Privacy Policy

Blurfold hides faces and readable text in your videos, and every part of that happens on your iPhone. There is no account, and your video is never uploaded unless you choose Share link for a finished video (see Share Links below). Two other small things leave the device: anonymous usage counts that help us see which features are used (see Anonymous Usage Statistics below), and feedback you choose to send us (see In-App Feedback below).

Anonymous usage counts, feedback you choose to send, and videos you choose to share as a link. Blurfold does not collect personal information in the background, and never collects your videos, faces, readable text, filenames or anything you type, except a copy of a finished video you choose to share as a link.

• No account or sign-in
• No advertising or tracking tools, and no advertising identifier
• No crash reporting services
• Anonymous usage counts, described below
• Feedback is sent only when you choose to send it
• A copy of a finished video you choose to share as a link, with what is needed to check it and prevent abuse (see Share Links)

Detection, mosaicing, blurring and export all run on your iPhone. Your video is never uploaded anywhere — not to Apple, not to us, not to anyone — unless you choose Share link for a finished video. Then only that finished copy, with your blurring applied, is uploaded, never your original. The finished video is written to your photo library only when you tap export yourself.

Faces, readable text and any object you ask Blurfold to cover are found on your iPhone. Blurfold does not identify anyone: it locates faces and objects in order to cover them, and keeps no record of what it found once you close the video.

Blurfold asks for permission to use your photo library so you can choose a video, save the finished one, and list the videos it saved (the Blurfold album) under My Videos. It looks only at the video you pick and at that album, and only while you use those screens.

The app keeps a few small settings on your iPhone: whether the editor’s help text is shown, how many videos you have exported (so it asks for a rating only after it has worked for you), and how many of the free object exports you have used. It keeps no history and no cache of your videos between launches. Close it and there is no record of the video you opened, beyond the file you chose to save yourself. The random identifier used by the feedback form (see In-App Feedback) stays on the phone unless you send feedback. If you use Share link, Blurfold also keeps on your iPhone the list of your links (in Support → My links), the code it needs to manage them, and the fact that you agreed to the sharing rules.

Share link is optional. If you choose Share link on a finished video and agree to the sharing rules, Blurfold uploads a copy of that one video (up to 60 seconds) to our servers and gives you a short link. Only the finished video, with your blurring applied, is uploaded; your original never is. Anyone you give the link to can watch the video in a web browser for 30 days; then the video is deleted. The video page is not listed anywhere or shown in search results, so only people with the link can find it.

What we collect, only when you create a link:

• the video you chose, with its sound, and a preview image made from it
• still frames from the video, for the safety check
• a random code for this installation of the app, which we keep only in a scrambled form that cannot be turned back into the code
• a scrambled form of your IP address
• the app’s version and language, so the video page shows in your language
• reports that people send about a video: the reason, any note, and a scrambled form of the sender’s IP address

Why: to host the video for the people you share it with, to check it for safety before the link works, and to prevent abuse and enforce the sharing rules, for example by limiting how many links one installation can make and by banning people who break the rules.

Who receives it: our servers keep the video, the preview image and the records above. An outside automated safety service receives the still frames, for the check only; it does not receive the video itself, your IP address or the installation code. Alerts about held or reported videos reach our team through our messaging provider; they carry the report’s reason and note, never the video. A person on our team may watch a video that is held for review or reported. Anyone with the link can watch the video and see its preview image.

How long we keep it: the video and preview image are deleted when the link ends after 30 days, or sooner if you delete the link or we remove it. Records about a link, without the video (such as when it was made, the check result and any reports), are kept for up to 90 days after the link ends. If someone is banned for breaking the rules, what we need to keep the ban in place (the scrambled codes above) is kept for up to one year.

Deleting your links: in Support → My links you can delete any link, or all of them with Delete all my links. A deleted link stops working at once and its video is deleted. If you no longer have the app, email [email protected] with the link and we will delete it.

To learn which features are used and where things go wrong, Blurfold sends a few anonymous usage counts to a privacy-focused analytics service in the EU. Each count says only something general, such as a length range or that an export finished, together with a random code for this installation that cannot be traced back to you and is not your Apple ID or advertising identifier.

Events never contain your videos, faces, readable text, filenames, location, email address or anything you type. They are not linked to your identity, not used for advertising, and not used to track you across apps or websites.

Blurfold Pro is sold through the App Store. Apple handles the payment; we never see your name, Apple ID or payment details. To know whether Pro is unlocked, the app asks the App Store on your iPhone. Nothing about your purchase is sent to us or to our analytics service.

If you open Send Feedback in Blurfold and tap the Send Feedback button, Blurfold sends us a report you started:

• your email address (required), so we can reply
• your message (required)
• up to five optional images you pick — location and other photo details are removed on your iPhone first
• the app version, OS version, device model and locale, which are always included and help us fix problems

A random code made on your iPhone is included only to stop the form from being abused. It is not linked to you and is not kept with your message.

The report travels over an encrypted connection to a private inbox that only the Blurfold team can read. Our hosting provider briefly handles your IP address to block abuse and does not keep the report. Nothing is sent until you tap Send Feedback.

We use feedback only to reply to you and to improve Blurfold — never for advertising — and delete it once it is no longer needed. To have your feedback deleted sooner, email [email protected] with the reference shown after sending.

Blurfold has no advertising networks or tracking services, and its work happens on your iPhone. The only outside services are an analytics service, for the anonymous usage counts described above; our hosting and messaging providers, only to deliver feedback you choose to send; and our servers, an outside automated safety service and our messaging provider, for share links you create.

Blurfold does not knowingly collect any information from children under 13. Apart from the anonymous usage counts described above, which identify no one, the app collects nothing unless someone chooses to send feedback or create a share link; if you believe a child has sent us feedback or shared a video, email us and we will delete it.

If our privacy practices change, we will update this page with a new “last updated” date. Material changes will also be noted in the App Store release notes.

Questions about this privacy policy? Email us at [email protected].