Privacy Policy
The short version. Tono has no accounts and no sign-in. Your photos are edited entirely on your device and are never uploaded to us. We cannot see your photos, and we do not want to.
Who we are
Tono (the “App”) is provided by Tono (“we”, “us”). This policy explains what the App collects, why, and what you can do about it.
Your photos stay on your device
Every edit — applying a recipe, moving a slider, exporting — runs on your device's own graphics hardware. Photos, and the location and camera data inside them, are never sent to our servers. When you export, the finished image is written to your photo library by the operating system; we are not part of that step and never receive a copy.
What the App does collect
- An anonymous install identifier. Our payments provider, RevenueCat, generates a random identifier for each installation so the App can tell whether Tono Pro is active. It is not your name, email, phone number or device serial, and it is not linked to any account.
- Feature usage events. We record that an action happened — a recipe was applied, the upgrade screen was seen, an export finished — together with the anonymous identifier above, using Google Analytics. These events contain no image data and no personal details.
- Advertising data, only if you choose to watch an ad. The App offers optional rewarded ads in exchange for a watermark-free export. Ads are served by Google AdMob, which receives your IP address, device and ad identifiers and your interaction with the ad. On iOS the system asks your permission before any tracking identifier is used; declining does not take the reward away. See how Google uses information from sites and apps that use its services.
- Purchase state. Subscriptions are processed by Apple or Google. We receive confirmation that a purchase or renewal happened, tied to the anonymous identifier. We never receive your card details, billing address or store account.
- Ordinary server logs. The App downloads colour data (LUT files) for Pro recipes from our server. Those requests are logged with an IP address, timestamp and the file requested, which we use to keep the service running and to detect abuse. Logs are kept for a short period and are not used to build a profile of you.
What we never collect
- Your photos or videos, or anything extracted from them.
- Your name, email address, phone number or contacts — there is no account to put them in.
- Your precise location.
- Health, financial or biometric data.
Why we are allowed to do this
Where the GDPR or a similar law applies: purchase and entitlement data is processed to perform our contract with you; advertising identifiers are processed on your consent, which you can give or refuse in the system prompt and change later in your device settings; usage events and server logs rest on our legitimate interest in keeping the App working and understanding which features are used.
Sharing
We do not sell personal data. We share only what is described above, with the providers that make those features work: Apple and Google (payments and app distribution), RevenueCat (subscription state), Google Analytics (usage events) and Google AdMob (optional ads). These providers operate internationally, so data may be processed outside your country under the safeguards those providers publish.
Your choices
- Ads and tracking. Refuse the tracking prompt, or turn it off later in your device privacy settings. Rewarded ads still work.
- Delete everything. Deleting the App removes the anonymous identifier and all local data, including your saved recipes and export counter. We then have no way to connect any remaining record to you.
- Access or deletion requests. Because the data is anonymous we normally cannot find “your” records without the identifier, which is shown in the App under Profile → Identity. Send it to us and we will act on it.
Children
Tono is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has used the App and you want the associated data removed, contact us.
Changes
If this policy changes in a way that affects you, we will update the effective date above and, where the change is significant, say so in the App.
Contact
Questions about this policy or your data? Write to vdnhan97@gmail.com.