Privacy Policy — DeMotion

Last updated: 2026-05-06 · Effective date: 2026-05-06

1. Who we are

DeMotion is a mobile app that strips Live Photo (iOS) and Motion Photo (Android) video components from existing photos in your device's photo library — in place, with all metadata preserved. Privacy is fundamental: the app runs entirely on your device with no cloud upload, no analytics, no Sentry, and no tracking — only local PhotoKit / MediaStore access strictly required to perform the conversion.

Data controller: Maciej Siemiński (sole proprietor, Poland) — the developer of DeMotion. Contact: mail@macsiem.dev

This Privacy Policy explains what personal data DeMotion processes, how, why, and what rights you have.

2. Plain-language summary

DeMotion runs entirely on your device — your photos never leave your phone, there is no cloud, no analytics, no Sentry, and no tracking. We use Google AdMob for ads on the free tier and Apple / Google billing for in-app purchases. You have full GDPR rights including access, deletion, and portability.

3. Data we process

3.1 Local-only data

The app stores locally on your device:

• user preferences (theme, language, premium entitlement state),
• onboarding completion flag,
• a short history of recent batch conversions as metadata: number of items, date, total bytes saved (no per-photo identifiers, no thumbnails, no file content).

3.3 No diagnostic SDK

DeMotion does not integrate Sentry, Firebase Crashlytics, Bugsnag, or any third-party analytics/crash SDK. Crash reports we may receive come only from Apple App Store Connect (Crashes) and Google Play Console (Android Vitals), at the platform level, in the form of anonymized aggregate crash data tied to the app version — never to a specific user.

3.4 Advertising (AdMob)

DeMotion shows non-invasive ads on Home and Result (banner) plus interstitial after every N batches (free tier only). Ads are delivered by Google AdMob, whose SDK collects:

• the Advertising ID (Android Advertising ID / Apple IDFA), shared with Google to serve ads;
• diagnostic data (device model, country-level location, language).

Default mode is non-personalized ads. on Android you control the Advertising ID under system Settings. Ads can be permanently disabled via the Lifetime / Premium IAP.

3.5 In-app purchases (IAP)

DeMotion offers paid features through Apple In-App Purchase (iOS) and Google Play Billing (Android). When you make a purchase:

• Apple / Google process all card and account data — we never see your card number, billing address, or full account information;
• Apple / Google return a purchase token / transaction receipt that DeMotion stores locally to validate entitlement;
• restore purchases re-fetches your existing entitlements from Apple / Google.

Available products: premium annual subscription, lifetime unlock, optional tip jar.

3.6 Device permissions

• Photos / Media (READ_MEDIA_IMAGES / PHPhotoLibrary): add or process images from the gallery (optional unless required for app's core function).

Each permission is requested contextually. You can deny any permission and still use the core features (where applicable).

3.7 What we do NOT collect

• Your name, email, phone number, address (no account is required).
• Contacts list, calendar, SMS, call logs.
• Precise location.
• Browsing history outside the app.
• Biometric data (Face ID / Touch ID is used only as a system-level lock and never leaves your device).
• Health, financial, or payment card data.

4. Why we process this data (purposes)

• Run the app on your device — local storage and (where present) encryption let your data persist between sessions.
• Sustain the free tier — AdMob delivers non-invasive ads to fund users who do not buy premium.
• Process purchases — Apple / Google billing fulfils premium entitlements you choose to buy.

5. Legal basis (GDPR Article 6)

For users in the European Economic Area, United Kingdom, and Switzerland:

• Performance of a contract (Art. 6(1)(b)) — running the app, processing your purchases.
• Legitimate interest (Art. 6(1)(f)) — fraud / abuse prevention, non-personalized advertising. Our interest is improving stability and sustaining the free tier; this does not override your fundamental rights.
• Consent (Art. 6(1)(a)) — personalized advertising, where you grant consent via the in-app preference. You may withdraw consent at any time without affecting prior processing.
• Legal obligation (Art. 6(1)(c)) — only when we must respond to a lawful request from authorities.

6. Recipients (with whom we share data)

We do not sell personal data. The categories of recipients are limited to providers strictly required to run the app:

Recipient	Purpose	Data category	Privacy policy
Google LLC (AdMob)	Serve ads	Advertising ID, device & ad metrics	https://policies.google.com/privacy
Apple Inc. (App Store / IAP)	In-app purchase processing on iOS	Purchase token, account-level entitlement	https://www.apple.com/legal/privacy/
Google LLC (Play Billing)	In-app purchase processing on Android	Purchase token, account-level entitlement	https://policies.google.com/privacy

We may disclose data if required by a valid court order or other binding legal process, after verifying the request and notifying you where lawful.

7. International transfers

Some of the recipients above are located outside the European Economic Area (mainly in the United States). Where transfers occur, they are protected by:

• the European Commission's adequacy decision (EU-US Data Privacy Framework) for providers certified under the Framework, including Google LLC;
• Standard Contractual Clauses (SCCs) as adopted by the European Commission, supplemented by additional safeguards where applicable;
• the recipients' own published transfer mechanisms (e.g. Apple's binding corporate privacy commitments).

You can request a copy of the relevant safeguards by writing to mail@macsiem.dev.

8. Retention

Data	Where it lives	How long
Your in-app data	Your device only	Until you delete it, uninstall the app, or wipe app data
Advertising ID	Google AdMob systems	Per Google's retention policy (typically up to 14 months for ad metrics)
IAP purchase token / receipt	Your device + Apple / Google	Until you uninstall; Apple / Google keep transaction records per their own policies

9. Your rights (GDPR Art. 15–22)

You have the following rights regarding your personal data:

• Right of access (Art. 15) — confirmation whether we process your data and a copy of it. Most of your data is already on your device; export from the app or write to us for the rest.
• Right to rectification (Art. 16) — correct inaccurate data. Edit data directly in the app.
• Right to erasure / "right to be forgotten" (Art. 17) — delete all data via Settings → "Erase all data", or by uninstalling the app.
• Right to restrict processing (Art. 18) — request a temporary halt; write to us.
• Right to data portability (Art. 20) — Settings → "Export data" produces a JSON / Markdown bundle.
• Right to object (Art. 21) — object to processing based on legitimate interest, especially profiling-style ads. Disable personalized ads in app settings or via system controls.
• Right not to be subject to automated decisions (Art. 22) — DeMotion does not make automated decisions with legal or similarly significant effect about you.

To exercise any right, write to mail@macsiem.dev. We respond within 30 days (extendable by 60 days for complex requests, with notice).

10. Right to lodge a complaint (GDPR Art. 77)

If you believe we are processing your data unlawfully, you may file a complaint with a supervisory authority. For Polish residents:

Prezes Urzędu Ochrony Danych Osobowych (PUODO) ul. Stawki 2, 00-193 Warszawa, Poland https://uodo.gov.pl

You may also file a complaint with the supervisory authority of your habitual residence, place of work, or place of the alleged infringement in another EEA country.

11. Children's privacy

DeMotion is not directed at children under 13 (under 16 where applicable per local law). We do not knowingly collect personal data from children under that age. If you believe a child has provided us personal data without parental consent, contact us at mail@macsiem.dev and we will delete it promptly.

The "Designed for Families" / "Ages 5+" Apple / Google flags are not set on DeMotion — the app is rated for general audiences 13+.

12. Security

• In-place edits only — DeMotion modifies your existing photos via PhotoKit (iOS) / MediaStore (Android) APIs in place; original asset identifiers, capture dates, locations, EXIF, album membership, and iCloud sync state are preserved.
• No upload, no copies — your photo content never leaves your device. There is no cloud, no backup, no analytics.
• Transport security — the only network calls (ads, IAP) use HTTPS / TLS 1.2+.
• Minimization — we collect only what is required for the listed purposes.

No system is 100% secure; please keep your device updated and use strong device locks.

13. Advertising ID and tracking

DeMotion does not call the App Tracking Transparency framework on iOS — there is no tracking-grade identifier collection by the app. AdMob, when present, runs in non-personalized mode.

On Android, you can reset or limit your Advertising ID under Settings → Google → Ads.

14. In-app purchases

DeMotion offers the following in-app products through Apple App Store and Google Play: premium annual subscription, lifetime unlock, optional tip jar.

All payment data is handled by Apple Inc. (App Store / iTunes account) or Google LLC (Play Billing). We never see your card number, your billing address, or your full Apple ID / Google account. Apple and Google return only an opaque purchase token and entitlement metadata that we use to unlock features. Subscriptions can be cancelled at any time in iOS Settings → Apple ID → Subscriptions or in the Google Play app → Subscriptions; cancellation rules are governed by Apple / Google.

15. Changes to this policy

We may update this policy as the app, third-party SDKs, or applicable law change. Material changes will be announced in-app and the "Last updated" date at the top will change. Continuing to use DeMotion after a change constitutes acceptance of the updated policy.

16. Contact

For privacy questions, exercise of rights, or concerns about this policy:

Maciej Siemiński Email: mail@macsiem.dev

Canonical version of this policy: https://macsiem.github.io/demotion-privacy/ Source: https://github.com/MacSiem/demotion-privacy