Effective 10 October 2026. Served at /privacy on the app's backend; the same text as backend/src/worker.ts carries. Change both together.
AI Camera is a camera app made by Kabir Soorya. A camera in it is a small program that says what the sensor does, what happens to the pixels and what goes on screen. This policy says what leaves your phone, when, and why.
The camera, the microphone and the photo library are used to take pictures and video and to save them to your library, at your request. Motion sensors (the level, the compass, the barometer) are read on the phone so a camera program can know how the phone is held. None of this leaves the phone.
Writing a camera with AI. When you describe a camera in words, the sentence you type is sent to our backend (a Cloudflare Worker) and from there to the model provider, Anthropic, which answers with the program. The backend keeps a per-device daily request limit. If you connect your own OpenRouter account instead, the sentence goes to OpenRouter directly under your account and OpenRouter's terms apply.
Cameras that use a model. Some cameras ask a model about the picture you just took (for a caption, a title, a painting). Every such camera's card says what leaves the phone and where it goes. A picture is sent only when you run that camera and press the shutter. Pictures sent to our backend are passed to the model and are not kept.
Crash and error reports (optional). When you turn on "Share crash and error reports", the app sends crash reports and error events to Sentry, a reporting service, with the device model, the OS version, the app version, a random install identifier, the lines the app wrote about what it was doing, and a picture of the app's own screen at the moment of an error, which can include what the camera was showing. No name, no account, no location. Your IP address is used to deliver the report and is not stored by the app. With this switch on, a camera you write with AI, together with the sentence that asked for it, is also kept on our backend so faults in generated programs can be found and fixed.
Pipeline images (optional). "Upload pipeline images" sends the stages of a processed picture to our backend for diagnosis. It is off by default.
Device session. To use AI writing, the app registers a random device identifier with our backend and receives a session token. The identifier is not linked to you.
Updates. At launch the app asks Expo's update service for a newer JavaScript bundle, sending the app's runtime version, platform and update channel.
Sharing cameras. A camera you share goes as a file through Messages, Mail or Files to the person you choose. There is no server for shared cameras.
Diagnostic records on our backend are deleted after 30 days. Crash reports at Sentry follow Sentry's retention (90 days). Nothing is kept longer than it is needed to fix the app.
The app is not directed at children under 13 and collects no personal data from anyone.
Both diagnostic switches are under the camera's name, then Diagnostics. iOS Settings controls the camera, microphone, photo library and motion permissions. You can ask for the diagnostic records tied to your install identifier to be deleted; the identifier is shown on the Diagnostics screen.
agenttrebleoseven@gmail.com
When this policy changes, the date at the top changes and the new text is served at the same address.