Privacy Policy

This policy covers the shy app for iPhone (“the App”) and the website shyedit.com. They are operated by shy (“shy”, “we”, “us”), which is responsible for the personal data described here. Questions and requests: support@shyedit.com.

shy is a photo editor that does all of its work on your iPhone. Looks, light and colour adjustments, curves, HSL, retouching, crop and export are computed on the device with classic image-processing algorithms. Nothing is generated by AI, and there is no cloud photo library.

Your projects and edit history are stored inside the App on your iPhone. Like other app data, they may be included in your device backups (iCloud or computer) under Apple’s terms. When you export, shy saves a new copy to Photos or hands it to the share sheet — where it goes next is your choice. By default, shy does not write location data into exported copies.

• your photos, and the edited copies you export;
• file names, file paths and albums;
• EXIF and camera metadata, including location;
• projects, edit history, saved looks and export preferences.

None of this is sent to us, to our service providers, to analytics or to error reports.

Installation data (needed for the App to work)

When the App first connects to our server it creates a random installation ID and a secret key (we store only a hash of the key). With them we receive: Apple’s identifier for vendor (IDFV), the App version and build, iOS version, device model, language, App Store country, your usage-statistics choice, and when the installation was first and last seen.

We use this to deliver the App’s configuration (for example, which onboarding and paywall screens to show, including simple A/B tests assigned from the installation ID), to confirm purchases and to protect the service from abuse. The App works with a built-in configuration when our server can’t be reached.

Purchases

Apple processes every payment. When you buy or restore shy Pro, we and our subscription provider RevenueCat receive information from Apple about the purchase: the product, subscription status and dates, transaction identifiers, price, currency and store country. We never receive your name, e-mail, Apple ID or payment card.

Usage statistics (only with your permission)

If you allow “Anonymous usage statistics”, the App sends events about how it is used: screens and onboarding steps viewed, paywall and purchase steps, which look was previewed or applied and at what strength, which adjustments were used, compare, import and export actions (format and size setting, success or an error code), session and timing information.

These events are built from a fixed allowlist of fields. They never contain photo content, file names, paths, EXIF data, location, your name, e-mail or IP address. They are linked to the random installation ID and IDFV, not to who you are — in legal terms they are pseudonymous data. If you don’t allow statistics, no events are sent at all.

E-mails to support

If you write to us, we receive your e-mail address and whatever you include in the message, and use them only to answer you.

This website

shyedit.com uses no cookies, analytics, trackers, third-party fonts or scripts. Our web server keeps short-lived technical logs (IP address, page requested, time and response status) to keep the site secure and running.

• We don’t upload, view, analyse or store your photos.
• We don’t use the advertising identifier (IDFA) and don’t track you across other companies’ apps or websites. The App contains no advertising SDKs.
• We don’t sell your personal data or share it for targeted advertising.
• We don’t ask for an account, contacts or your location, and the App doesn’t send push notifications.

We use a small number of providers who process data on our behalf and under contract:

• Apple — distributes the App and processes payments and refunds under Apple’s privacy policy.
• RevenueCat, Inc. (USA) — keeps track of purchases and subscription status for the random installation ID.
• Amplitude, Inc. (USA) — stores and analyses usage statistics, and only if you allowed them. Collection of IP address, country, region, city and mobile carrier is switched off in the App.
• UpCloud (European Union) — hosts our servers, database and backups.

Error reports from our servers go to a monitoring service run by our own team; request contents and personal data are removed before a report is stored.

• Contract — installation data and purchase information, which we need to provide the App and the features you paid for.
• Consent — usage statistics. You can withdraw consent at any time; this doesn’t affect processing that happened before.
• Legitimate interests — keeping the App, the website and our servers secure, preventing abuse and answering support requests.

Our servers and backups are located in the European Union. RevenueCat and Amplitude process data in the United States. Where the law requires it, these transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses in the providers’ data processing terms.

• Installation record — for as long as you use the App, or until you delete your data.
• Usage events on our server — 180 days, then deleted automatically.
• Raw purchase notifications from RevenueCat — 90 days, then their contents are deleted.
• Purchase and transaction records — as long as accounting and tax rules require. After you delete your data they are no longer linked to your installation.
• Backups — overwritten on a rolling basis and gone within 30 days.
• Usage statistics at Amplitude — under the retention settings of our Amplitude project, and deleted on request.
• Support e-mails — as long as needed to resolve your request.

Usage statistics. In the App, open Profile → About shy and switch “Anonymous usage statistics” on or off. When you switch it off, sending stops and statistics that haven’t been sent yet are discarded.

Delete my data. In Profile → About shy, tap “Delete my data”. Our server then erases the usage events, test assignments and subscription status linked to your installation, clears the device details (including IDFV) and revokes the installation’s access; purchase records we must keep for accounting remain, but without any link to your installation. We pass the deletion request on to our service providers. The App then starts over as a new installation.

Your purchases stay with your Apple ID — tap “Restore” on the purchase screen to get shy Pro back. Deleting the App removes your projects from the device; copies you exported to Photos stay there.

For anything else, write to support@shyedit.com.

Depending on where you live (for example under the GDPR, UK GDPR or California law), you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive it in a portable form, and to withdraw consent. You can also complain to your local data protection authority.

Because shy has no accounts, the quickest way to erase your data is “Delete my data” in the App. For other requests, e-mail support@shyedit.com — we will explain how to identify your installation. Never send us photos. We don’t sell or share personal information, and we won’t treat you differently for using your rights.

shy is not directed at children under 13, and we don’t knowingly collect personal data from them. If you believe a child has sent us personal data, contact support@shyedit.com and we will delete it.

The App talks to our server only over encrypted connections (HTTPS). Installation keys are stored as hashes, server disks are encrypted, and staff access to our systems requires two-factor authentication and is logged. No system is perfectly secure, but the most sensitive thing — your photos — never reaches us in the first place.

When this policy changes, we update the date at the top. If a change is significant — for example, if the App were ever to handle photos differently — we will tell you in the App or on this website before it takes effect.

shy — support@shyedit.com.