Privacy policy

Skrim is a photo privacy app developed by Maneo House L.C. This policy explains what data Skrim handles, what it stores, and what it does not collect. We built Skrim with a simple principle: your photos and their metadata never leave your device.

01Data we do not collect

Skrim does not collect, transmit, or store any of the following:

• Personal identity information. No accounts, no login, no email, no name.
• Photo content or metadata. All EXIF processing is on-device only.
• Location data. We do not access your GPS — we only read GPS tags embedded in photos you select.
• Device identifiers. No IDFA, no IDFV, no fingerprinting.
• Analytics or telemetry. No Firebase, no Crashlytics, no third-party SDKs.
• Browsing or usage behavior. No tracking, no session recording.

Skrim contains zero third-party analytics frameworks and makes zero network requests to our servers. All image processing happens entirely on your device using Apple's native ImageIO framework.

02Data stored locally on your device

Skrim stores a small amount of non-personal data on your device to support app functionality:

• Usage counters. Total photos processed (lifetime count) and metadata bytes removed. Simple integers used to display your stats in Settings.
• Daily limit tracker. A counter for the free tier's 5-strips-per-day limit. Resets automatically at midnight. Stored as an integer and a date string in UserDefaults and the iOS Keychain.
• First use date. A timestamp recording when you first used the app, used to calculate "days protected" in your stats.
• Ghost Mode entitlement. A boolean indicating whether you've purchased Ghost Mode or Ghost Mode Family. Derived from Apple's StoreKit and stored locally so the Share and iMessage extensions can check your entitlement.

None of this data is transmitted anywhere. It exists only on your device. The Keychain entry for the daily-limit counter persists across app deletion (intentional, to prevent free-tier reinstall abuse) but contains no personal information whatsoever — only an integer and a date.

03In-app purchases

Skrim offers two non-consumable in-app purchases — Ghost Mode ($9.99) and Ghost Mode Family ($19.99, shareable with up to six people via Apple Family Sharing). Both are processed entirely through Apple's StoreKit 2 framework. We do not operate any payment servers. Apple handles all transaction processing, receipt validation, and payment information. We never see or store your payment details, Apple ID, or any financial information.

Purchase restoration uses Apple's native restore mechanism, which verifies your transaction history directly with the App Store.

04Photo processing

Strip mode — when you strip a photo, Skrim loads the image into memory, removes all EXIF metadata, and presents the cleaned result. The original photo on your device is never modified.

Scramble mode (Ghost Mode) — when you scramble a photo, Skrim replaces the existing EXIF metadata with randomly generated but plausible fake data, including GPS coordinates, camera model, timestamps, and lens information. The image pixels remain untouched. This fake data is generated entirely on-device using randomized values; no real data from your device or location is used.

Inject mode (Ghost Mode) — when you inject a photo, Skrim adds plausible fake metadata to images that have no metadata at all (such as AI-generated images or screenshots). Same on-device randomization as Scramble.

In all three modes, processed images only leave the app when you explicitly choose to save them to your Photos library or share them via the system share sheet.

05Share Extension & Messages Extension

Skrim's Share Extension and Messages Extension process images in memory using the same on-device methods as the main app. They do not make network requests. Each extension reads a single boolean value (your Ghost Mode entitlement) from a shared app group container to determine whether Scramble mode is available. No photo data or metadata is shared between extensions or persisted after processing.

06Permissions

Skrim may request the following system permission:

• Photos — Add Only. Required only when you choose to save a processed image back to your Photos library. We request add-only access, meaning the app cannot read or browse your photo library. Photo selection uses Apple's system photo picker, which operates in a separate process and does not grant the app access to your library.

07Children's privacy

Skrim does not collect personal information from anyone, including children under the age of 13. Because the app collects no data and requires no account, it is safe for users of all ages.

08Third-party services

The only third-party service Skrim interacts with is Apple's App Store for in-app purchase processing. Apple's privacy practices are governed by their own privacy policy. Skrim does not integrate any other third-party services, SDKs, or APIs.

09Data retention & deletion

All locally stored data — usage stats, daily-limit counter, Ghost Mode entitlement — is deleted automatically when you uninstall the app, with one exception: the Keychain entry for the daily-limit counter persists across app deletion as an anti-abuse measure (it contains only an integer and a date, no personal information). It is automatically cleared when you reset your device or sign out of iCloud.

There is no server-side data to delete because we do not operate servers or collect data remotely. There is no account to close.

10Changes to this policy

If we update this privacy policy, we will post the revised version on our website and update the effective date. Because we do not collect contact information, we cannot notify you directly of changes. We encourage you to review this policy periodically.

11Contact