Seamera ("the App", "we") is committed to protecting your personal information. This Policy explains what we collect, what we do not collect, and how we handle information in connection with our iOS app.
We do not provide account, login or advertising features.
We do not upload your photos or videos to our servers. All color correction happens on your device.
The optional one‑time Seamera Pro purchase is processed entirely by Apple. We never receive your payment details.
1. Purpose of Processing
We process information only as needed to provide underwater photo and video color correction and to support the App:
- Core functionality: Apply your settings (scene, strength) to produce an edited photo or video on your device.
- Purchases: Check with Apple's StoreKit, on your device, whether Seamera Pro is active.
- Product improvement (usage records, from version 1.4.0): Understand which steps work or fail (e.g. whether a save to Photos succeeded, whether the store product loaded) so we can fix problems. See Section 3.
- Customer support: Handle support emails and any attachments you choose to send.
- App reliability: Review iOS‑provided crash/diagnostic data (anonymized) to improve stability, subject to your device settings.
2. Retention
| Category |
Retention |
| Photos / videos / edits |
Processed on device; never sent to or stored on our servers |
| Usage records waiting on your device |
Up to 30 days (max 1,000 records / 1 MiB), then deleted; excluded from device backups |
| Usage records on our collection server |
Raw records deleted after 90 days; only daily totals that identify no one are kept |
| Usage records in PostHog (analytics tool) |
Kept for the retention period of the PostHog plan (currently 1 year), then deleted; deleted sooner when you turn records off |
| Support emails & attachments |
Retained for up to 3 years after resolution (dispute handling), then deleted |
| Crash/diagnostic data |
Viewed within the scope iOS provides; no separate in‑app storage |
Where a longer period is required by law, we will comply with that period.
3. Information We Process
Required personal data: None (no account/login).
Usage records (from version 1.4.0) — sent without photos:
- What is sent: screen steps and their results — app session start, edit result (success/failure, photo/video), save result (in the app or Photos; success/failure and error type), free‑save decisions (0–3 remaining), paywall shown, store product / purchase / restore results (success, cancelled, pending, failed; App Store country as a 3‑letter code; price and currency), app version and build, distribution channel, time (UTC), and the notice/consent version.
- These records are grouped under a random ID generated on your device. It is pseudonymous and is never linked to your name, email, Apple ID, advertising identifier (IDFA) or device identifiers. Turning records off discards the ID.
- Never sent: photos or videos or their content, thumbnails, EXIF/GPS or any location, file names or paths, email or contacts, receipts or transaction IDs, advertising identifiers. Our server does not store raw IP addresses or User‑Agent strings.
When records are sent (by region):
- European Economic Area, United Kingdom, Switzerland, or if your country cannot be determined: only after you agree (consent). The App asks on the home screen after your first save; the default is off.