Privacy Policy – Photo Respot

Introduction

Eplep.ai ("we", "our", or "us") operates the Photo Respot mobile application. This Privacy Policy explains which data the app processes, where it is stored and which information Eplep.ai receives.

Information We Collect

Data You Provide

• Content, settings and preferences you create in the app

The app also processes your notification preferences.

The app reads subscription status through StoreKit to show the correct access.

Automatically Collected Data

• Device type and operating system version
• App usage statistics (anonymized)
• Crash reports and performance data

Data We Do NOT Collect

• We do not collect your name, email, or contact information unless you contact us directly
• We do not track your location (unless the app requires it for core functionality)
• We do not access your contacts, photos, or other personal files

How We Use Your Data

• To provide the app's features and remember your choices
• To send notifications you have enabled
• To find bugs and improve performance
• To understand how users interact with the app (anonymized analytics)

Data Storage

Device and iCloud

Your data is stored on your device and syncs to your own private iCloud database (CloudKit) when iCloud is available, so you can access it from other Apple devices using the same Apple ID. Eplep.ai operates no server that receives this data and cannot read the private iCloud database.

You can disable iCloud for the app at any time in your device settings.

"Delete My Data" in the app removes data from the device and private iCloud. Uninstalling removes the local copy, but private iCloud data may remain until you delete it in the app or through Apple's iCloud management.

Third-Party Services

Apple Services

• App Store: For app distribution and payment
• StoreKit: For subscription management
• iCloud / CloudKit: For sync between your own devices (if enabled in the app)

These services are governed by Apple's Privacy Policy: https://www.apple.com/legal/privacy/

Data Retention

• Device and iCloud data: Retained until you use the app's deletion feature or remove the data through Apple's iCloud management. Uninstalling alone does not necessarily delete the private iCloud copy.
• Analytics: Aggregated, anonymized data may be retained indefinitely

Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have the right to:

• Access – Request a copy of your data
• Rectification – Request correction of inaccurate data
• Erasure – Request deletion of your data
• Portability – Request your data in a portable format
• Object – Object to processing of your data

To exercise these rights, contact us at support@eplep.ai.

Data Deletion

You can delete your data at any time. Open the app settings and choose "Delete My Data".

The action removes data from the device and private iCloud. If you only uninstall the app, the local copy is removed while data in private iCloud may remain.

Deleting app data does not remove the purchase history Apple retains for payment and restoration.

Discover Drops and Time Capsule

Photo Respot includes an optional feature called Discover Drops, which lets you leave photo drops for others to find nearby, and a Time Capsule mode that locks a drop until a future date. When you create a drop, we apply the following privacy controls:

• Anonymous identity: Each user has an internal anonymous identifier (SHA-256 hash of the device's iCloud record + a local salt). We do not store your name or Apple ID in drops.
• Coordinate jitter (±20 m): Your exact coordinate is hidden. We randomly offset the drop's position by up to 20 meters before upload, so others cannot find the precise spot where you stood.
• EXIF stripping: All metadata (camera info, GPS tags, timestamps embedded in the image) is removed before the photo is uploaded.
• Time Capsule: Photos with a future unlock date are stored as encrypted CKAssets in CloudKit Public Database. The image appears blurred with a countdown for other users until the capsule unlocks.
• Geofence notifications: If you opt in to nearby-drop notifications, your location is matched on-device. We do not send your location to a server.

You can report inappropriate drops via the menu icon in the app. Drops reported three or more times are automatically hidden until we review them manually.

Use "Delete My Data" in Settings to remove all drops you have published from CloudKit Public Database.

Children's Privacy

Photo Respot is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe we have collected such data, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by updating the "Effective Date" above.