in the app opens the same email address.