BlurPoint Privacy Policy

Version 2, effective 13 September 2026.

BlurPoint is a photo redaction app for iPhone and iPad. It blurs, pixelates or covers faces, text and anything else in a photo that should not leave your device. This policy explains what the app does with your data. The short version: your photos never leave your device, and we collect nothing.

Who is responsible

The data controller for BlurPoint is:

What we do not collect

BlurPoint does not collect, store or transmit:

There is no BlurPoint server. The app makes no network requests of its own and works in Airplane Mode. There is no analytics or crash-reporting software in the app, and this policy forbids adding any.

How the app works

Every step happens on your device:

  1. You choose a photo with the iOS photo picker or take one with the camera.
  2. The photo is decoded into the app’s memory.
  3. You draw masks, or ask the app to find faces and text.
  4. Effects are rendered with Apple’s Core Image framework on your device.
  5. You save the result to your photo library or share it through the iOS share sheet.

When you close the editor the photo is released from memory. Nothing about the photo is written to disk by BlurPoint except the exported file you asked for.

The share extension

BlurPoint also appears in the iOS share sheet. When you share a photo or screenshot to BlurPoint from another app, the extension receives that one image from iOS, lets you redact it and either hands the result back to the app you came from or saves it to your photo library. The extension runs on your device exactly like the app: the image is processed in memory, never transmitted anywhere, and released when you finish. Exports from the extension always have their metadata removed.

Face, text and subject detection

Detection uses Apple’s Vision framework, which is part of iOS and runs on the device. BlurPoint does not bundle a third-party machine-learning model and does not send any part of a photo anywhere to analyse it. Apple does not receive your photos through this process either.

Detection results are suggestions shown in the editor. They exist only in memory while you edit and are discarded when you leave the editor.

Permissions

BlurPoint asks for these iOS permissions. You can grant, deny or revoke each of them in Settings > Privacy & Security.

Purchases

BlurPoint Pro is an auto-renewable subscription sold through Apple’s App Store and handled entirely by Apple’s StoreKit. Payment details, your Apple Account and your purchase history are processed by Apple under Apple’s privacy policy. BlurPoint checks your entitlement on the device with StoreKit; there is no BlurPoint account and no server of ours involved.

Apple makes aggregated sales and subscription reports available to the developer through App Store Connect. These reports do not identify you: we do not receive your name, email address, Apple Account or payment details.

Settings stored on your device

BlurPoint stores a small set of preferences on your device so the app opens the way you left it:

Detection settings are kept in an App Group container on your device, a storage area iOS shares only between the BlurPoint app and its share extension, so a sensitivity you set in the app also applies when you redact from the share sheet. The other settings are kept in the app’s own storage. None of this is personal data; it lives only on your device (and in your device backup if you back one up), is never read by anything other than BlurPoint and its extension, and is deleted when you delete the app.

Photo metadata in exports

Photos often carry embedded metadata: camera model, capture date and, if location services were on, the GPS position where the photo was taken.

By default BlurPoint removes all of it when exporting. The exported file contains no EXIF, GPS, TIFF or IPTC blocks. If you prefer to keep the original metadata, you can turn off “Remove location and metadata” in the export sheet; the setting is remembered for later exports. This choice affects only the file you export and is entirely under your control.

Third-party services

BlurPoint uses none. There are no analytics providers, advertising networks, crash reporters, cloud storage services or social-media SDKs in the app. The only third party involved in any way is Apple, for the App Store and the operating-system frameworks described above.

Children

BlurPoint collects no information from anyone, including children. It is suitable for users of all ages.

Your rights under the GDPR

Under the General Data Protection Regulation you have the right to access, rectify, erase, restrict and port personal data held about you, and to object to its processing. Because BlurPoint does not collect or hold any personal data, there is nothing for us to access, correct, delete or hand over: everything the app touches stays on your device under your control.

If you want to remove the app’s settings from your device, including the shared App Group container, delete the app. If you have questions about your data in relation to a purchase, contact Apple, which holds the purchase records; we can confirm what (aggregated) information we receive on request.

You have the right to lodge a complaint with a supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (tietosuoja.fi).

Changes to this policy

When this policy changes, the version number and effective date above change with it. Material changes are announced in the App Store release notes. The current policy is always at https://blurpoint.koud.fi/privacy.

Contact

Questions about privacy or this policy: blurpoint@koud.fi.