01
Who this policy covers
This policy applies to the PostLens iPhone and iPad app, the public PostLens website, and the feedback and support service. PostLens is an independent product created by Santiago Molina. For privacy questions or requests, use the support link at the end of this policy.
02
Photos and on-device processing
Photo review, scoring, adjustments, crops, layouts, and ordinary exports run on your device. PostLens does not send your photo library, photo pixels, filenames, locations, EXIF metadata, or PhotoKit identifiers to a PostLens server.
Apple Photos may download an iCloud-only item when you explicitly open it. Saving or sharing uses Apple system services. These are Apple platform operations, not uploads to PostLens.
03
Data stored on your device
PostLens stores preferences and the content you explicitly save, such as Saved Edits, Collections, Creations, recipes, Creator Kits, and posting plans. Saved photo copies are metadata-free and kept in protected app storage. Gallery scoring and Publishing Studio exclusion indexes use only the limited fields described inside Settings and are excluded from backup and sync.
Settings provides controls to review or clear local score, exclusion, diagnostic, and saved-content data. Uninstalling PostLens also removes its app container, subject to Apple platform behavior.
04
Apple iCloud settings sync
If iCloud key-value storage is available, PostLens may sync appearance, accent theme, and the default publishing format through your Apple account. Photos, saved projects, scores, diagnostics, and PhotoKit identifiers are not included in that sync.
05
Optional Apple services
PostLens uses Apple frameworks for Photos, purchases, reminders, sharing, and on-device intelligence. If you choose Edit with Image Playground, PostLens gives Apple a metadata-free render after a per-use disclosure. Apple may process that request on device or with Private Cloud Compute under Apple’s terms and privacy practices.
PostLens Supporter purchases are processed by Apple. PostLens receives verified entitlement status and product information from StoreKit, but does not receive your payment-card details.
06
Feedback, support, and diagnostics
When you choose to submit feedback, PostLens receives the subject, message, selected language, submission type, and an optional reply email. A native bug report may also include the bounded diagnostic report shown before submission. Diagnostics contain predefined workflow event codes, timestamps, and app version/build information—not photos, filenames, captions, locations, or Photos identifiers.
Ideas may appear on the public feedback board only after moderation. Reply email addresses, bug reports, contact messages, and diagnostics are never published. They are available only to authorized administration users.
07
Website security and voting
The feedback service processes the requesting IP address to apply abuse limits. PostLens stores only a keyed hash for that limit and removes rate-limit records after no more than two days. Cloudflare Turnstile processes a short-lived challenge token for spam prevention; PostLens does not attach that token to your submission.
If you support a public idea, the site stores a random, HTTP-only browser token for up to one year and stores only its keyed hash with the vote. The token is used to let that browser add or remove one vote. PostLens does not use it for advertising or cross-site tracking.
08
How information is used and shared
Submitted information is used to answer support requests, investigate bugs, moderate ideas, maintain the public roadmap, prevent abuse, and operate PostLens. PostLens does not sell personal information or share it for behavioral advertising.
The service uses Apple for platform functionality and purchases, and Cloudflare for website hosting, database storage, access control, and spam protection. Information may also be disclosed when required by law or to protect the security and rights of users and the service.
09
Retention and deletion
Private feedback and diagnostics are kept only while reasonably needed to respond, investigate, maintain a record of the decision, or meet legal obligations. Approved public ideas may remain while the public board operates. Votes remain while their associated idea is available. Rate-limit hashes are removed after no more than two days, and the browser voting token expires after one year.
You may request deletion of a private submission or optional email by contacting support with enough information to locate it. Public ideas can also be removed on request, subject to legal obligations and the need to protect other users. PostLens may retain a minimal record where required by law or for security.
10
Your choices and rights
You can decline Photos, camera, reminder, or optional Apple-service access; use local clear controls; omit a reply email; avoid submitting feedback; remove a website vote; cancel Supporter in App Store settings; and request access, correction, or deletion of information you submitted. Applicable law may provide additional privacy rights.
11
Children and security
PostLens is not directed to children under 13 and does not knowingly collect their personal information. If you believe a child submitted personal information, contact support so it can be removed.
PostLens uses data minimization, encrypted transport, restricted administrative access, and Cloudflare security controls. No storage or transmission system can be guaranteed completely secure.
12
Policy changes
This policy may be updated when PostLens features or legal requirements change. Material changes will be reflected by a new effective date and, when appropriate, an in-app or website notice.