Privacy Policy

1. Who we are

SensePose is developed and operated by Profazia, the trading name of an independent solo developer based in India. We are an individual rather than a registered company, which is why you will not find a company registration number here.

For the purposes of the GDPR and equivalent laws, that individual is the data controller for the personal information described in this policy, and the Data Fiduciary under India's DPDP Act. Payment data is the exception: for purchases in the app, Google Play is the controller of your payment details, under its own privacy policy; for website subscriptions sold for the earlier app, Dodo Payments acted as Merchant of Record and is the controller of those payment details.

This policy explains what we collect when you use the SensePose mobile app and this website, why we collect it, who we share it with, how long we keep it, and the rights you have over it.

A. SensePose 2.0 (version 2.0.0 and later)

SensePose 2.0 is a camera app that enhances each photo on your phone as you take it. It has no account and no sign-in. Your photos never leave your phone. The only data it sends are the anonymous usage events described below (from version 2.0.6).

Photos

Photos are captured, enhanced and saved entirely on your device, in your own gallery (Pictures/SensePose). Your photos never leave your phone. We do not have a copy of them, and we do not use them to train machine-learning models.

Face detection and AI face enhancement run on the device. On supported phones the face-enhance model (about 60 MB) is downloaded once from Google Play as part of the app; no photo is sent with that download.

Anonymous usage analytics (from version 2.0.6)

From version 2.0.6, the app sends anonymous usage analytics to PostHog, our analytics provider, so we can see whether the app works and where people get stuck. Versions 2.0.0 to 2.0.5 send nothing. It collects four kinds of data, and nothing else:

• A random per-install ID.The app creates a random ID the first time it runs. It is not your advertising ID, not your device's Android ID, and not linked to a name, email, account or Google account. Reinstalling the app creates a new one.
• App interactions: the app was opened; a photo was taken; a photo was saved enhanced, or saved as the original; the unlock card was shown; the Buy or Restore button was tapped; the in-app rating prompt was shown; the face-enhance model download started, finished or failed. These come with simple counters, such as how many photos have been taken and how many free enhanced photos are left.
• Diagnostics:whether a save or an enhance failed, as a fixed error type (for example "out of memory"), never a message text; how long enhancing took; the app's version and versionCode; the Android version; the device manufacturer and model; the phone's RAM tier; whether the phone supports face enhance; your language setting; and your country, taken from your SIM card's home country or, without a SIM, from your language setting.
• Purchase outcome:whether the Google Play purchase screen opened and whether the purchase completed, was cancelled, is pending, was already owned or failed (with Google Play's result code), whether a purchase was restored, and the price Google Play displayed. Never card or payment details.

The event names are app_open, shot_taken, enhanced_saved, original_saved, save_failed, face_models, unlock_card_shown, buy_tapped, restore, review_prompt, purchase_result, purchase_pending, purchase_completed and entitlement_restored.

What it never collects: your photos, their file names, or anything derived from a photo (such as whether it contains a face); your name, email or contacts; your advertising ID or Android ID; your location (no GPS, no mobile network location, and the app tells PostHog not to look up a location from your IP address).

• Optional. You can turn it off at any time in Settings → About → Share anonymous usage. Turning it off stops sending immediately and deletes any events on the phone that were not yet sent.
• Not shared. We do not sell this data or share it with anyone. PostHog processes it only on our behalf, as our service provider, and stores it in the United States.
• Encrypted in transit. Events are sent over HTTPS.
• Analytics only. We use it only to understand and improve the app. Not for advertising, marketing or personalisation, and we do not combine it with other data to identify you.

The app finds faces with Google's on-device ML Kit library, and the photo never leaves your phone. ML Kit is built to send Google its own diagnostics (device model, Android version, app version, a per-install identifier, performance metrics and error codes; see Google's ML Kit data disclosure page). SensePose removes the part of ML Kit that uploads them, so they are discarded on your phone. Our Google Play Data safety form still lists these data types, to be safe.

Purchases

The one-time unlock is bought through Google Play. Google processes the payment and your card details, under Google's privacy policy. The app checks with Google Play on your device whether you own the unlock (or an active subscription from the earlier app); we receive no payment details. Google Play shares order records with us as the developer, as it does for every Play purchase, which we use for support, refunds and accounting.

Permissions

The app asks for camera access to take photos. On Android 8 and 9 it also asks for storage access to save photos to your gallery. It does not ask for location, contacts, microphone or phone permissions.

Ads and tracking

SensePose 2.0 contains no ads, no advertising SDKs and does not use your advertising ID.

B. The earlier SensePose app (before version 2.0) and its accounts

Versions of SensePose before 2.0 required an account and offered cloud features. Those features have been retired, but accounts created with those versions, and the data held for them, still exist until they are deleted. Sections 2 to 11 describe that data, and they continue to apply to it. If you still use one of those older versions, they also describe what it sends.

2. Information We Collect (earlier app)

Account information

• Email address and name, when you create an account
• Your Google account identifier, if you sign in with Google (we receive your email and name, not your Google password)
• Subscription status and billing country
• Support messages you send us

We do not receive or store your card number. Payment details are entered directly with our payment provider — see section 6.

Photos, videos and camera data

In the earlier app, most processing happened on your device: its Pro Mode, RAW burst capture and merging, exposure fusion and local tone grading ran on your phone's own hardware, and those images were not transmitted to us.

When you use cloud enhancement, the frames for that specific photo are uploaded to our processing storage over an encrypted connection, enhanced on a GPU, and returned to your device. We upload only the images you choose to enhance.

When you enable experimental framing advice, the app waits for a stable viewfinder and sends a downscaled preview of about 40 KB over an encrypted connection for analysis. The preview is not a captured photo and is not retained: no image bytes are written to our database or storage. Only the returned movement advice is stored as text so the coaching sequence can continue.

The app also records video with audio when you use video mode. Video and audio are processed on your device and are not uploaded to us.

Photo quality research (optional)

Android phones differ enormously in how their camera hardware behaves, and the same scene can come out excellent on one device and poor on another. Diagnosing that needs the sensor data and the finished photo side by side, which we cannot obtain from crash reports or usage statistics.

When Help improve photo qualityis switched on, the app shares some of your captures with us. Each shared capture includes the original RAW frames from the sensor, the reference image your phone's own camera software produced, the finished photo SensePose produced, and technical details of the device and the shot (model, chipset, Android version, ISO, shutter speed, and the processing steps that ran). It does not include your location, your contacts, or any photo you did not take with SensePose.

Not every capture is shared. The app selects a small sample, and additionally shares a photo you rate poorly in the before/after viewer, up to a daily limit. Uploads happen only over Wi-Fi while your phone is charging, so this never consumes your mobile data.

How you choose. When you create your account, a labelled checkbox on that screen offers to share photos for quality research. Outside the European Economic Area, the United Kingdom and Switzerland that box starts ticked and you can untick it there and then. Inside those regions it starts unticked and nothing is shared unless you tick it yourself. Either way the choice applies only to the device you made it on — signing in on another phone does not carry it across — and you can reverse it at any time from Settings → Photo quality research. Switching it off stops all further sharing immediately.

We use these photos only to diagnose and improve image quality in SensePose. We do not sell them, publish them, or use them for advertising, and we do not train machine-learning models on them. We keep them until you delete them or until they are no longer useful for that purpose. You can permanently erase everything you have shared at any time using Delete photos you've shared in Settings — this removes both the images and their technical details from our storage, and it does not affect the photos in your own gallery.

We do not use your photos, videos or audio for advertising, and we do not train machine-learning models on them.

Device and usage data

• Device model, manufacturer, chipset, Android version and app version — used for device-compatibility checks and to diagnose quality problems on specific hardware
• An app install identifier, used to license on-device AI models to your install
• Feature-usage events (for example, that an enhancement was started or completed) and how much of your monthly allowance you have used
• Crash and performance diagnostics
• A push notification token, if you allow notifications, so we can tell you when a photo finishes processing
• Feedback you submit on an enhancement (thumbs up/down and any comment), along with your device model

We do not collect your location, contacts, or browsing activity on other apps or sites. The earlier app contained no advertising SDKs.

3. How We Use Your Information

For SensePose 2.0 we use usage events only to understand and improve the app, and Google Play order records only for support, refunds and accounting. For the earlier app and its accounts:

• To provide the app, process the photos you ask us to enhance, and return optional framing advice
• To create and maintain your account and keep you signed in
• To process payments, manage subscriptions and apply your usage allowance
• To check whether your device supports the app's capture features
• To send you technical notices, processing notifications and support replies
• To diagnose crashes, fix bugs and improve image quality on specific devices
• To detect and prevent fraud, abuse and unauthorised use of paid features
• To comply with legal obligations, including tax and accounting rules

4. Legal Bases for Processing (EU / EEA / UK)

If you are in the EU, EEA or UK, we rely on the following legal bases under the GDPR:

• Performance of a contract — providing the app, your account, cloud enhancement, optional framing advice and your subscription
• Legitimate interests — security, fraud and abuse prevention, crash diagnostics, and improving image quality, balanced against your rights
• Consent — camera access, storage access and push notifications, each of which you grant on the device and can withdraw in Android settings at any time
• Legal obligation — retaining transaction records for tax and accounting purposes

5. Data Storage, Security and Retention

Data is stored on servers operated by the providers listed in section 6. Data in transit is encrypted with TLS, and data at rest is encrypted by those providers. Access to production systems is limited to personnel who need it.

We keep data for the following periods:

6. Service Providers and Subprocessors

We share personal information with the providers below, only so they can perform services for us. They are contractually bound to protect it and may not use it for their own purposes.

SensePose 2.0:

• Google (Google Play) — app distribution, the face-enhance model download, and in-app purchases
• PostHog — usage events from version 2.0.6 (stored in the United States)

The earlier app and its accounts (some of these services are no longer used by any current feature):

• Clerk — account creation, sign-in and session management (email, name, authentication events)
• Supabase and Amazon Web Services — our application database (account records, subscription status, usage counters, feedback)
• Cloudflare R2 — storage for images being processed and for enhanced results
• Modal — GPU compute that runs the cloud enhancement models on your uploaded frames
• Microsoft Azure AI Foundry — analysis of downscaled viewfinder previews when you enable experimental framing advice
• Dodo Payments — Merchant of Record for website subscriptions sold for the earlier app; collects and processes payment details and issues invoices
• Vercel, Amazon Web Services and Cloudflare — hosting and delivery for this website and our API
• Google (Firebase Cloud Messaging) — delivery of push notifications
• Google (Play Integrity API) — verifying that requests come from a genuine, unmodified copy of the app, to prevent abuse of paid features

We may also disclose information to legal or regulatory authorities where we are legally required to, and to a successor entity in the event of a merger or acquisition. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

7. International Data Transfers

We operate from India and our providers process data in the United States, the European Union and other countries. This means your personal information may be transferred outside the country where you live, including to countries that have not been found to provide an equivalent level of data protection.

Where we transfer personal data out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with additional safeguards where needed. You can request a copy of the relevant safeguards using the contact details in section 14.

8. Your Rights

Depending on where you live, you have the right to:

• Access and receive a copy of your personal data
• Request correction of inaccurate personal data
• Request deletion of your personal data
• Object to processing of your personal data
• Request restriction of processing
• Data portability
• Withdraw consent at any time, without affecting processing already carried out

To exercise any of these rights, email [email protected]. We respond within 30 days and will not charge you or degrade your service for asking.

If you are in the EU, EEA or UK and you think we have handled your data improperly, you also have the right to complain to your local data protection supervisory authority.

9. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect and why, to request its deletion or correction, and to not be discriminated against for exercising those rights. The categories we collect are described in section 2 and the categories of recipients in section 6.

We do not sell personal information and we do not share it for cross-context behavioural advertising, including the personal information of users we know to be under 16. Because we do not sell or share, there is no "Do Not Sell or Share My Personal Information" opt-out to offer. To exercise your other rights, contact us at [email protected].

10. India (DPDP Act, 2023)

If you are in India, we process your personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023. You have the right to access a summary of your data, to correction and erasure, to nominate another person to exercise your rights in the event of death or incapacity, and to grievance redressal.

To raise a grievance, contact our grievance officer at [email protected]. We will acknowledge and respond within the timelines set by the Act.

11. Deleting Your Account and Data

SensePose 2.0 has no account, and the only data it sends are the usage events described in section A. To have the events from your install deleted, email [email protected] with your phone model and roughly when you used the app. Uninstalling the app removes everything it stored on your phone except the photos in your gallery.

You can request deletion of an account created with the earlier app, and the personal data associated with it, at any time, using our account deletion request form, or by emailing [email protected] from the address on your account.

When we action a deletion request we remove your account record, your enhanced results held in our storage, your usage history, your push token and your feedback. We complete this within 30 days. Transaction and tax records are retained where law requires, as described in section 5.

Photos already saved to your phone's gallery are stored on your device, not by us — deleting your account does not remove them, and you can delete them yourself at any time.

12. Children's Privacy

SensePose is not directed at children. You must be at least 13 years old to use the app. In the EU and EEA, where a member state has set a higher digital-consent age (up to 16), you must meet that age, or have your parent or guardian's consent. In the UK the age is 13.

We do not knowingly collect personal information from children below the applicable age. If you believe a child has provided us with personal information, contact us at [email protected] and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Where a change materially affects how we use your data, we will give you notice in the app or by email before it takes effect.

14. Contact Us

For any question about this policy, to exercise your rights, or to raise a grievance:

• Email: [email protected]
• Profazia — independent developer, India

Email reaches us directly and is the fastest route for any data-protection request. As a solo developer we do not publish a street address, but we will provide our postal details on request to anyone who needs them to exercise a legal right.

See also our Terms of Service and Refund & Cancellation Policy.