Only Once - Privacy Policy
1) Overview
Only Once is designed to be privacy-first: it does not require an account or login, does not include analytics, advertising or tracking SDKs, and does not transmit your photos or personal data to the developer or to any server. Everything happens on your device.
2) Data controller
Salvatore Boemia (the "Developer"), independent developer of the App, is the data controller for the limited processing described here. You can reach the Developer regarding this policy at salvatoreboemia.dev@gmail.com.
3) Photos and albums
Photos you capture within the App are stored only on your device, inside the App's private, sandboxed storage. They are encrypted at rest (using NSFileProtectionComplete), are never written to your device's camera roll, and are excluded from iCloud and iTunes/Finder backups. The Developer has no access to these photos and they are never transmitted anywhere.
4) The single-view rule
By design, opening an album starts its one single view; leaving the album, or taking a screenshot, locks it again. This behaviour is a core feature of the App and is enforced entirely on-device - it does not involve any transmission of data.
5) Camera
The App requests Camera access to let you capture photos directly into an album. This access is used only to take pictures within the App; no video or audio is recorded, and no camera data is transmitted anywhere.
6) Photos - Add Only permission
If you purchase the Export to Photos in-app feature, the App requests "Add Only" access to your Photos library solely to write the exported album into it. The App cannot read or browse your existing Photos library with this permission. Once exported, those photos become part of your system Photos library and are no longer managed or protected by the App.
7) In-app purchases
The App offers optional in-app purchases (One More Time, Export to Photos, and voluntary tips) processed entirely by Apple via the App Store and StoreKit. The Developer never receives your payment card, billing details, or any other payment data. All of these purchases are consumable and are not restorable.
8) Analytics, advertising and tracking
None. The App contains no third-party analytics, no advertising networks and no cross-app or cross-site tracking. It does not use the Advertising Identifier (IDFA) and does not present App Tracking Transparency prompts.
9) Third parties
Aside from Apple (as the App Store distributor and payment processor via StoreKit), the App does not share data with third parties. Apple processes limited download, diagnostic and purchase information under Apple's own privacy policy, independently of the Developer.
10) Legal bases (GDPR)
On-device storage of your photos relies on your consent (given when you capture and save photos in the App) and the Developer's legitimate interest in providing a functional app (Art. 6(1)(b) and (f) GDPR). Camera and Photos permissions are based on the permission you grant through iOS, which you can withdraw at any time in Settings.
11) Data retention
All photos and albums are stored locally on your device until you delete them within the App or uninstall the App. No personal data is held on the Developer's servers, because the Developer has no servers.
12) Security
Photos are encrypted at rest on your device using Apple's NSFileProtectionComplete and excluded from backups. Because data stays on your device, its protection also depends on your device security (passcode, encryption, system updates) - keep your device and operating system up to date.
13) Children
The App is a general-audience utility and is not directed at children. It does not knowingly collect personal data from anyone, including children under 16.
14) Your rights
Because the Developer does not hold your personal data or photos, rights such as access, rectification, erasure, restriction, objection and portability can be exercised directly on your device (including deleting albums within the App, or revoking permissions in iOS Settings). You also have the right to lodge a complaint with your local data protection authority.
15) International use
As no personal data or photos are transmitted to the Developer, the App performs no international transfer of your personal data. Purchases are handled by Apple under Apple's own terms.
16) Changes to this policy
This policy may be updated from time to time. Changes are published on this page with an updated effective date. Continued use of the App after changes take effect constitutes acceptance of the updated policy.
17) Contact
Questions about this policy can be directed to the Developer at salvatoreboemia.dev@gmail.com. See also the Terms & Conditions.