Privacy Policy
Your camera stays useful without cloud AI.
Focra requires no registration. Local camera tools, pseudonymous service accounts, subscriptions and optional cloud analysis handle data as described below. A random account ID does not make account-linked data fully anonymous.
Effective October 13, 2026
1. Scope and controller
This policy explains how Focra processes personal information when you use the mobile app, anonymous service sessions, App Store purchase features, cloud AI features and these legal pages. The app developer is the data controller for the processing described here.
The official privacy and support contact is support@focra.app.
2. Data processed on your device
Camera permission enables the live viewfinder. Pose keypoint processing, device attitude, local composition measurements and filter previews run on the device. Structured hand or head movements are not uploaded as a separate data stream.
- After you grant photo access, pressing the shutter saves the photo to the system photo library.
- Photo-library access displays images you choose to view; Focra does not automatically upload your photo library.
- Local preferences and cloud AI consent choices are stored on your device.
Cloud AI can additionally receive one viewfinder image and selected derived scene measurements with your permission, as explained in section 4.
3. Service accounts and purchase identifiers
Focra does not require registration or an email address for sign-in. Supabase creates a persistent pseudonymous service account ID and issues session tokens stored on your device. The account ID exists on the service as well as your device; it is not just a local credential.
The same account ID is used as the RevenueCat customer identifier to associate App Store transactions and Pro entitlements. Focra and RevenueCat use these records to grant, restore, revoke or expire access and provide subscription history and analytics. These identifiers and purchase records are account-linked even though Focra does not ask for your name or sign-in email. Apple handles payment; Focra and RevenueCat do not receive your full payment-card details.
4. Optional cloud AI
Cloud AI runs after you choose the feature and grant upload permission. You can revoke this permission in Settings > Privacy Policy & AI Data.
AI Composition
A request sends one compressed 288 × 384 viewfinder image, the analysis mode, language and basic scene/camera context, which can include frame size, zoom, subject box, composition anchors, brightness and horizon measurements. This enables composition, crop, zoom and filter guidance. It does not upload your whole photo library.
The request is authenticated with your service account and passes through the Focra server to the paid Google Gemini API. The account token is used by Focra and Supabase, not included in the Gemini prompt. Focra does not automatically remove faces or other identifying details from the image. Images, surroundings and request context are therefore not represented as fully anonymous.
5. How information is used
- Authenticate and protect service access.
- Confirm, restore and manage Pro entitlements.
- Provide subscription history and operational subscription analytics through RevenueCat.
- Generate the composition guidance you request.
- Monitor request performance, troubleshoot failures and protect the service.
- Enforce request limits and prevent automated abuse.
- Comply with applicable law and respond to valid legal requests.
We do not use this data for advertising or cross-app advertising tracking, and we do not sell it to data brokers. An association with a service account is not the same as advertising tracking.
6. Retention and provider processing
Images and AI requests
The Focra server processes uploaded images in memory, excludes image bytes from its application logs, does not write its image copy to disk and discards that copy after responding. This does not mean every provider immediately discards the request. Under the paid Gemini API terms, Google does not use prompts or responses to improve its products, but logs them for a limited period for service safety and required legal or regulatory purposes. Google's terms, rather than Focra's own in-memory lifetime, govern that provider's retention.
Operational and infrastructure logs
Focra application logs record limited request metadata such as time, mode, size, status, duration, token counts, scores and error codes. Uploaded image bytes, full scene descriptions and raw account tokens are excluded from those application logs. Google Cloud Run infrastructure access logs can separately include IP addresses, request URLs, user-agent/device context, sizes, status and latency. Supabase processes account-linked authentication and security information. Such technical records can be associated with an account, device or request; they are not described as fully anonymous.
As of this policy date, the Focra Cloud Run default log bucket retains application and access logs for 30 days. Certain infrastructure audit logs have separate retention requirements. Google Gemini, Supabase and RevenueCat retain records under their applicable service terms, security needs and legal obligations; the 30-day setting is not a promise that all provider data has the same retention period.
Service and purchase records
Service account and entitlement records are retained as needed for access, purchase restoration, security, legal compliance and dispute handling. Uninstalling the app or revoking future AI uploads does not automatically delete remote records. Contact us to request deletion; legally required records may need to be retained.
7. Service providers and transfers
- Supabase: service account authentication, sessions, entitlement records and security.
- RevenueCat: purchase and subscription entitlement management, customer history and subscription analytics.
- Google Gemini API: paid visual AI analysis and provider safety processing, under its service terms.
- Google Cloud Run and Cloud Logging: Focra API hosting, access logs and operational diagnostics.
- GitHub Pages: public legal pages; GitHub may receive ordinary website request information when you visit them.
- Apple: App Store distribution and payment processing.
Providers may process data in countries other than your own. Their applicable terms and privacy practices govern their processing. Focra's service-account credentials are not deliberately supplied to Gemini as image-analysis prompt content.
8. Your choices and rights
- Use Free camera features without registration.
- Decline or revoke cloud AI uploads without losing local camera functions; revocation stops future uploads, not processing that has already occurred.
- Restore purchases or manage and cancel an Apple subscription through the App Store.
- Email support to request access, correction or deletion of service records. We may need information to verify which service or purchase records belong to you; do not send payment-card details.
- Complain to your local privacy regulator where applicable.
If you email support, we process the email address, message and attachments you choose to provide to answer your request. This is separate from sign-in and is not used for marketing. Deleting service records does not itself cancel an Apple subscription.
Only upload images you are authorized to share. Images can reveal faces, private surroundings or other personal details; consider the privacy of others and obtain permission where required.
9. Children
Focra is not directed to children under 13, or the higher minimum age required in their country. We do not knowingly request account contact details from a child below the applicable age. Contact us if you believe this has occurred.
10. Security
We use encrypted network transport for production services, short-lived user sessions, row-level database policies, authenticated AI requests, rate limits, restricted server secrets and log redaction. No service can guarantee absolute security.
11. Changes and contact
Material changes will be published here with a revised effective date. If a change materially affects service-session or image processing, we will provide an appropriate in-app notice or renewed consent.
Privacy, support and deletion requests should be sent to support@focra.app.