TONO

Privacy

Privacy Policy

App: Tono · Developer: nuruk studio

Effective

Tono (the "App") is built privacy first. This policy explains plainly what the App does and does not handle. In short: Tono does not track you, and it does not collect or transmit your photos or personal information to the developer's servers.

1. Information we do not collect

Tono does not collect, store, or transmit:

  • Personally identifiable information such as your name, email, phone number, or address.
  • Location data (GPS). The App does not read your location.
  • Advertising identifiers (IDFA) or tracking. The App does not use App Tracking Transparency (ATT).
  • Usage analytics or behavioral logs. No such SDKs are included.
  • Your original photos or videos. They are never uploaded to any server.

The App also does not require sign-up, login, or account creation.

The one exception: if the App crashes, it sends a diagnostic crash report so the problem can be fixed (see section 5). Crash reports never include your photos or personal identifiers.

2. Information processed on your device only

All photo editing in Tono happens entirely on your device.

  • Photos and videos. Images you capture with the camera or pick from your gallery are processed on-device, where filters and finishing effects are applied and rendered to a temporary file. When you tap Save, the result is stored to your device gallery. When you tap Share, it is passed only to the destination you choose through your operating system's share sheet. It is never sent to the developer.
  • Temporary files. Edited results are created temporarily in your device's cache and deleted right after saving or sharing.
  • EXIF capture date. When you pick a photo from your gallery, the App reads only its capture date for the date stamp feature. It does not read other EXIF data such as location (GPS). This date is used solely to draw a date label onto the image on your device.

Permission purposes

PermissionPurpose
CameraTo take photos within the App
Photo library (read)To choose a photo to edit
Photo library (write)To save your edited result to your gallery

3. Data stored on your device

The following settings are stored only on your device and are never transmitted. They are removed when you delete the App.

  • App preferences and onboarding status.
  • Your list of favorited filters.
  • Your custom "My Filter" presets, including their settings and the names you give them.

None of these are personally identifiable information.

4. Third-party services (in-app purchases)

Tono has no ads and no subscriptions. It offers a single one-time lifetime unlock (an in-app purchase). The following third-party services are involved only when you make a purchase or restore one:

  • Apple App Store / In-App Purchase. Handles the actual payment, governed by Apple's Privacy Policy.
  • RevenueCat. Manages your purchase state (whether the unlock is active). It handles an anonymous user identifier and purchase receipt or entitlement information. The App does not send your name, email, or other personal identifiers to RevenueCat. See RevenueCat's Privacy Policy.

During this process, the payment providers above may handle technical information such as a device identifier or IP address for fraud prevention and region detection. This corresponds to the Purchases item in the App Store "App Privacy" label, used to provide app functionality rather than to track you. It applies only when you use the purchase or restore feature.

5. Crash reports (diagnostics)

If the App crashes or hits an unexpected error, it sends technical diagnostic information to Sentry, an error monitoring service, so the cause can be identified and fixed.

  • What is sent. The stack trace (where in the code the error occurred), your device model and OS version, the app version, and a short trail of in-app actions leading up to the error, such as screen changes.
  • What is not sent. Your photos or images, personal identifiers such as your name or email, and your location. The App is configured so that your IP address is not collected alongside the report.
  • Purpose. Solely to fix errors and improve stability. Never used for advertising, marketing, or tracking, and never sold or shared with third parties.
  • Scope. Applies only to release builds distributed through the App Store.

See Sentry's Privacy Policy. This corresponds to the Diagnostics item in the App Store "App Privacy" label, used to provide app functionality rather than to track you.

6. Children's privacy

Tono is not directed at children under 13 and does not knowingly collect children's personal information. The App does not collect any user's personal information in the first place.

7. Data retention and deletion

  • Temporary files created during editing are deleted automatically right after saving or sharing.
  • Settings, favorites, and My Filter data stored on your device are removed when you delete the App.
  • Purchase records are tied to your Apple account and can be restored through Apple at any time.
  • Crash reports are deleted automatically after a period, according to Sentry's retention policy.

8. Your rights

Because your photos and data live entirely on your device, you control and can delete them directly. There is no separate data deletion request to file. Payment and refund rights are governed by Apple's policies.

Depending on where you live, such as the EEA, the UK, or California (USA), you may have rights to access, delete, or port your personal data. Because the App does not collect personal data, most of these will not apply. If you would like to exercise a right or have a question, contact us below.

9. Changes to this policy

We may update this policy as needed. For material changes, we will update the effective date above and give notice through the App or its distribution page.

10. Contact

For questions about this policy or our data practices: nuruk.studio@gmail.com

This document reflects the App's actual behavior.