Private by design.

Data stored by the app

The app can store case title, case type, notes, photos, imported images, optional location context, timestamps, file metadata, generated PDF report references and follow-up state locally on the device.

Permissions

On iOS, camera access is used when you take evidence photos, and you choose which existing photos to import. Location is included only if you choose to add it. On Android, the app opens a camera app or system picker for photos and files; it does not request location. Notifications are optional and used for local follow-up reminders.

Backups, sharing and purchases

Evidence is stored in the app's local storage. Device backup settings may allow Apple iCloud or Google device backups to include app data. These backups are controlled by your device and account settings, not by a ProofCamera evidence server. Files you choose to share are handled by the apps and recipients you select.

Purchases are processed by Apple on iOS and Google Play on Android. ProofCamera does not receive payment-card details. The app uses the store's purchase status to enable Pro and restore purchases.

No tracking

ProofCamera does not use advertising tracking, does not sell personal data and does not include analytics, advertising or tracking SDKs in this release. The app keeps local counts of app opens, exports and purchase or restore outcomes. These counts are not sent to a ProofCamera server.

Deletion

You can archive or delete a case. Deleting a case removes its local case record, locally stored attachments and generated local PDF report. Copies already shared outside the app are controlled by the receiving app, service or organisation.

Sent without analytics permission

These limited, non-identifying records are processed even when optional analytics is off, because they are needed to understand purchases and cancellations. None of them contains a name, email address, device identifier, installation identifier, advertising identifier or Apple Account details, and the server does not log the IP address for these requests.

• Subscription status from Apple. Apple sends signed App Store Server Notifications when a trial starts, a purchase or renewal happens, or automatic renewal is switched on or off. We store the notification type and subtype, product, App Store country, auto-renew status, expiration reason, offer type and times rounded to the hour. Apple's original transaction ID is stored only as a keyed hash.
• Purchase context from the app. When you buy, the app creates a new random code for that purchase only and gives it to Apple with the purchase. The app sends the same code with the app version, chosen product, paywall variant, App Store country and a rough time-since-install range (0 days, 1–3, 4–7, 8–30 or more than 30 days). The code is not reused and is not linked to your device.
• "Why are you stopping?" answer. If automatic renewal of your subscription is off, ProofCamera may ask once why you are stopping. Only if you tap an answer, the app sends that answer (too expensive, not working, only needed briefly, by accident, or other) with the app version, App Store country and the date. Ignoring the question sends nothing.

These records are used only in aggregate to improve ProofCamera.

Contact and changes

For privacy questions, contact hello@bumblly.com. For product support, visit ProofCamera Support.

This page will be updated when ProofCamera's data practices materially change. The effective date at the top shows the latest revision.