Privacy Policy

Last updated: 4 June 2026

This policy explains what Pairframe (“Pairframe”, “we”, “us”) does with information when you use the Pairframe app. By using the app you agree to this policy. Questions: membrain.app@gmail.com.

1. No account, no sign-in

Pairframe works without an account. We do not ask you to register, and we do not collect your name, email address, phone number, contacts, calendar, or precise location.

2. Your photos stay on your device

When you add a photo to a frame, everything happens locally on your device — including the optional on-device background removal (using Apple’s on-device Vision framework). Your photos and the frames you create are never uploaded to us or to any third party. We never see them.

3. Anonymous usage analytics

To understand which frames, palettes, and features are popular and whether the core “share & claim” flow works, we collect anonymous, aggregated usage events through our own backend (Supabase, hosted in the EU). Specifically:

• Events are tagged with a random identifier that rotates every day — it is not your device ID, not your advertising ID, and cannot be traced back to you across days.
• We record things like “a frame of type X was used”, “an export happened”, and the share→claim funnel — as counts, using fixed categories only. Free-text is never stored.
• The short share/claim code that links a sender and recipient is one-way hashed on our server (we never store the raw code).
• We do not store your IP address, name, handle, exact file sizes, or any device advertising identifier in our analytics.
• The detailed event layer is automatically deleted after 14 days; only anonymous aggregate counts are kept longer.

Your choice: In the EU/UK, analytics is off until you opt in. Anywhere, you can turn it off in the app. If a user is identified as under 13, analytics is disabled entirely (see “Children”).

4. Advertising (Google AdMob)

The free version of Pairframe shows ads via Google AdMob. We serve non-personalized ads only and we do not use App Tracking Transparency / cross-app tracking — Pairframe does not track you across other companies’ apps or websites. To deliver and measure ads, Google may process certain device information and identifiers as an independent service; for users flagged as below the age of consent, ads are requested as non-personalized and age-appropriate. See Google’s Privacy Policy and how Google uses data. Plus members and the under-13 child-safe mode see no ads.

5. Purchases (Apple)

Pairframe Plus and packs are one-time purchases handled by Apple’s App Store / StoreKit. Apple processes the payment — we never see your card details or Apple ID. To unlock what you bought and to restore it (e.g., after reinstalling), we store a minimal pseudonymous entitlement record on our backend: a random “install” identifier, the product purchased, and status. No personal or payment data is stored.

6. Restoring purchases via iCloud

So your purchases survive a reinstall without any login, the app stores a random install identifier in your own iCloud (Apple’s iCloud Key-Value Store). This lives in your iCloud account, controlled by you and Apple — not on our servers. It contains no personal information. Apple’s StoreKit independently restores Plus and paid packs from your Apple ID.

7. Children & teens

Pairframe is rated 12+ and is not in the Apple “Kids” category. We do not knowingly collect personal information from children under 13. At first run the app asks for a birth year (we do not store your birthday). If a user is under 13, the app switches to a child-safe mode with no analytics and non-personalized, age-appropriate ad treatment. For users in the EU/UK, analytics requires consent regardless of age (GDPR-K). If you believe a child has provided us personal information, contact us and we will delete it.

8. Who we share data with (service providers)

We do not sell your personal information. We do not share data with advertisers for cross-app tracking.

9. Where data is processed & how long we keep it

Our analytics and entitlement backend is hosted in the European Union. Apple and Google operate globally. The detailed analytics layer is deleted after 14 days; anonymous aggregates are retained to track long-term trends. Entitlement records are kept while you own the purchase so we can restore it.

10. Legal bases (EEA/UK)

• Consent — analytics in the EEA/UK (you opt in; you can withdraw any time in the app).
• Performance of a contract — processing your purchases and restoring them.
• Legitimate interests — keeping the app secure, preventing abuse, and basic non-personalized advertising to keep the app free, balanced against your rights.

11. Your rights

Depending on where you live (e.g., GDPR in the EEA/UK, CCPA/CPRA in California), you may have rights to access, correct, delete, or restrict your data, and to opt out. Because Pairframe is account-free and holds little or no information that identifies you, in most cases there is nothing personally identifying to retrieve or erase. You can:

• Turn analytics off in the app (and decline analytics consent in the EU/UK).
• Use Plus or the child-safe mode to remove ads.
• Disable iCloud for the app to remove the stored install identifier.
• Email us at membrain.app@gmail.com for any privacy request.

We will not discriminate against you for exercising these rights.

12. Security

Data in transit is encrypted with TLS. Backend secrets are stored in a managed secrets vault and are never shipped in the app. Our analytics is designed to minimize data so there is little of value to expose.

13. Changes to this policy

We may update this policy as the app evolves. We will revise the “Last updated” date above; material changes will be reflected here. Continued use after an update means you accept the revised policy.

14. Contact

Pairframe — membrain.app@gmail.com

This page is the official privacy policy for the Pairframe iOS app (bundle com.duman.pairframe).