Ap Runner (“we”) provides the mobile application “Pixnox.” (the “App”) for Android and iOS. The App hides faces and other places in your photos and videos: it finds the faces and covers them with a mosaic, blur, solid color, eye bar or emoji sticker, lets you uncover anyone you want to keep, hide other places by hand, and then save or share the result. This Privacy Policy explains how information is handled in the App, including the advertising and in-app purchases the App offers.
1. Summary
Your photos and videos never leave your device. Finding faces and hiding them run entirely on your device. We have no server that receives your photos or videos.
Faces are found, never identified. The App only finds where faces are in a photo or video so it can cover them. It does not recognize or identify anyone and creates no face templates or other biometric identifiers.
There is no account registration and no login. We do not collect your name, email address, phone number, or address.
Ads are served by Google AdMob, which may collect the advertising ID and device information. Ad services never receive your photos, videos, or edits.
Purchases are processed by Apple or Google. We never receive your payment card or billing details.
2. Information We Collect
Personally identifiable information
The App does not collect personally identifiable information such as your name, address, phone number, or email address. The App has no account registration and no login, and we operate no server that receives data from the App.
Information collected for advertising
The App uses Google AdMob to display advertisements. AdMob is operated by Google and, when it serves an ad, it may automatically collect the following. This data is collected and processed by Google, not by us; we never receive it in a form that identifies you.
Advertising ID (Android Advertising ID / AAID, or Apple Identifier for Advertisers / IDFA)
Device information (OS version, device model, language settings)
Approximate location derived from IP address
Ad interaction data such as impressions and clicks
Advertising data is never combined with your photos, videos, edits, or anything else the App stores on your device.
Information related to purchases
When you make an in-app purchase, the payment is handled by the App Store (Apple) or Google Play (Google). The App receives only the result needed to unlock the purchased features, such as the product purchased, the transaction status, and the purchase date. See section 8 for details.
3. Photos and Videos
The App needs your photos and videos to do its job. How they are handled:
Choosing photos and videos. You choose a photo or video with the picker provided by the operating system. The App can read only the item you choose, not the rest of your library. Videos are supported on Android only. The App does not use the camera or the microphone and never records photos, video, or audio itself.
On-device processing. Finding faces, covering them with a mosaic, blur, solid color, eye bar or emoji sticker, the areas and brush strokes you add, and the final image or video are all computed on your device. Emoji stickers are drawn with the emoji built into your device; nothing is downloaded for them. Photos and videos are never uploaded to us or to any third party.
Face detection. When you open a photo, or choose the part of a video to work on, the App automatically looks for faces so it can hide them. It uses YuNet, an open-source face detection model included in the App, which runs entirely on your device; nothing is downloaded for it and your photos and videos are not sent anywhere. The App only learns where faces are in the photo or in each video frame (a rectangle around each face). It does not recognize faces, identify people, compare faces with one another or with any other photo, or create face templates, faceprints, or other biometric identifiers. In a video, the App follows each face from frame to frame only by where it is and how large it is, never by what it looks like. The positions of the faces found are kept only with the photo or video you are editing on your device (see section 6).
Saving to your photo library. When you tap “Save”, the App saves the edited photo (JPEG) or video (MP4) to your library, first asking for permission to add items to it where the operating system requires this. It does not read, change, or delete other items in your library. On Android 9 and earlier, storage write permission is used only for this purpose.
Sharing. When you tap “Share”, the edited photo or video is handed to the operating system’s share sheet. Where it goes is your choice, and the app you share to applies its own privacy policy.
Metadata. Images saved or shared by the App are made anew from their pixels and carry no metadata from the original, such as the location where it was taken, the time it was taken, or the camera model. Videos are written anew frame by frame and do not carry the location or camera details of the original. The original photo or video is never modified.
Sound in videos. A saved or shared video keeps the original video’s sound as it is. The App hides faces only and does not change or remove voices or other sounds, so please check the sound before you share a video.
You can revoke photo library access at any time in your device settings. You can still choose photos and videos with the system picker; only saving to the library will ask again.
4. Network Use
Photo and video editing works entirely offline. The App connects to the internet only for the following:
Advertising. Communication performed by Google AdMob and Google’s User Messaging Platform, as described in sections 2 and 9.
Purchases. Communication with the App Store or Google Play to buy, verify, and restore purchases.
Links you tap. Opening a store page, this policy, or an email to us hands the address to your browser, store app, or mail app, which then applies its own privacy policy.
5. Purpose of Use
To find the faces in your photos and videos, hide what you choose, and let you save and share the results
To restore the photo you were editing when you return to the App
To remember your settings, such as the display language
To deliver and display advertisements within the App
To measure ad performance and detect invalid clicks
To provide purchased features and restore purchases
To respond to your inquiries
To improve the quality of the App and fix defects
6. Data Stored on Your Device
The following is stored only on your device, is never transmitted to our servers or to any third party, and is deleted when you uninstall the App:
The photo you are editing, at most 4,096 pixels on the long side so it can be saved at full quality, with a smaller copy of at most 2,000 pixels used while editing, together with your edits (the positions of the faces found and which are hidden, the areas and brush strokes you added, and the style and strength chosen) and undo history, so that you can pick up where you left off
When you edit a video, frames taken from the part you chose (as JPEG images, reduced in size) and the positions of the faces found in them, kept in the App’s private storage, which other apps cannot read, so the video can be previewed and saved
A video being saved or shared, written to the App’s temporary storage before it is added to your library or handed to the share sheet
Your settings, such as the display language
Whether hints and the review prompt have already been shown
Your advertising consent choices
Purchase status, so that Pixnox. Pro works offline
You can delete the photo you are editing at any time from the App’s settings screen. There is no account and no sign-in, so nothing you do in the App is linked to you.
7. Store Review Prompt
The App may ask you to rate it on the store, using the review feature provided by the operating system (Google Play In-App Review or Apple SKStoreReviewController). Whether you have been shown the prompt is recorded only on your device; we do not receive your rating or review text in any form that identifies you.
8. In-App Purchases
The App offers “Pixnox. Pro”, a one-time purchase that removes ads and unlocks additional features. It is not a subscription and is never billed again. The price and contents are shown in the App before you buy.
Payment is processed by Apple or Google under your App Store or Google Play account. We never receive or store your payment card number, billing address, or other payment details.
To unlock purchased features, the App receives the purchase information provided by the store (product, transaction ID, and purchase date) and stores the result on your device.
You can restore previous purchases on a new or reinstalled device with “Restore purchases” in the App, using the same store account.
Refunds are handled by Apple or Google according to their policies.
For users in the EEA, the UK, and Switzerland, and where otherwise required by law, the App requests consent for personalized advertising through Google’s User Messaging Platform (UMP). You can review and change your consent choices at any time from the App’s settings screen.
On iOS, the advertising identifier (IDFA) is used for personalized advertising only if you allow tracking in Apple’s App Tracking Transparency prompt. If you do not allow it, the App still works in full and ads are shown without personalization; only the relevance of the ads changes. This never limits photo editing, saving, or sharing.
Data controller
For the limited information the App itself handles, the controller is Ap Runner (contact details in section 16). Google acts as an independent controller for the data it collects through AdMob and the User Messaging Platform, under the Google Privacy Policy and the Google Ads Controller-Controller Data Protection Terms.
Legal basis (EEA, UK and Switzerland)
Consent (GDPR Art. 6(1)(a)) for storing and reading information on your device for advertising and for personalized advertising, including the use of your advertising ID. You give or refuse this consent in the consent message shown when you first open the App.
Legitimate interests (GDPR Art. 6(1)(f)) for showing non-personalized or limited ads where you have not consented, and for measuring ad delivery and detecting fraud and invalid clicks. Our interest is to keep the App free of charge. You can object to this at any time by contacting us.
Photo editing, face detection, and on-device storage of your draft and settings involve no processing of personal data by us, as everything stays on your device.
Refusing or withdrawing consent never limits photo editing, saving, or sharing.
International transfers
Google may process advertising data outside your country, including in the United States. Google relies on the EU–U.S. Data Privacy Framework (and its UK and Swiss extensions) and on the European Commission’s Standard Contractual Clauses to protect such transfers.
Retention
Data stored on your device (section 6), including your consent choices, stays there until you delete it or uninstall the App. Advertising data collected by Google is retained according to Google’s retention policy. We keep emails you send us only as long as needed to answer them.
10. Opting Out of the Advertising ID
Android: Settings → Privacy → Ads → “Delete advertising ID” or “Reset advertising ID” (menu names may vary by device)
iOS: Settings → Privacy & Security → Tracking → turn off “Allow Apps to Request to Track”
11. Provision to Third Parties
We do not provide user information to third parties, except where disclosure is required by law. The App uses the following third-party services; please refer to their policies for how they handle data:
Google Play Billing / Apple In-App Purchase (payments): see section 8
12. Children’s Privacy
The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that such information has been collected, we will take steps to delete it. If you believe a child has provided us with personal information, please contact us at the address in section 16.
13. Your Rights
Because the App has no account and no server of ours, we hold no personal data about you that we could look up, export, or delete on request. You remain in control of everything the App touches:
Delete the photo you are editing from the App’s settings screen, or remove everything by uninstalling the App.
Withdraw or change your advertising consent at any time from the App’s settings screen, and reset or delete your advertising ID as described in section 10.
Revoke photo library access at any time from your device settings.
Depending on where you live (for example under the GDPR in the EEA and UK, or the CCPA/CPRA in California), you may have rights of access, correction, deletion, objection, or portability regarding data held by the advertising or payment providers. Because that data is held by Google or Apple rather than by us, please exercise those rights through the links in sections 8 and 11, or contact us at the address in section 16 and we will help where we can. We do not sell your personal information.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. If you are in the EEA, the UK, or Switzerland, you also have the right to lodge a complaint with the data protection supervisory authority of your country of residence or work.
14. Security
We take appropriate measures to prevent unauthorized access, loss, alteration, or leakage of the information handled by the App. Your photos and edits stay on your device, and communication with the advertising and store services uses encrypted connections.
15. Changes to This Policy
This Policy may be revised due to changes in laws or in the App’s features. The revised policy takes effect once posted on this page, and the date below is updated at the same time. Where a change materially affects how your information is handled, we will notify you in the App and seek your consent again if the law requires it.