Privacy Policy
In short
- The camera, face tracking and makeup all run on your iPhone. Camera frames and anything derived from your face are never uploaded.
- Makeup features work offline. Photos you take go to your Photos library; we never see them.
- No account. We don’t ask for your name, email or phone number.
- Purchases are handled by Apple. We never see your payment details.
- The app uses analytics, described in section 2. This website uses Google Analytics only if you accept cookies.
1. What stays on your iPhone
Camera
When you use the live camera, each frame is processed on your device in real time to find facial landmarks and draw the makeup. Frames are never stored, uploaded or shared.
Face tracking
Face tracking uses an on-device model (Google MediaPipe) that is bundled with the app and runs entirely on your iPhone. The makeup features work without an internet connection.
Facial data
Facial landmarks are computed on the fly and discarded immediately. PandaCam does not perform face recognition or biometric identification. Nothing derived from your face — images, landmarks, skin tone or face shape — is ever sent anywhere.
Photos you take
Photos are saved to your Photos library using add-only access: the app can add photos but cannot read your library. If you use iCloud Photos, Apple syncs your library under Apple’s own terms.
Photos you open (Photo mode)
You choose photos through the system photo picker, which needs no library permission. A chosen photo is kept in memory only, on your device, while you use it.
Sharing
A photo is shared only when you tap Share, through the iOS share sheet, to the destination you choose. What that destination does with it is governed by its own terms.
No account
PandaCam has no accounts. We don’t ask for your name, email address or phone number.
2. Analytics in the app
3. Purchases
In-app purchases are processed by Apple. We never receive your name, payment card or Apple ID details.
The app checks your purchase status with Apple (StoreKit) to unlock features. This needs an internet connection only when you buy or restore a purchase. Apple’s handling of your data is described in Apple’s Privacy Policy.
4. This website
This website uses Google Analytics 4, and only after you accept cookies in the cookie banner. If you reject them, or haven’t chosen, Google Analytics is not loaded and sets no cookies.
- Data: pages visited, referring page, approximate location (derived from your IP address), device, browser and operating system, cookie identifiers, and your IP address. GA4 does not log or store IP addresses.
- Purpose: understanding how many people visit, how they find the site and which pages they read.
- Legal basis: your consent (GDPR Art. 6(1)(a); explicit consent under KVKK). You can withdraw it any time via at the bottom of every page; withdrawal doesn’t affect processing that already happened.
- Processor: Google Ireland Ltd. / Google LLC. Data may be transferred to the USA. Transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses (GDPR) and on the safeguards required by KVKK Art. 9.
- Retention: [2] months in Google Analytics, after which event-level data is deleted.
- Settings: Google Signals and ad personalization are turned off. Google Consent Mode is used, and all advertising-related consent is always denied.
Cookies
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes visitors | [2 years] |
_ga_<ID> | Google Analytics | Keeps session state | [2 years] |
pc_consent | This website | Remembers your cookie choice | 6 months |
The Google Analytics cookies are set only if you accept. The site also remembers your language choice in your browser’s local storage; this never leaves your device.
5. Your rights
Depending on where you live, including under the GDPR and Turkey’s KVKK (Law No. 6698), you have the right to:
- access the personal data we hold about you and learn how it is processed;
- have it corrected or deleted;
- object to or restrict processing;
- withdraw your consent at any time;
- lodge a complaint with a supervisory authority — in Turkey the Personal Data Protection Board (KVKK Kurulu), in the EU your local data protection authority.
Because the app doesn’t create accounts and keeps your camera, face data and photos on your device, we usually hold no personal data that could identify you. To exercise your rights, email support@pandacam.example.
6. Children
PandaCam is rated [4+] on the App Store. It is not directed at children under [13], and we don’t knowingly collect personal data from them.
7. Changes to this policy
If we change this policy, we’ll publish the new version on this page and update the effective date at the top. Significant changes will also be noted in the app’s release notes.
8. Who we are & contact
The data controller is [Developer / legal entity name], [address], [country].
Questions about privacy or support: support@pandacam.example.