1. Scope
This Privacy Policy applies to the PicMark iOS app and this privacy-policy website.
2. Information processed by the app
Local image content: PicMark performs its core image recognition and editing on your device. Unless you enable Cloud Space and choose content to upload, we do not receive imported photos, exports, thumbnails, OCR text, face locations, barcode or QR-code contents, annotations, signatures, watermarks, editable projects, custom sensitive terms, or recognition rules.
Face data and on-device detection: PicMark does not collect face data or perform facial recognition. When you choose automatic face detection, Apple's Vision framework and VNDetectFaceRectanglesRequest process the selected image entirely on your device and produce only approximate face bounding rectangles and confidence values to help you place blur or redaction effects. The feature does not create or derive face templates, embeddings, facial landmarks, identities, or biometric identifiers.
Image pixels and temporary face-detection results are not uploaded, transmitted, sold, or made available to us or any third party, and are not used for analytics, advertising, profiling, or model training. Results are held temporarily in device memory only during the current editing session and are discarded when that session ends. They are not stored on our servers or in logs, analytics systems, Cloud Space, or backups. If you choose to save a project or export an image, the selected image and edits remain under your control; PicMark does not separately retain the face-detection results as face data.
Account and Cloud Space: Cloud Space requires registration or sign-in. Depending on your sign-in method, we may process a nickname, email address, phone number, Sign in with Apple identifier, authentication tokens, and related account details. We process content you choose to upload, such as images, project files, thumbnails, file names, storage usage, and sync times. We may also process login IP address, device and system version, operation times, and security logs.
Analytics: Some versions may use Google Analytics to process app-instance identifiers, feature interactions, screen views, sessions, crashes, performance, device model, operating system and app version, language, and coarse region inferred from IP. We seek to use de-identified or aggregated data where practical and do not send original images, full OCR text, faces, or QR-code content as analytics events.
Advertising: Depending on version, distribution channel, and region, PicMark may integrate one or more of Google AdMob, Pangle, Tencent GDT/Youlianghui, or AppLovin. Their SDKs may process IP address, device and app information, ad impressions and clicks, diagnostics, coarse location inferred from IP, and IDFA after the required system permission is granted.
3. Device permissions
- Photos: used only when you select an image or explicitly save an export.
- Camera: requested only when you choose the camera annotation feature.
- Tracking: if personalized ads involve tracking across apps or websites, we request permission through iOS App Tracking Transparency. Declining does not disable local image editing.
- Notifications: may be requested if you enable sync or service notifications.
You can change permissions in iOS Settings. Disabling a permission may make its related feature unavailable.
4. How we use information
We use information to provide local editing, accounts, cloud storage, synchronization, subscriptions, and support; understand feature use and improve stability; deliver and measure ads and prevent fraud; protect our services; and meet legal obligations. Where consent is required, we request it and allow you to withdraw it.
5. Subscriptions
Apple App Store and StoreKit process PicMark Premium subscriptions. Apple handles payment details, billing, and transaction records. PicMark processes Apple-signed product identifiers, subscription status, expiration information, and necessary transaction identifiers to confirm entitlement, restore purchases, and provide support. We do not receive full payment-card details.
6. Third-party services and sharing
We do not sell original images, OCR content, or cloud projects. To provide specific features, we may share necessary data with cloud infrastructure, content-delivery, authentication, messaging, analytics, advertising, security, and support providers. Depending on the app version, these providers may include Google, Pangle, Tencent GDT/Youlianghui, AppLovin, and Apple. Not every version uses all listed services. Providers may independently process certain data under their policies.
7. Retention, deletion, and choices
Local preferences and projects remain on your device. Deleting the app generally removes its container, while exports saved elsewhere remain under your control. Account and cloud content are retained while needed to provide the service. Following account or content deletion, we delete or de-identify data through our service process, except where retention is required for law, security, fraud prevention, disputes, or backup cycles. Partner retention is governed by partner policies.
Face-detection results have no retention period because we do not retain that data. They exist only temporarily in device memory during the current editing session and are discarded when the session ends.
You may change system permissions, decline ATT tracking, use available ad controls, access or correct account details, delete cloud content, close your account, or contact us to request access, correction, deletion, or consent withdrawal.
8. International processing
Apple, Google, Pangle, Tencent, AppLovin, Cloudflare, or other providers may process information outside your country or region. We use notices, consent, contracts, or safeguards required by applicable law. Provider policies describe their locations and transfer mechanisms.
9. Children
PicMark is not designed to collect children's personal information. Users below the applicable age of consent should use account, cloud, or personalized-ad features only with a guardian's consent and guidance. Contact us if you believe we processed a child's data without appropriate consent.
10. This website and security
This website is delivered through Cloudflare Workers. Cloudflare may process basic request data such as IP address, browser type, and request time for delivery, security, and troubleshooting. This page uses no cookies, ads, or visitor analytics scripts.
We use technical and organizational measures appropriate to the risk. On-device processing reduces network exposure, but no software, device, or online service can guarantee absolute security.
11. Changes and contact
We update this page and its effective date when our practices change, and provide additional notice when required. For privacy questions or rights requests, use the App Support or developer contact shown on PicMark's App Store product page.