Privacy Policy

Updated October 27, 2026 · VeriPic 1.1. VeriPic provides image analysis on your device and optional Cloud Deep Scan. No registration is required. We do not include advertising, cross-app tracking or third-party analytics SDKs, and do not sell your data.

For refunds, we retain per-order credit delivery, usage, reversals and refund status. In Settings > Purchases & refunds, you can separately opt in to share delivery status and credit usage with Apple when it reviews a refund. This is off by default. Photos and detection reports are not included. You can withdraw this permission to stop future sharing; data already sent to Apple follows Apple’s policies. Refunds and requests for a further review are decided by Apple.

On-device analysis reads only an image you select or share, including its embedded metadata, and runs locally. History stores a thumbnail, date, verdict and analysis signals on this device. Shared images wait in the private App Group inbox until the app reads them; the app then removes the inbox files. Exported history and report cards may contain private images and analysis details. Device backups may include local app data under Apple’s settings. New scans also save the selected image and its metadata privately on this device for reanalysis. Deleting the record removes this local source copy. Older records are reanalyzed using the image already saved in history; original image detail and metadata may be missing. JSON history exports include thumbnails and report data, not the local source images.

Cloud Deep Scan uploads a JPEG copy resized to at most 1024 pixels on its long side, a perceptual image fingerprint, a random device ID and an anonymous account ID over HTTPS to our Cloudflare Worker. The Worker forwards the image to Hive for AI-content detection. Unless you separately opt in to model improvement, VeriPic does not retain the uploaded photo after the scan. Hive processing and retention follow its applicable service terms and privacy policy; we cannot promise that Hive never retains images or uses them to improve its services. Avoid sending confidential images or images you lack permission to submit. Processing may take place outside your country or region.

Contributing to model improvement is separate and optional. If you opt in, each cloud scan saves the reduced JPEG, the cloud AI score and any source or face-manipulation scores, plus compact numeric on-device scores and signal types. The photo is kept in private Cloudflare R2 storage and the scores in Cloudflare D1, linked to your anonymous account ID, to evaluate and improve future on-device detectors. We do not store embedded photo metadata, prompts or free-form report text in this dataset, and do not use the samples for advertising or sell them. You can use cloud scanning without contributing. In Settings > Privacy controls, you can stop future contributions and delete saved samples without losing credits. Stored photos and rows are deleted on request; deletion cannot undo any training already performed. Photos have a 90-day expiry in R2, and matching score rows are pruned daily.

Cloud permission is requested before the first scan. Allowing it also permits future cloud scans you actively start, until you withdraw permission in Settings. It never starts a background photo upload. Declining or withdrawing permission leaves local analysis available. Withdrawal blocks future scans; it does not recall a request already sent or delete prior server records.

When online, the app may query free allowance and credits using the device and account IDs even before you allow photo uploads. Apple handles payment details. To deliver credits and process refunds, the server stores the anonymous account ID, balance and verified purchase details (transaction ID, product, credit amount, environment, status and timestamps). The account ID is also an Apple purchase account token and may sync through iCloud Keychain. Random IDs are pseudonymous and can link activity and purchases; they are not names, email addresses or Apple IDs.

The Worker caches the image fingerprint, detection score, likely generator and cache metadata for up to 30 days. Network addresses (IPv6 network prefixes) and device IDs support abuse limits. Daily counters expire after 2 days, monthly counters after 40 days; expired database counters are cleaned during later successful scans, so expiry is not a promise of immediate physical deletion. Account and purchase records remain as needed for credits, refunds and applicable obligations. Cloudflare, Apple and Hive may separately process necessary network and service information.

You can read, export and delete local history in History, withdraw cloud permission in Settings, and manage photo-add permission in iOS Settings. To delete the anonymous cloud account and any remaining credits, use Settings > Backup & recovery > Delete cloud account. The server removes the balance and unlinks retained transaction records from the account ID. This does not refund purchases or erase local reports. For access, correction or other deletion requests concerning server records, contact treeui.old@gmail.com. We may privately ask for the backup code to locate records; never publish it or send Apple passwords or verification codes. Records needed for refunds or applicable obligations may be retained without the deleted account ID. Hive and Apple handle their own data separately.

If you contact support, we process the email address, message and attachments you choose to provide to respond to your request. Public website hosting may process IP addresses, browser information and security logs. These pages use no analytics or advertising scripts. Children should use the app with a parent or guardian; an App Store age rating does not mean cloud processing is suitable for every child. Contact us about a child’s submitted data. Material changes will be reflected here and, where relevant, in release notes or a renewed permission request.