ORVA Camera Privacy Policy

Effective date: October 27, 2026 / 日本語

Yuhi Mitani ("we", "us") sets out below how information is handled in the iOS / iPadOS app "ORVA Camera" (the "App").

1. Operator and contact

• Operator: Yuhi Mitani
• Contact: support@orvacamera.com

Please use the address above for questions about personal data and for requests to access, correct or delete it.

2. Basic approach

The App captures, edits and exports photos and videos entirely on your device. This version has no feature that uploads photos or videos to our servers or to any third party. This version does not include AI generation or AI editing.

3. Photos and videos

• Photos and videos you capture or pick from your photo library, your edit settings, rendered results and edit history are stored in the App's private storage on your device.
• Saving to your photo library and sharing with other apps happen only when you choose to do so.
• When you show a photo in a widget, the App and its widget extension use a shared on-device area (App Group) that holds a reduced-size thumbnail and summary values such as capture dates and daily counts. This shared area is not transmitted off the device either.
• Camera, microphone and photo library access are used only to capture, to record video with sound, and to import or save photos. You can change these permissions at any time in iOS Settings.
• Please take care before sharing photos that contain other people or embedded capture data such as location.
• The App has no AI generation or AI editing features. Photos and videos are never sent to an external server or AI service. If a future version does so, we will update this policy before releasing it, state the recipient, the data sent and the purpose, and obtain your explicit consent.

4. Sign-in and account information

From version 1.0.7, the App has no sign-in and no ORVA account. Purchases belong to your Apple Account in the App Store (see section 5), and your photos, videos and monthly free count are kept on your device. The App does not collect account information such as your email address or name.

Versions of the App up to 1.0.6 offer optional sign-in through the authentication service Clerk (Clerk, Inc.), with Apple, with a Google account, or with an email address. For people who signed in with those versions, Clerk handles the following information on our behalf:

• Email address
• Account identifiers (the user ID and session information issued by Clerk)
• Profile information such as your name, when provided by Apple or Google for the sign-in method you chose
• Technical information used to keep sign-in secure and prevent abuse (IP address, device type, last activity time)

Purposes: sign-in, identifying and managing your account, preventing abuse, and responding to support requests.

Apart from reading your email address to display it, those versions of the App do not store account information on servers of our own. Clerk's handling of data is governed by Clerk's privacy policy and data processing agreement.

After version 1.0.7 is released, we will shut down the sign-in service and delete all remaining accounts and account information held by Clerk. Sign-in will then stop working in versions up to 1.0.6 as well. Your purchases, photos, videos and free count are not tied to sign-in, so they are not lost when the sign-in service ends. We recommend updating to the latest version. To delete your account before then, see section 7.

5. Purchases and subscriptions

• In-app purchases are processed by Apple (App Store). We never receive credit card numbers or other payment details.
• The App uses Apple's StoreKit to verify purchase status on the device and decide which app icons you are entitled to use. Your plan type and whether a purchase succeeded, was cancelled or failed are sent as usage statistics (section 5-3), and Google Analytics may record the product and its price automatically. Apart from that, purchase information is not sent to our servers or to third parties. Transaction IDs and payment details are never sent.
• Purchase entitlements belong to the Apple Account used in the App Store and do not depend on signing in to the App. Switching or deleting a sign-in account in versions up to 1.0.6 neither cancels your agreement with Apple nor moves your purchases.
• Invitation codes: codes we give individually to team members and sponsors. They are not sold. Entering one unlocks paid features on that device. The code is checked on the device and is never sent to our servers or to third parties.

5-2. Advertising

• On the free tier and ORVA Membership, a Google AdMob (Google LLC) banner is shown at the bottom of the Home and Library screens. Membership+ shows no ads.
• Ads are served in non-personalized mode. The App does not request iOS App Tracking Transparency permission and does not track you with the advertising identifier (IDFA).
• To serve ads, Google may receive the device type, OS version, approximate location (from the IP address) and information about ad impressions and interactions. See Google's advertising policies for details.
• We do not receive information that identifies you personally through advertising.

5-3. Usage statistics (Google Analytics for Firebase)

• To learn which features are used and where the App fails, the App sends usage statistics to Google Analytics for Firebase, a service of Google LLC (USA). The data is processed on Google's servers, which may be located in the United States and other countries.
• What is sent: the type of action in the App (for example "photo saved", "plans screen shown", "MOTION applied") and when it happened; choices made in the App (MOTION style, app icon, display language, your plan, and whether a purchase succeeded, was cancelled or failed); error codes and whether camera, microphone or Photos access was refused; whether you are signed in (versions up to 1.0.6 only) and which ORVA widgets are installed (not who you are). Google Analytics also records some information automatically: app and OS version, device model, language, App Store country, approximate country or region derived by Google from the IP address, when and how long the App is used, first use, app updates, and the product and price of in-app purchases. It also creates a random identifier for this installation of the App (the "app instance ID").
• What is never sent: photos, videos, thumbnails or anything derived from their contents; EXIF or location data; file names; your email address or account ID; the advertising identifier (IDFA); the identifier for vendor (IDFV); transaction IDs; payment details.
• The statistics are not linked to your account and are not used to identify you, for advertising, or to track you across other companies' apps or websites. Advertising-related consent signals are always set to "denied", Google signals are off, the statistics are not linked to AdMob, and all data-sharing settings with Google are off.
• Retention: Google Analytics deletes the event-level data automatically after 2 months. Reports that contain only totals (for example, the number of photos saved per day) are kept after that. Because the statistics are not linked to you, we cannot find, export or delete the records of a specific user.
• You can turn this off at any time in Settings > Privacy > "Share usage statistics". Statistics then stop being sent, and the identifier and any statistics waiting on the device are deleted.
• If your App Store country or region is in the EEA, the UK or Switzerland, statistics are sent only if you turn this setting on.
• How Google uses data from apps that use its services: How Google uses information from sites or apps that use our services

6. Information we do not collect

The App does not collect precise location, contacts, health data or payment card details. Photos and videos, their contents and their metadata (including EXIF and location) are never sent off your device. The App does not request App Tracking Transparency permission, does not use the advertising identifier (IDFA), and does not track you across other companies' apps or websites.

7. Retention and deletion

• Photos, videos and edit data on your device remain until you delete them in the App or uninstall the App.
• From version 1.0.7, the monthly free-count record (month and number of photos) and any invitation code you entered are stored on your device, including in the iOS Keychain. Keychain contents may remain on the device after the App is uninstalled, and may be carried over to a new device restored from an encrypted backup. They are never sent to us or to third parties.
• Account deletion (for people who signed in with a version up to 1.0.6): in versions up to 1.0.6, use "Manage or delete account" on the Settings screen. Version 1.0.7 and later no longer have this screen, so please contact support@orvacamera.com. Even if you do not contact us, we will delete all remaining accounts and account information after the sign-in service is shut down (see section 4). Once deletion completes, the account information held by Clerk is erased according to Clerk's process. Copies held in the authentication provider's backups are erased within a reasonable period after deletion (up to approximately 90 days).
• Deleting your account does not automatically delete the photos and videos on your device. To remove them, delete them in the App or uninstall the App. Photos exported to your photo library must be deleted separately in the Photos app.
• Photos on a device are shown to anyone who opens the App on that device, whether or not they are signed in and whatever account they use. Take care when sharing a device with others.
• To cancel a subscription, use Apple's subscription management. Account deletion does not cancel it.
• Usage statistics (section 5-3): event-level data is deleted by Google Analytics after 2 months; totals in reports are kept. Records of a specific user cannot be found or deleted, because they are not linked to you. Turning the setting off deletes the identifier on the device.

8. Sharing with third parties

We do not sell your information. We do not share it with third parties except:

• to the extent necessary with Apple, as described in section 5;
• for people who signed in with a version up to 1.0.6, to the extent necessary with Clerk and the sign-in provider you chose (Apple, Google), as described in section 4, until the account is deleted;
• with Google (AdMob) to serve ads, as described in section 5-2;
• with Google LLC, which compiles the usage statistics described in section 5-3 for us under Google's data processing terms and must protect them at least as well as this policy requires;
• where required by law; or
• with your consent.

9. Security

The App communicates over encrypted connections (HTTPS). Versions up to 1.0.6 store sign-in session credentials in protected areas such as the iOS Keychain. Version 1.0.7 and later have no sign-in and do not use those credentials. Because photos and videos never leave your device, we recommend protecting the device with a passcode.

10. Your rights

You may request access to, correction, deletion or suspension of use of your information held by us or by Clerk (including the account information of people who signed in with a version up to 1.0.6). In versions up to 1.0.6, many of these actions are available directly in the App's account management screen. For other requests, and for requests from people using version 1.0.7 or later, contact support@orvacamera.com. We may ask you to write from your registered email address to verify your identity. Usage statistics (section 5-3) cannot be tied to you, so access, correction or deletion requests cannot be carried out for them; you can stop them at any time with the Settings switch.

11. Minors

If you are a minor, please use the App with the consent of a parent or guardian.

12. Changes to this policy

Changes will be published on this page, and important changes will be announced in the App. A revised policy takes effect on the effective date stated when it is published.

13. Governing law

This policy is interpreted in accordance with the laws of Japan, and the Tokushima District Court has exclusive jurisdiction as the court of first instance over any dispute relating to it.