No Photo Uploads
Image analysis happens on-device. Your photos never leave your device.
No Ad Tracking
We don't use IDFA or any advertising identifiers.
Delete Anytime
You can export or delete all your data from Settings at any time.
1 Introduction
Welcome to TagFlow ("we", "us", or "our"). We are committed to protecting your privacy. This Privacy Policy explains how TagFlow collects, uses, and safeguards information when you use our iOS application.
Our guiding principle is "Privacy-first, minimum collection." We only collect what is strictly necessary to provide the service, and we never sell your personal data to third parties.
๐ก Quick summary: TagFlow processes your photos entirely on-device using Apple's Vision framework. Only text you type for AI tag generation is sent to our AI service provider, and it is never stored or linked to your identity.
2 Information We Collect
2.1 Information You Provide
- Text descriptions โ Content you type into the text tag generator (e.g., "sunset beach yoga"). This is sent to our AI API service to generate hashtag suggestions.
- Tag library data โ Tag groups and custom hashtags you save within the app. Stored locally on your device and optionally synced via iCloud (Pro feature).
2.2 Information We Do NOT Collect
- Your photos or images (processed 100% on-device via Apple Vision Framework)
- Your name, email address, or account credentials
- Your location data
- Your contacts
- Device advertising identifiers (IDFA)
2.3 Automatically Collected Information
We use TelemetryDeck, a privacy-first analytics service, to collect anonymous, aggregated usage statistics such as:
- App feature usage frequency (e.g., how often image vs. text generation is used)
- App version and iOS version
- Crash reports
This data cannot be used to identify you. No personal data is transmitted. See TelemetryDeck's privacy policy for details.
3 How We Use Your Information
| Data Type | How Collected | Purpose | Stored? |
|---|---|---|---|
| User photos / images | On-device only (Apple Vision) | Image recognition & tag generation | Never stored |
| User text input | Sent to AI API | AI tag generation | Not retained after API call |
| Saved tags / tag groups | SwiftData (local) | User data management | Device + optional iCloud |
| Anonymous usage data | TelemetryDeck SDK | Product improvement | Aggregated, anonymous |
4 Third-Party Services
4.1 AI API (OpenRouter / GPT-4o-mini)
When you use the text tag generation feature, your text description is sent to our AI service provider via an encrypted HTTPS connection. The text is processed to generate hashtag suggestions and is not retained, stored, or linked to your identity after the API call completes.
We do not share your text with any additional third parties beyond the AI processing service.
4.2 Apple Services
- Apple Vision Framework โ On-device image analysis. No data leaves your device.
- CloudKit / iCloud โ Optional Pro feature. Your tag library syncs through your personal iCloud account, governed by Apple's Privacy Policy.
- StoreKit 2 โ In-app subscription processing. Payment data is handled entirely by Apple.
4.3 Analytics (TelemetryDeck)
Anonymous, aggregated app usage statistics only. No personal identifiers. GDPR and CCPA compliant.
5 Data Storage & Security
Your tag library and app preferences are stored locally on your device using Apple SwiftData. If you enable iCloud Sync (Pro), this data is encrypted and synced via your personal iCloud account.
We implement the following security practices:
- All network requests use HTTPS/TLS encryption
- No sensitive user data is stored on our servers
- AI API calls are not linked to any user identifier
- We impose a daily API spend cap to prevent unauthorized usage
6 Your Rights & Controls
You have full control over your data:
- Access & Export โ Export all your tag data from Settings โ Export Tag Data
- Delete โ Clear all local data from Settings โ Clear All Data
- iCloud Sync โ Enable or disable at any time from Settings โ iCloud Sync
- Analytics opt-out โ Disabling analytics sharing in iOS Settings applies to TagFlow
GDPR (EU Users)
If you are located in the European Economic Area, you have the right to access, rectify, erase, and port your personal data. Since we store minimal data and none is linked to your identity, most data rights are satisfied by the in-app controls above. For any additional requests, contact us at the email below.
CCPA (California Users)
We do not sell personal information. California residents may request disclosure of what data is collected and request deletion via the in-app controls or by contacting us directly.
7 Children's Privacy
TagFlow is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.
8 Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will provide a notice within the app. Continued use of TagFlow after changes constitutes acceptance of the updated policy.
9 App Store Privacy Nutrition Label
| Category | Status | Notes |
|---|---|---|
| Photos | Not Collected | Processed on-device only |
| Location | Not Collected | โ |
| Contacts | Not Collected | โ |
| Identifiers (IDFA) | Not Collected | โ |
| Usage Data | Data Not Linked to You | Anonymous analytics via TelemetryDeck |
| Purchases | Managed by Apple | StoreKit 2 |
๐ฌ Questions or Concerns?
We'd love to hear from you. Reach out anytime โ we typically respond within 48 hours.
โ๏ธ HaneulLopezH4173@icloud.com