privacy
cue is a camera. what it sees stays on your phone. there is no account, no ad, and no tracking. the two things that do leave the device are anonymous usage events and the record of a subscription if you buy one — this page says exactly what those are.
the camera and your photos
cue reads the live camera frame on the device, using Apple's Vision framework, to coach whoever is holding the phone and to fire the shutter. frames are analysed in memory and discarded. they are never uploaded, never stored, and never used to train anything.
face and body detection
to know when someone is in frame and when the shot is right, cue runs Apple's on-device Vision framework on the live camera feed. it detects where a face and a body are in the frame and scores how well the face is captured. that is the only face data the app touches: a rectangle, a few body joint positions, and a quality score for the frame in front of the lens right now.
- collection: none. the detection runs in memory on your phone and the results exist only while that frame is being processed.
- storage and retention: nothing is stored. the results are discarded with the frame, usually within a fraction of a second. no face template, faceprint, or identity is ever created.
- use: deciding when to fire the shutter, which frames to cull, and which one-word instruction to say next. nothing else.
- sharing: none. face and body data never leaves the device and is never sent to us or to any third party, including PostHog and RevenueCat.
- identification: cue does not recognise, identify, or remember anyone. it does not know who is in the photo.
photos are written to your Photos library only when you tap keep. photos you don't keep are gone when you leave the pick screen. the share card is rendered on your phone and goes only where you choose to share it.
usage analytics (PostHog)
to learn which parts of cue work, the app sends a small number of anonymous events to PostHog, an analytics service, hosted in the United States. an event looks like “shoot started”, “photo kept: 3 of 9”, or “paywall shown”, with the device model, iOS version, app version, language and a coarse region derived from your IP address by the service. events are keyed to a random identifier generated by the app on first launch.
- no photos, frames or anything derived from an image are ever sent.
- no name, email, contacts, precise location, or Apple ID.
- no session recording and no screen capture — those are switched off in the app.
- no tracking across other companies' apps or websites.
deleting the app deletes the identifier; a reinstall starts a new, unrelated one.
purchases (RevenueCat and Apple)
cue pro is an auto-renewable subscription sold through the App Store. Apple handles payment; we never see your card or your Apple ID. to unlock the subscription on your device and honour it after a reinstall, the app shares the App Store transaction record with RevenueCat, a subscription service, together with the same random identifier. that record contains the product, purchase and renewal dates, and the store's transaction identifiers — not your name.
manage or cancel the subscription in Settings → your name → Subscriptions on your iPhone. refunds are handled by Apple at reportaproblem.apple.com.
what we don't do
- we don't sell or share your data with data brokers or advertisers.
- we don't ask for tracking permission, because we don't track.
- we don't keep accounts, so there is nothing to log into and nothing to leak.
children
cue is not directed at children under 13 and we do not knowingly collect information from them.
your rights and choices
camera and photo access are under your control in iOS Settings → Privacy. if you are in a region that grants access, correction or deletion rights over data, write to us and we will act on the anonymous records tied to your app identifier, which you can find under the PRO chip → Customer Center in the app.
changes and contact
if this policy changes, the date at the top changes with it. questions: support@cuephoto.app.