Last updated: September 29, 2026
PerfectPass ("the app", "we") is a biometric ID and passport photo maker for Android and iOS. This policy describes exactly what the app does and does not do with your data.
Your photos and saved documents — not collected. Every photo you capture or import, every edit, every compliance check, and every saved document stays in the app's private storage on your device. Saved documents are excluded from cloud device backups by design. Uninstalling the app deletes them permanently; you can also delete them yourself at any time from Privacy & unlock → Delete all saved documents.
Camera. The app requests camera access to let you take a photo. The camera feed is processed live, on-device, to draw the framing guide overlay; nothing from the camera is transmitted anywhere.
Face data. The app uses Apple's on-device Vision framework (VNDetectFaceLandmarksRequest and VNGeneratePersonSegmentationRequest) to find your face and body outline in a photo you take or import. This produces two things, both purely geometric and both temporary:
This is not face recognition or identification. Vision reports coordinates and a mask, not an identity, a numeric face embedding, or anything that could be matched against another photo or a database. The app cannot recognise who is in a photo, compare faces, or tell two photos of the same person apart — it has no code that does any of that.
Use: solely to crop, guide, measure, and replace the background of the photo on screen, as described above. Not used for any other purpose.
Sharing: never shared with any third party. This processing runs entirely on-device using Apple's Vision framework; no image, video frame, landmark, or mask is ever transmitted anywhere. PerfectPass has no server and no code that makes a network request of any kind.
Storage: landmark positions and the person mask exist only in memory while a photo is actively being processed, and are recalculated from the photo itself each time they're needed (for example, when you reopen a saved photo to crop it again). Nothing describing your face — coordinates, measurements, or a mask — is ever written to disk, to UserDefaults, or to the SwiftData store on its own. Only the finished photo (pixels) is saved, in the on-device storage described above.
Retention and deletion: face data is not retained independently of the photo it was derived from — it is discarded from memory as soon as the crop, guide, measurement, or background replacement it was computed for is finished, typically within a fraction of a second. Deleting the photo from the vault, or uninstalling the app, removes everything, since no face data exists once the photo it depended on is gone.
Advertising identifier — not collected, on either platform. Earlier versions of the Android app carried a single banner ad and, with your consent, used your device's advertising identifier for it. That has been removed: there is no advertising SDK in either app, no consent prompt, and no advertising identifier is requested or read.
Purchase status. Google Play Billing / Apple StoreKit tell the app what you've bought (a €0.99 single photo, or the €5.99 lifetime unlock, on either platform). We don't receive or store your card details, billing address, or any other payment information — that's handled entirely by Google/Apple.
We do not collect: your name, email address, phone number, precise or approximate location, contacts, calendar, messages, health data, or any account credentials — because the app has no account system and no backend to send any of this to.
| Party | What they get | Why |
|---|---|---|
| Google Play Billing / Apple StoreKit | Purchase confirmation only | Processes the in-app unlocks |
| Apple's Vision framework (on-device only) | Nothing — runs locally on your phone, not as a network service | Finds face landmarks and the person outline used to crop, guide, and replace the background — see Face data above |
That is the complete list. There is no advertising network, no analytics provider, and no crash reporter. Face data specifically is never sent to Apple, to us, or to anyone else — Vision is on-device code included with iOS, not a service your data is uploaded to.
PerfectPass is not directed at children under 13 (or the equivalent age in your jurisdiction) and we do not knowingly collect data from them. Because the app has no account system, we have no way to knowingly identify a child user in the first place.
If this policy changes, the "Last updated" date above will change too. We won't reduce your rights under this policy without your consent for data already collected.