ProofCam stores your work records on your device. It has no account system. Optional AI uses a narrowly scoped ProofCam service only when you explicitly request a draft. This policy explains what leaves your device and why.
ProofCam is developed and run by Can Acar, the seller shown on the App Store.
ProofCam has no sign-up and no login. The optional AI service authenticates the app installation and, when applicable, verifies a signed purchase with Apple; it does not create a ProofCam user profile.
Your photos, GPS coordinates, addresses, notes, logos, stamped images, and comparison records are stored in ProofCam's own storage on your iPhone. They stay there unless you explicitly request an AI draft, share or export selected content, or save it to Apple's Photos library. Device backups and Photos synchronization follow your Apple settings.
The camera is used to take the photos you stamp and compare. Capture, stamping, comparison layout, and manual notes are processed on your device. Camera photos are not sent for AI unless you open the AI disclosure, check availability, and choose Continue.
When you explicitly request an AI draft, ProofCam creates reduced clean-source JPEGs of the selected before and after photos, removes embedded metadata, and sends those two images plus the note you entered through ProofCam's Cloudflare-hosted service to OpenAI. Capture dates, stored GPS coordinates, addresses, project IDs, photo IDs, and stamped overlays are not added to the AI request. Anything visibly present in a photo or typed in your note is included. Manual notes and exports remain available without AI. Photos are processed in service memory and are not stored by ProofCam's application database. Result text is retained for up to 7 days for recovery, and infrastructure backups may retain it for up to 30 days. After that, ProofCam's service keeps only a request record (app installation identifier, request ID, a one-way digest of the request, status, date and the allowance or purchase it used) so the same request is not processed or charged twice. That record contains no photo, note or result text and has no fixed deletion date. The OpenAI API request uses store:false and API data is not used for training by default, but OpenAI abuse-monitoring retention may apply, commonly for up to 30 days. ProofCam does not promise zero retention or a specific processing region. See OpenAI's API data controls and Cloudflare's privacy policy.
With your permission, ProofCam reads your location while the app is open to add GPS coordinates and an approximate address to a stamp. Online address lookups send coordinates to Apple's geocoder. If you enable the optional location map, Apple MapKit receives the map region needed to create the map thumbnail. When you open the Places map in Gallery, Apple Maps receives the map areas shown so it can draw them. Open in Maps passes the selected location to Apple Maps only when you tap it. These services follow Apple's privacy policy. You can use ProofCam without location in time-only mode.
ProofCam adds a stamped photo to your photo library only when you tap Save to Photos and grant add-only access. To add a company logo, you can select an image with Apple's photo picker; ProofCam receives only that selected image, not unrestricted access to your library.
ProofCam Pro is sold through Apple's In-App Purchase. Version 1.3 and later offer weekly and yearly auto-renewing subscriptions; earlier versions offered a one-time purchase, which stays valid. Optional AI draft packs are one-time consumable purchases. To unlock, renew and restore Pro, our payments provider RevenueCat receives purchase information and a pseudonymous app-user identifier. This identifier links purchase activity within ProofCam; it is not used by ProofCam for advertising or tracking across other apps. It is stored in the iOS Keychain and can remain after reinstalling the app. When you use AI drafts, the ProofCam service sends Apple's signed transaction to Apple to confirm its current state and keeps the transaction identifier, plan type, expiry date and AI usage counts for your app installation so it can apply your allowance. These records have no fixed deletion date; they are kept while they are needed to apply allowances and prevent abuse. AI pack drafts belong to the iPhone installation that bought them. RevenueCat also sends purchase events to PostHog for revenue reporting, as explained under Optional usage and crash reports. See RevenueCat's and Apple's privacy policies for their purchase-data handling and retention.
If you enable Share private analytics in Settings › Privacy, ProofCam uses privacy-conscious analytics to understand app launches, onboarding, feature use, paywall results, purchases, restores, shares, and export reliability. Analytics events never include photos, GPS coordinates, addresses, note text, filenames, email addresses, or persistent photo IDs. TelemetryDeck receives a pseudonymous device-local identifier that can survive reinstalling, event names, coarse event details, app and device metadata, and hourly-rounded timestamps for analytics only. This is not used to track you across other apps or websites. Private analytics is off by default and can be turned off again at any time. See TelemetryDeck's privacy policy.
Share private analytics is optional and off by default. If you enable it in Settings › Privacy, TelemetryDeck receives the coarse analytics described above and PostHog receives approved app events, event timestamps, app version, device metadata, a random paywall-presentation identifier and a pseudonymous identifier stored in Keychain that may survive reinstalling. RevenueCat receives that PostHog identifier to connect purchase events to app usage. Photos, exact location, addresses, notes and email are not included. Screen recording and automatic screen or text capture are disabled. Turning this option off stops new TelemetryDeck and PostHog app-usage events and requests removal of the PostHog identifier attribute from RevenueCat. This update depends on network delivery. Purchase events are separate from this option: RevenueCat sends purchase, renewal, cancellation and billing events to PostHog for revenue reporting even when Share private analytics is off. These events carry the purchase identifier, product, price, currency, Apple transaction identifiers and dates, and no photos, addresses, notes or email. Past records and links follow each provider's retention policy. Share crash reports is independently optional and off by default; when enabled, Firebase Crashlytics receives crash diagnostics, app/device information and its installation identifier. ProofCam adds no customer identifier or photo content to crash reports. Turning crash reports off disables automatic crash-report collection and deletes unsent reports. Contact support for requests concerning previously transmitted data.
ProofCam contains no advertising SDKs and does no cross-app or cross-site tracking, so it does not show the App Tracking Transparency prompt.
To learn which Apple Ads search ads lead to installs and purchases, ProofCam asks Apple's AdServices framework for an attribution token and passes it to RevenueCat with the pseudonymous app-user identifier described above. RevenueCat asks Apple which Apple Ads campaign, if any, led to the install. This does not use the advertising identifier, does not track you across other apps or websites, and does not need the tracking permission.
You can delete any stamped photo or comparison inside ProofCam. Deleting the app removes its local app-container data, but previously exported files, Photos copies, backups, the Keychain purchase identifier, and short-lived AI recovery text held by processors may remain for the retention periods described above. Apple, RevenueCat, Cloudflare, OpenAI and, if you enabled them, TelemetryDeck, PostHog and Firebase Crashlytics retain data under their applicable policies. For a privacy request, contact the address below.
Feedback is sent only when you choose Send in the mail composer or your email app. Your message and email address reach ProofCam support, which uses Google's Gmail service. Support messages are kept as long as needed to help you, and you can ask for them to be deleted. App and iOS versions are included only if you enable that option; photos, location, and purchase receipts are not attached automatically. Copy feedback writes your draft to the clipboard only when you tap it. Rating requests use Apple's system interface; ProofCam cannot see the rating you submit or whether Apple displayed the prompt.
Depending on where you live, you may have the right to ask for access to, correction of or deletion of your personal data, or to object to its use. Send requests to the address below. ProofCam has no accounts, so we may need an identifier from the app to find your records. Some services named in this policy may process data outside your country, including in the United States.
ProofCam is a general-purpose work tool and is not directed at children.
If this policy changes, the updated version will be posted on this page with a new effective date.
Questions about privacy? Email getproofcam@gmail.com.