Privacy Policy

App: NullFace (iOS) / Bundle ID: com.hide.www.privatephotos

Effective: 18 September 2026 / Last updated: 19 September 2026

1. Information we do not collect

The app never sends or collects any of the following, either for the developer or for any third party.

• Your photos and videos, or thumbnails of them
• Analysis results (detected faces or people, their size, sharpness scores and so on)
• Contact details such as your name, email address or phone number
• Location, contacts, calendar, microphone or camera data
• Advertising identifiers (IDFA), device identifiers, usage statistics or behavioural history

There is no account to create, and the app does not identify you in any way.

2. Information stored on your device only

So that it can decide quickly whether to show a photo, the app keeps an index of its analysis results on the device. Only the following is stored.

Photo identifier and modification date

The identifier iOS assigns to each item in your photo library and the date it was last modified, used to notice edits and analyze the photo again.

Size of detected faces and people

The longer side of each detected rectangle, converted to pixels of the original image.

Size of detected body parts

Where a chest, belly or buttocks appears, the longer side of that rectangle (also in pixels), used to hide photos that show no face.

Sharpness score

A number derived from how much edge detail the image has, used to hide blurry photos on the safe side.

Facts about the kind of photo

Whether it is a screenshot, whether it was taken on this iPhone, and similar results.

All of these are numbers and true/false values. They contain no image data and nothing from which an image could be reconstructed. They live in the app’s own container (the Application Support directory) and are encrypted by the iOS file protection system. No other app can read them, and this app never sends them anywhere.

Your settings (limits, which rules are on, the column count and so on) are stored on the device in the same way. Everything stored is deleted the moment you delete the app.

2-2. The on-device machine learning model

Faces and people are detected with the Vision framework built into iOS. In addition, photos without a visible face are judged with a machine learning model bundled inside the app (NudeNet, converted to Core ML).

All of this runs entirely on your device. The model ships inside the app; no photo and no result is sent anywhere in order to run it. Using it involves no request to any external service and no usage reporting. You can turn this check off at any time in Settings.

3. Access to your photo library

The app accesses your photo library for one purpose only: to list your photos and automatically hide those where a person appears up close. Permission is requested through the standard iOS dialog and can be changed or revoked at any time in the Settings app.

Face and person detection runs on the device using the Vision framework built into iOS. No external image recognition service or cloud is involved. The app is view-only: sharing and deleting are disabled by default (you can change that in Settings).

The app writes to your photo library only when you ask it to. There are two such actions — hiding a photo (moving it to Apple’s Hidden album) and toggling a favourite — and both are confirmed first. The app never changes, moves or deletes a photo on its own.

4. Face ID and passcode

So that only you can open the settings screen, the app asks iOS to verify you with Face ID, Touch ID or your passcode. iOS performs the check, and the app receives only whether it succeeded. No face or fingerprint data is handed to the app, stored or transmitted.

5. Network use

The app communicates with no server of any kind. It contains no advertising, analytics or crash reporting, and no third-party SDKs. Every feature works exactly the same way offline.

If you use iCloud Photos, the syncing of the photos themselves is performed by Apple’s iCloud. That is a standard iOS feature that this app takes no part in, and Apple’s privacy policy applies to it.

6. Sharing with third parties

As described above the app collects nothing, so there is nothing to share with anyone. Even in response to a lawful request, the developer holds no user information that could be disclosed.

In connection with distribution on the App Store, Apple may aggregate statistics such as download counts and crash reports. That is Apple’s own mechanism and contains nothing that identifies an individual user. Please see Apple’s privacy policy for details.

7. Children’s information

The app collects no personal information from any user, of any age. It never knowingly collects information from children under 13.

8. Changes to this policy

If this policy changes, this page is updated and the “Last updated” date at the top is revised. Any significant change to what information is involved will be announced with an app update.

9. Contact

For questions about this policy or about privacy in this app, please get in touch.

The developer of NullFace
hideto0926@gmail.com