Who we are (data controller)
Mustafa Baykal (Individual Developer), jurisdiction: Republic of Türkiye.
For all privacy-related questions: mustafabaykal91@gmail.com
What we collect
- Nothing personal. Only Retro does not require an account or collect identifying information about you.
Third-party services we use
- Apple Vision (iOS): subject detection runs entirely on your device; no photos, faces or masks are sent to Apple for this processing.
- Google ML Kit Subject Segmentation (Android only, if released): image processing runs on-device. Google Play services may download the model before first use. Google's separate ML Kit terms cover model updates and technical SDK metrics; this SDK is not used in the iPhone app.
Data processors and international transfers
Photo editing and subject detection are local operations, not uploads to a processor. The platform providers below are listed to explain their limited roles; Google applies only to a possible future Android release. A dash means no separately signed DPA is asserted here, and N/A means this app does not rely on an SCC for transferring your photo content. Their own terms govern their platform services.
| Processor | Purpose | Location | DPA | SCC |
|---|---|---|---|---|
| Apple, Inc. (iOS) | App Store distribution and iOS system services. Apple Vision processes subjects locally; the system photo picker, camera and add-only Photos access are managed by iOS. Only Retro does not send your photos, masks, faces or metadata to Apple for editing. Any Photos/iCloud synchronization you enable is managed separately by Apple, not by an Only Retro cloud service. | On-device photo processing; Apple's distribution services are global | — | N/A |
| Google LLC (Android only, if released) | Android-only processor/service provider for Google ML Kit Subject Segmentation and model delivery through Google Play services. Segmentation inputs and outputs stay on-device. An initial model download may require a connection; Google's ML Kit terms also describe model updates and technical performance/utilization metrics sent to Google. This does not apply to the iPhone app and does not give the developer access to your images or masks. | On-device segmentation; Google's model delivery and SDK services are global | — | N/A |
Data retention
We keep data only as long as necessary for the purpose collected, or as required by law (GDPR Art. 5(1)(e); KVKK Art. 7).
| Data type | Retention period | Reason |
|---|---|---|
| Projects: original photo copy, undoable edit recipe and subject masks; saved recipes and app settings | until-deletion | Stored in the app's private storage on your device to let you reopen and revise edits. A project's files remain until you delete that project or uninstall the app. Saved recipes and settings remain until you remove them or uninstall. The developer holds no copy. |
| Temporary render and export working files | temporary-cache | Stored only in the device cache and cleaned automatically. These files are not uploaded to the developer. |
| Copies you export to Photos or share with another app | until-you-delete-the-exported-copy | Outside Only Retro's private project storage. Deleting a project or uninstalling the app does not delete the original in Photos, an exported copy or copies held by a recipient. Manage those separately in Photos or the receiving service. |
100% on-device photo processing
Only Retro has no account, backend or cloud sync. Captured or selected photos, faces visible in them, subject masks, edit recipes and photo metadata are processed only on your device. The developer never receives any of them through the app. There are no analytics, ads, tracking, remote AI services or in-app purchases. The local subject detector is not a cloud AI service and does not identify people.
Camera permission: still photos only
Camera access is used for live photo preview and taking still photos. Only Retro does not record video, request microphone access or capture audio. You can deny or revoke camera access in iPhone Settings and continue editing photos you choose through the system picker.
Importing and saving photos
The iOS system photo picker shares only the photos you explicitly select with Only Retro; importing does not request photo-library permission or give the app general access to your library. Saving an exported image to Photos requests add-only permission, which allows adding a new image without reading your library. Full-resolution JPEG, HEIC and PNG exports can also be passed to an app you choose through the share sheet.
Location and the Remove location option
Only Retro never requests location permission or obtains your device's location. A photo you import can already contain GPS metadata. The Remove location option is on by default and strips GPS metadata from the exported copy. It does not change the source photo or the original project copy. If you turn it off, existing location metadata may remain in the export, so review this option before sharing.
Subject masks and shutter drag
Apple Vision detects subjects on-device on iOS so a selected person or object can stay sharp while a simulated motion effect is applied around it. Masks are stored locally with the project and can be refined with the mask brush. No face recognition, biometric identity profile, remote analysis or model-training upload is performed by Only Retro. If an Android version is released, Google ML Kit Subject Segmentation will run locally there; Google Play services may first download the model. See Google's Android-only provider entry above for its separate SDK metrics practices.
When you export, share or contact support
Exporting or sharing is an action you choose. Photos may be synchronized by your own Photos/iCloud settings, and a share-sheet recipient handles a copy under its own privacy policy. Only Retro provides no cloud sync of its own. If you choose to email support, the developer receives the email address, message and any attachments you send through your email service, only to handle your request. Please do not send private photos, faces, location metadata or masks. Support correspondence is separate from app data collection and is kept only as long as needed to resolve the request or meet an applicable legal requirement.
Deleting your local data
Delete a project to remove its locally stored original copy, recipe and masks, or uninstall the app to remove its private storage, saved recipes and cache. There is no account to close and no server-side photo data for us to delete. Exported and shared copies must be deleted separately.
No sale, tracking or consequential automated decisions
We do not sell or share app data for advertising, track you across apps or websites, or make automated decisions with legal or similarly significant effects. Subject detection is only an editing aid; you control the mask and the final image.
Your rights
- Access — request a copy of any data we hold about you.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion (see Delete account).
- Portability — receive your data in a machine-readable format.
- Restriction — restrict processing in certain circumstances.
- Objection — object to processing based on legitimate interests.
- Object to automated decisions — the app does not make consequential automated decisions; you may still email us per GDPR Art. 22.
- Withdraw consent — for any processing based on consent.
- Lodge a complaint — with your local supervisory authority (in Türkiye: KVKK; in EU: your national DPA).
Legal bases for processing (GDPR Art. 6)
Only Retro does not collect app data on a developer server. Local photo handling is limited to the camera, selection, editing and export actions you request and the system permissions you grant. If you email support, responding may rely on steps requested by you or our legitimate interest in resolving your enquiry; applicable legal obligations may require particular correspondence to be retained. There are no subscription receipts, advertising consents, analytics or crash-reporting data processed by the developer. System permissions can be revoked in iPhone Settings.
Children
Only Retro is a general-audience photo app suitable for ages 4 and up. It does not collect personal data from children or adults through the app, and it has no accounts, ads, analytics or tracking. The 4+ content suitability rating is not a statement that a child can independently enter a contract; parents or guardians should supervise use and sharing as appropriate. No parental-consent data collection flow is needed for the app's on-device features.
Security
Projects are held in the app's private storage and temporary renders in the device cache. Photo processing does not send content to a developer server, so there are no developer-held photo databases or account passwords. Protect your device with its available security controls and keep iOS up to date. Exported copies and messages you send to support are handled by the destinations you choose. No storage system is guaranteed to be completely secure.
California / CCPA
California residents have the right to: (i) know what personal info we collect; (ii) delete personal info; (iii) opt out of sale (we do not sell); (iv) non-discrimination. To exercise: email mustafabaykal91@gmail.com with subject "CCPA request".
Changes
If this policy changes materially, the "Last updated" date will be revised. Significant changes will be flagged in-app and we will provide a 30-day notice period for objection where required by law.
Contact
Privacy questions: mustafabaykal91@gmail.com · Data subject requests: same email, subject "Data subject request".