Privacy Policy

In a nutshell: Obscura analyzes the photos on your iPhone; it doesn’t upload them from anywhere to do so, and it has no analytics or ads. The only thing that leaves your device is what you choose to publish in a shared gallery.

Data Controller

Davide Aicardi — contact: feedback@globeinc.dev.

What Stays on Your Device (Almost Everything)

The app works without registration. The photos you import, tags, mood boards, notes, and shot lists stay on your iPhone. Image analysis (automatic cropping, pose recognition, lighting, and color palette) takes place entirely on your device, using Apple’s machine learning frameworks: no photos are sent to a server for analysis.

If you have iCloud enabled, your library syncs across your devices via your private iCloud database (Apple CloudKit): that data is stored in your Apple account, and we cannot access it.

What leaves the device (only if you choose to)

Account for publishing. To publish a gallery, you need to sign in using “Sign in with Apple.” We receive your Apple ID and the email address you choose to share (even if it’s hidden, via Apple’s private forwarding). The account is used solely to ensure that everyone manages their own galleries. It is managed by Supabase on servers in the European Union/Switzerland (AWS region eu-central-2, Zurich).

Published galleries. The photos you publish are uploaded, in a thumbnail version, to Cloudflare’s infrastructure to be served on the gallery’s web page. They remain online until the expiration date you choose or until you revoke the link; upon expiration, they are automatically deleted every night. The login PIN is stored only as a cryptographic hash (bcrypt), never in plain text.

Visitor ratings. Anyone who opens a gallery can “like” the photos. The rating is linked to a random identifier generated in the visitor’s browser: we do not collect the name, email address, or any profile information of those who rate the photos.

Purchases. Obscura Pro is an in-app purchase managed entirely by Apple. We do not see or store any payment data.

What We Don’t Do

• No analytics or tracking systems, either in the app or on this website
• No advertising, no sale or transfer of data to third parties
• No profiling cookies (this site does not use cookies)

Vendors (data processors)

• Apple — Sign in with Apple, in-app purchases, iCloud/CloudKit
• Supabase — accounts and gallery metadata (EU/Switzerland)
• Cloudflare — hosting of published images and this site

Retention

• Galleries and related images: until the selected expiration date or until revoked, then automatically deleted
• Account: until you request its deletion
• Local data: under your control; you can delete it from the app or by uninstalling the app

Your rights

Under the GDPR, you may request access to, correction, deletion, restriction, and portability of your personal data, and file a complaint with the Data Protection Authority. To exercise these rights, write to feedback@globeinc.dev. You can revoke gallery access at any time from within the app; account deletion requests should be sent to the same address.

Changes

If this policy changes substantially, we will update the date at the top of the page and, where appropriate, notify you within the app.