Privacy Policy

Last updated: 29 September 2026

Short version: the app has no account and no sign-up. The only thing it sends us is an anonymous “the app was opened” count. Your videos, audio and face data never leave your iPhone unless you send them somewhere yourself. This website is separate and does use Google Analytics plus our own cookie-free counter; see “This website” below.

What the app collects

One anonymous launch counter. Each time the app starts it sends our own server the event name (“app launched”), the app version, the platform (iOS) and a random install ID created on your device the first time the app runs. The ID is not derived from your device, your Apple ID or anything about you, it is never linked to your identity, and deleting the app deletes it. We use the count only to know how many people use the app. No camera frames, audio, recordings, face data or location are ever part of it.

Apart from that counter the app has no backend, no user profiles and no advertising or crash-reporting SDK.

Face data

What is detected. When body tracking is on, the app runs Apple's on-device Vision framework (face landmark detection) on the live camera picture. For each frame it gets the 2D positions of points outlining the face: the face contour, eyebrows, eyes, nose, lips and pupils. It does not use Face ID, the TrueDepth depth camera or ARKit face tracking, it builds no face template or faceprint, and it never tries to recognise or identify who anyone is.

How it is used. The points draw the face outline in the on-screen overlay. If you turn on Face control (off by default), four simple values are computed from them: how open the mouth is, mouth width, eyebrow height and whether the eyes are open. Each becomes a number from 0 to 127 that controls the built-in synthesizer, or is sent as a MIDI controller message.

Storage and retention. Face data is kept only in the phone's memory, only while it is in use: normally for the single video frame being processed, then replaced by the next one. In the optional post-render mode, the tracking points for the take you are recording are held in memory until the overlay has been rendered onto that video, then discarded. Face data is never written to a file, never saved in the app's settings and never kept after the app closes. If you choose to burn the overlay into your video, the drawn lines become part of that video, which is saved to your own photo library like any clip you record.

Sharing. Face data is never sent to us or to any third party, and it is not stored on any server. The only thing derived from it that can leave the phone is the four 0–127 MIDI values above, and only when you enable Face control and gesture MIDI: they go to a music app on the same iPhone or to a computer on your own local network that you connect yourself. The face points and camera frames themselves are not sent.

Deletion. Because nothing is retained, there is no stored face data to delete. Turn body tracking or Face control off at any time to stop the detection. Clips with a burned-in overlay are deleted like any other video, in Photos.

What the app uses on your device

• Camera. The live picture is shown in the viewfinder and written into the clips you record. Frames are also analysed on the device by Apple's Vision framework to track your body, hands and face — this drives the on-screen overlay and the gesture controls. That analysis happens entirely on your iPhone and the frames are not uploaded. See Face data for exactly what is detected in the face and how long it is kept.
• Microphone. Audio is recorded together with your video, and its level drives on-screen meters. You choose the input (built-in mic, a USB-C interface, Bluetooth, or a mix received from your own computer).
• Photo library. Recorded clips are saved into the app's own album. The built-in editor can open videos you pick, so it needs read access. We do not scan or index your library.
• Local network (optional, off until you enable it). The app can talk to a computer on the same WiFi to send gesture MIDI, receive a clean audio mix, mirror a preview, or transfer recorded clips. This traffic stays on your local network and does not pass through us.
• Motion sensors. Used for device orientation and movement-driven effects. Not stored.

Live streaming (only when you start it)

If you enter a stream URL and tap Go Live, the app sends your camera video and the selected audio to that server — for example YouTube Live, or an RTMP server you run. Your video then falls under that service's own privacy policy, not ours. This never happens automatically: no stream starts unless you enter a destination and start it yourself. Your stream key is stored locally in the iOS Keychain on your device and is sent only to the server you entered.

What we do not do

• No ads and no advertising identifiers.
• No tracking, and no data shared with data brokers or advertisers.
• No selling of data — we have none to sell.
• No account, so nothing to link your recordings to an identity.

Your data and deletion

Your recordings, settings and presets live on your iPhone. Delete a clip in Photos to remove it; delete the app to remove its settings, its random install ID and any clips still held inside it. The only thing on our side is the anonymous launch count, which is tied to no identity, so there is no personal data for us to find or delete — but you're welcome to write to us with any question.

This website

Separate from the app: this site uses Google Analytics 4 to count visits and see which pages people read. It sets Google's _ga cookies and sends Google your IP address (which GA4 truncates), page URL, referrer and coarse device and country information. We use it only to understand traffic — no advertising features, no remarketing, no user-ID tracking, and it is never joined to anything from the app. Google's handling is covered by their privacy policy; you can opt out with their browser add-on or any content blocker, and the site works exactly the same either way.

This site also runs our own counter, on infrastructure we operate rather than a third party's. It sets no cookie and stores nothing in your browser at all — the identifier it counts you by is derived at our edge from your IP address, browser type and today's date, is never sent back to your browser, and changes at midnight UTC, so it cannot follow you to tomorrow or to any other site. It records the page path with the query string removed, the referring site's domain, and your country. Your IP address itself is never stored. The code is public and MIT-licensed, including the part that does the counting.

The demo clip on the home page is hosted here and plays muted with no third party involved. The link to the full set opens YouTube in a new tab — nothing from YouTube loads unless you follow it.

None of this touches the app. The website counters are never joined to the app's anonymous launch count; the App Store privacy label lists that count as Usage Data, not linked to you.

Children

The app is rated 4+ and does not knowingly collect personal data from anyone, children included.

Changes

If this policy changes we will update this page and the date at the top. Material changes will also be reflected in the App Store privacy details for the app.

Contact

SuperDuperAi, Corp. — [email protected]