Privacy Policy

Last updated: 2026-05-26

Poof is an iOS app that hides faces in your family photos and videos. The honest, full story of what happens with your data:

Your video and photos never leave your device

When you pick a video or photo in Poof, it stays on your iPhone. Poof does not upload your media to a server, does not sync it to the cloud, and does not share it with any third party. All face detection, tracking, recognition, and the actual blurring or emoji-cover work happens on your device using Apple's frameworks and an on-device machine-learning model bundled inside the app.

This is a hard architectural rule, not a marketing claim. There is no upload code path in the app.

What Poof stores on your device

• Imported videos and photos: copied into Poof's private app storage while you're working on them, then deleted when you start a new clip or uninstall the app.
• Exported videos and photos: the final, face-hidden file is saved back to your Photo Library if you tap Save / Share.
• Recognized people library: if you add someone in the People screen, Poof stores their name, a small face thumbnail, and a numeric face embedding inside your device's private app storage. You can rename, re-tag, or remove anyone at any time from the People screen. Removing a person deletes their thumbnail and embedding immediately.
• App preferences: which emoji kit you picked, and similar small settings. Stored in iOS's local UserDefaults.

None of the above is transmitted off your device by Poof.

What Poof does NOT do

• Poof does not collect or transmit your videos, photos, or face data.
• Poof does not use third-party analytics, ad networks, attribution SDKs, or trackers of any kind.
• Poof does not sell, share, or rent any data — because Poof does not collect any data to begin with.
• Poof does not create an account or require a sign-in.

Permissions Poof asks for

• Photo Library (read) — so you can pick a video or photo to work on. Poof reads only the specific item you pick; it never scans the rest of your library.
• Photo Library (add) — so Poof can save your finished, face-hidden result back to your Photos.

Both permissions are requested by iOS at the moment they're needed and can be revoked at any time in Settings → Privacy & Security → Photos.

Subscription billing

If Poof offers a paid subscription, it is processed by Apple through the App Store. Apple handles your payment information under Apple's Privacy Policy. Poof itself never sees your payment details.

App Store crash reports and analytics

If you've opted in to "Share With App Developers" under iOS Settings → Privacy & Security → Analytics & Improvements → Share iPhone Analytics, Apple may forward anonymous crash logs and aggregate usage statistics to us. This is controlled by Apple and Apple's privacy policy, not by Poof. You can opt out at any time in the same Settings screen.

Children

Poof is designed to help parents protect children's faces. Poof itself is not directed at children and does not knowingly collect any data about children. Because Poof does not collect any data at all, there is nothing about children — or anyone else — that gets transmitted, stored remotely, or shared.

Changes to this policy

If we change how Poof handles your data, this policy is updated and the "Last updated" date at the top changes. Material changes will also be called out in the app's release notes on the App Store.

Contact

Questions about this policy, or about how Poof handles your data: [email protected]