Privacy Policy

This Privacy Policy explains how Robert Denison, a California sole proprietor doing business as Denison Systems("we", "us"), handles personal information in connection with the Civil Field Photosmobile application (the "App") and this website at the URL where you are reading this policy (the "Website"). For purposes of the EU and UK General Data Protection Regulation ("GDPR"), Robert Denison is the data controller for the limited personal information processed in connection with the App and Website.

We have designed the App so that the photos and projects you create stay on your device. We do not operate servers that store, back up, or synchronize your photos. Limited personal information is, however, processed by a small number of third-party services that we rely on (Apple, Google, and RevenueCat) to deliver the App, display maps, resolve street addresses from coordinates, host the tutorial videos on the Website, and process subscriptions. Those services are identified below.

We require every third party with whom we share user data to provide the same or equivalent protection of that data as described in this Privacy Policy and as required by applicable law and the Apple App Review Guidelines. Apple and Google may also process information as independent platform providers under their own privacy policies.

Summary

• Subscriptions: RevenueCat processes an anonymous App User ID and purchase, subscription, entitlement, and basic technical information needed to validate Pro access and to produce aggregated subscription analytics. We can view the corresponding anonymous customer record through RevenueCat.
• Support: if you contact us, we receive the email address, message, attachments, and other information you choose to provide.
• What stays on your device: photos, annotations, GPS coordinates and reverse-geocoded addresses associated with photos, project and watermark settings.
• Selling or sharing: we do not sell or share personal information for cross-context behavioral advertising or any other commercial purpose.
• Your rights: you can delete on-device data from the App's Settings screen or by uninstalling the App. You may contact us to request deletion of support correspondence or an identifiable RevenueCat customer record, subject to legal and store-record retention requirements.

Information stored on your device

The App uses the operating system's standard storage APIs to keep the following on your device:

• Photos you capture or import, along with annotations, dimension lines, watermarks, and any captions you add.
• Project and branding configuration (project names, logos, watermark settings).
• GPS coordinates, compass heading, altitude, capture timestamp, and a reverse-geocoded street address for each photo, used to render overlays on the photo itself.

This information remains on your device. It is not transmitted to us and we have no copy of it. When the App converts GPS coordinates into a street address, your device uses the native Apple or Google location and geocoding services provided by the operating system. It will leave your device only if you choose to export, share, or back it up (for example, by exporting a PDF, sharing photos via AirDrop or email, saving to your camera roll, or relying on your device's system backup such as iCloud Backup or Google One).

Photo metadata (EXIF)

Photos captured on a mobile device typically contain embedded EXIF metadata that includes GPS coordinates, capture time, and device information. When you export or share a photo, this metadata travels with the photo file unless your device or another tool strips it. We do not strip EXIF data from photo exports. You should be aware that sharing a photo may disclose its capture location to the recipient, even when the visible overlay is not present.

Information processed by third-party services

The following providers handle a narrow set of information in connection with the App and Website. RevenueCat, Vercel, and our email provider act as service providers for the activities described below. Apple and Google also act as independent platform providers under their own terms and privacy policies.

Apple and Google native location services

The App uses the native location and geocoding APIs provided by iOS, iPadOS, and Android to read device location and convert GPS coordinates into a human-readable street address. Apple or Google may process location-related information as part of providing those operating-system services, subject to their own privacy policies and the privacy settings on your device. We do not receive a copy of your GPS coordinates or address lookup requests.

Google Maps SDK (map view on Android)

The App includes an optional map screen that shows where your project photos were taken. On Android, that screen is rendered by the Google Maps SDK for Android, a Google library bundled in the App. When you open the map, the SDK communicates with Google to load map content and, per Google's disclosures, sends Google information for its own purposes, including your IP address, device and SDK version information, a pseudonymous identifier used to measure SDK usage, crash diagnostics, and map-interaction events such as pan and zoom. Google processes this information as an independent controller under the Google Privacy Policy and the Google Maps/Google Earth Additional Terms of Service. We do not receive any of this information. On iOS and iPadOS, the map screen uses Apple Maps (MapKit) provided by the operating system, which Apple processes under its own privacy policy.

RevenueCat (subscription processing)

RevenueCat, Inc. is a U.S.-based service that manages subscription entitlement state for the App. The App does not have user accounts and does not send RevenueCat your name, email address, phone number, Apple ID, Google account email, IDFA, or Google advertising ID. The RevenueCat SDK generates a random, anonymous App User ID for the installation.

RevenueCat processes that anonymous ID together with purchase and subscription information received from Apple or Google, including the product purchased, transaction or purchase token, purchase, renewal, cancellation, and refund events, entitlement status, platform, and basic technical information such as app, SDK, operating-system, and device type or version. RevenueCat may use an IP address transiently to derive a country or region. On iOS, the RevenueCat SDK also reports your App Tracking Transparency consent status automatically. The App never requests tracking permission and does not track you, so this value only records the system-level setting already present on your device.

Through the RevenueCat dashboard, we can view the anonymous customer record, including its App User ID, purchase and subscription history, entitlement status, total spend, platform, country or storefront when available, first- and last-seen dates, and basic technical information. We use this information for two purposes: app functionality — validating purchases, preventing subscription fraud, and unlocking Pro features through entitlements — and analytics, meaning the aggregated subscription and revenue measurements RevenueCat produces from these records, such as trial conversions, renewals, and cancellation rates. We do not use this information for advertising or tracking. We will update this Privacy Policy and the applicable store disclosures before enabling any attribution integration or additional identifier collection. RevenueCat's privacy practices are described at revenuecat.com/privacy.

We can also delete that customer record from the RevenueCat dashboard. To ask us to do so, follow our app-data deletion instructions. Because the App User ID is random and is not tied to your name or email address, we may need a store transaction or order ID to locate the correct record. Deleting the record does not cancel your subscription, and a new anonymous record is created if you continue to use the App or restore purchases while a subscription is active.

Apple App Store and Google Play (distribution and billing)

If you obtained the App from the Apple App Store or Google Play, those platforms collect information about your download and any in-app purchase you make under their own privacy policies. We receive aggregated, non-identifying analytics from these platforms (for example, install counts and subscription metrics). We do not receive your Apple ID, Google account email, or payment information.

Vercel (website hosting and analytics)

The Website is hosted by Vercel Inc. and uses Vercel Analytics and Vercel Speed Insights to measure aggregated, privacy-preserving traffic statistics. These tools are designed to operate without cookies and without persistent cross-site identifiers. Vercel processes your IP address transiently to deliver the Website and to derive country-level traffic statistics. Vercel's privacy notice is available at vercel.com/legal/privacy-policy.

YouTube (tutorial videos)

The tutorial videos on the Website are hosted by YouTube, a Google service. They are embedded in YouTube's privacy-enhanced mode (youtube-nocookie.com), and the player is not loaded until you press play — so opening the tutorials page starts no YouTube session and sets no YouTube cookie. Video thumbnails are served by Google's image content-delivery network when the page loads, which transmits your IP address and the address of the page you are viewing to Google without setting a cookie. If you choose to play a video, Google additionally receives information about your device and browser and your playback activity, and may associate that activity with your Google account if you are signed in to one. Google processes that information as an independent controller under its own privacy policy, available at policies.google.com/privacy. We receive only aggregated, non-identifying viewing statistics such as view counts. Every tutorial is also described in text beside its video, so you can read what each one covers without playing anything.

Zoho Mail (support communications)

Email sent to support@civilfieldphotos.comis hosted by Zoho. Zoho processes your email address, message contents, attachments, routing metadata, and related technical information so that we can receive and respond to support, privacy, and legal requests. Zoho's privacy notice is available at zoho.com/privacy.html.

Permissions the App requests

• Camera — to capture site photos. Required for the App's core function.
• Location (while in use) — to read your latitude, longitude, compass heading, and altitude at the moment you capture a photo, so that this information can be rendered as an overlay on the photo and reverse-geocoded to a street address using native Apple or Google location services.
• Photo library (save only) — to save exported photos to your photo library, if you choose. Importing existing photos uses the operating system's photo picker, which shares only the photos you select and does not require access to your photo library.

You may revoke any of these permissions at any time from your device's settings. The App will continue to function but permission-dependent features will be unavailable.

Sensitive personal information

Precise geolocation is treated as "sensitive personal information" under the California Privacy Rights Act and as a special category of data in some other jurisdictions. The App uses your precise location only at your direction, only while you are capturing a photo, and only to embed that location into the photo overlay. We do not use sensitive personal information to infer characteristics about you and we do not retain any record of your location on our servers.

Legal bases for processing (EU / UK users)

For users in the EU, EEA, or UK, our legal bases under GDPR are:

• Performance of a contract (GDPR Art. 6(1)(b)) — for processing the limited subscription data described above to deliver the App and your subscription entitlements.
• Legitimate interests (GDPR Art. 6(1)(f)) — to respond to support requests, maintain security and business records, prevent subscription fraud, and understand aggregated Website traffic. You may object to processing on this basis.
• Consent (GDPR Art. 6(1)(a)) — for any optional communications that we may send and that the App will request your consent for at the time.

International data transfers

We are based in the United States. RevenueCat, Vercel, Apple, Google, and Zoho may process information in the United States or other countries. If you are located in the EU, EEA, UK, or another jurisdiction outside the United States, your personal information may be transferred internationally. We rely on the providers' published transfer mechanisms, including the EU-US Data Privacy Framework where applicable and Standard Contractual Clauses. Links to each provider's transfer information are available in their respective privacy notices.

Data retention

Photos and project data are retained on your device until you delete them through the App, uninstall the App, or reset your device. We do not retain server-side copies.

• RevenueCat records: retained while needed to validate a subscription, provide support, prevent fraud, and satisfy accounting or legal obligations. Where you make a verified request and we can locate the corresponding record, we delete it, except for information that Apple, Google, RevenueCat, or we must retain by law. Because the App has no login, deleting a record does not cancel a subscription, and continued use of the App while a subscription is active creates a new anonymous record.
• Support correspondence: retained for up to 24 months after the most recent message for support history, security, and legal recordkeeping, then deleted unless a longer period is required by law. You may request earlier deletion.
• Website and store analytics: aggregated or de-identified statistics that cannot reasonably be associated with an individual may be retained for longer-term trend analysis.
• Sensitive personal information: we retain none. Precise geolocation is processed on your device and is stored only within the photo and overlay data held on your device, which you control and can delete at any time.

See our app-data deletion instructions for the available deletion methods and the information we may need to locate an anonymous subscription record.

Security

Because we do not operate servers that store your photos or project data, the security of that information is governed by the security controls of your device and operating system (such as device passcode, biometric lock, file-system encryption, and the App Store/Google Play sandbox). For the limited subscription data processed by RevenueCat on our behalf, we rely on RevenueCat's published security practices, which include encrypting that data in transit and at rest. We will notify affected users without undue delay, and in any event consistent with applicable law, if we become aware of a personal data breach affecting their information.

Children's privacy

The App is intended for adult professional users. We do not direct the App to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has used the App and we have processed information about them, please contact us using the address below and we will take appropriate steps to delete the information.

Your rights — EU, EEA, and UK

If you are located in the EU, EEA, or UK, you have the following rights under GDPR with respect to personal information we control:

• Access — to obtain a copy of personal information we hold about you.
• Rectification — to correct inaccurate or incomplete information.
• Erasure — to ask us to delete information we hold about you.
• Restriction — to ask us to limit processing.
• Portability — to receive your information in a portable format.
• Objection — to object to processing based on legitimate interests.
• Withdrawal of consent — at any time, where processing relies on consent.
• Complaint — to lodge a complaint with your local data protection supervisory authority.

Because most information is stored on your device, you can erase it from the App's Settings screen or by uninstalling the App. To exercise rights involving support correspondence or an anonymous RevenueCat customer record, contact us at support@civilfieldphotos.com.

Your rights — California residents

California residents have specific rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA").

Categories of information we have collected in the past 12 months

• Identifiers — anonymous App User ID passed to RevenueCat and, on Android, a pseudonymous identifier generated by the Google Maps SDK. Source: generated automatically by those SDKs. Purpose: subscription processing; Google's measurement of Maps SDK usage.
• Commercial information — subscription product purchased and entitlement status. Source: Apple App Store / Google Play via RevenueCat. Purpose: delivering paid features.
• Contact and support information — email address, message contents, attachments, and any name, device information, or other details you choose to provide when contacting us. Source: directly from you. Purpose: support, security, privacy requests, and legal recordkeeping.
• Internet or other electronic network activity — aggregated, non-identifying website traffic data. Source: Vercel Analytics. Purpose: improving the Website.
• Geolocation data (sensitive) — used primarily on-device to overlay location on photos. We and RevenueCat do not receive it. Apple or Google may process a coordinate as an independent platform provider when the App requests a reverse-geocoded street address.

Sale and sharing

We do not sell personal information and we do not share personal information for cross-context behavioral advertising (as those terms are defined in the CCPA). We have not sold or shared personal information in the preceding 12 months and we have no plans to do so.

Specific California rights

• Right to know what personal information we have collected, used, disclosed, and the categories of sources, purposes, and recipients.
• Right to delete personal information we have collected, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to limit the use and disclosure of sensitive personal information to permitted business purposes.
• Right to opt out of sale or sharing — not applicable because we do not sell or share.
• Right to non-discrimination for exercising any of these rights.

To exercise any of these rights, contact us at support@civilfieldphotos.com. We will verify your request through reasonable means consistent with the sensitivity of the information and your relationship with the App. We do not charge a fee to respond to verifiable consumer requests.

Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. For material changes that affect how we use your personal information, we will provide reasonable advance notice through an in-App notice, an update to this page, or both.

Contact

Questions, requests, or concerns about this Privacy Policy or our data practices can be sent to support@civilfieldphotos.com. The controller is Robert Denison, a California sole proprietor doing business as Denison Systems, based in Folsom, California, USA.