Your privacy.
One place to read it.

Photos and notes on your device

Dear Photo stores a copy of each photo you import, your text and other additions, thumbnails, favorites, photo dates and local photo identifiers, and app preferences on your device. It also stores the information needed to suggest memories and remember photos you’ve hidden.

The app uses these items to provide editing, your forest, favorites, and memory suggestions. It does not send them to a Dear Photo server. Editing and exporting do not change your original photo.

Photo access and Apple services

You can choose an individual photo through Apple’s photo picker. Optional memory suggestions use the Photos access you grant, including access limited to selected photos. Saving an edited copy needs permission to add images to Photos. Manage these permissions in iOS Settings.

If a selected photo is stored in iCloud, Apple may download it to your device. Photos you export may sync through iCloud Photos, and device or iCloud backups may contain Dear Photo data, depending on your Apple settings. Apple handles those services under its policies.

Widgets

Dear Photo can share thumbnails and the information needed to open a note with its widget through on-device shared app storage. Widget content can be visible to anyone who can see the screen where you place it. You can remove a widget using iOS controls.

Optional usage analytics in the app

If you turn on share usage analytics in settings, Dear Photo sends a limited set of app-action events to PostHog’s United States service. Events describe actions such as opening the app, creating or importing a note, preparing a share, exporting a photo, changing a favorite, opening a widget, completing onboarding, or using a memory action.

Events use a random installation identifier, so events from one installation can be associated. This is a pseudonymous identifier, not your name, Apple ID, or advertising identifier. Events may also include the app version and build, platform, environment, and a limited source, result, or action type.

Events do not contain photos, thumbnails, note text, filenames, dates or locations from your photos, Photos asset identifiers, or sharing recipients. We do not use session recordings, automatic interaction capture, advertising tracking, or cross-app identity linking. Location enrichment is disabled. PostHog receives standard network information, such as the IP address needed to handle a request.

You can switch analytics off at any time. This stops new requests, cancels pending requests, and removes the local analytics identifier. It does not automatically remove events already received. Contact us with questions about analytics data.

Optional website analytics

Website analytics is also off by default. Use Analytics choices in the footer to allow or decline it. Your Dear Photo website choice is separate from the native app and other products on 123cheese.co.

When allowed, this website sends page views and a small set of link actions to PostHog in the United States. A random identifier in session storage connects events in a browser tab’s session. Your choice is remembered in local storage. Events include the public page path, product, platform, environment, and a named action such as opening support. On the studio homepage, only clicks on Dear Photo product links are included.

We do not send URL query strings, fragments, referring URLs, form contents, or personal photos and notes. There is no session recording, automatic interaction capture, or person profile. Location enrichment is disabled. Global Privacy Control and Do Not Track override permission to send analytics.

Declining stops new analytics, cancels pending requests, and clears the tab’s identifier. Already received events are not automatically deleted. The website remains usable with analytics off or browser storage blocked.

Our hosting provider processes ordinary request information to deliver and protect the website. See the 123 Cheese Online website policy for more about website hosting.

Sharing, purchases, and support

When you share an edited photo, you choose a recipient or service through Apple’s share sheet. Dear Photo prepares the file; it does not send it automatically. Your chosen recipient and service then handle that copy. The current beta does not include subscriptions or in-app purchases.

If you email [email protected], we receive your address, message, and any attachments you send. Our email provider processes that correspondence. We use it to help with your request and keep it only as needed for support or applicable obligations.

Removing your information

You can delete individual notes in the app, clear hidden-memory choices in settings, revoke photo access in iOS Settings, and remove widgets. Deleting a note removes its app-held copy and edits. It does not remove original photos, exported images, copies you’ve shared, or data in backups.

Deleting the app removes its local app data. Backups, your Photos library, and copies held by recipients are managed separately through Apple or the relevant service. To ask about support correspondence or request its deletion, email us.

Changes and contact

We’ll update this policy when Dear Photo’ practices change. The date above identifies the latest revision. For privacy questions, contact [email protected].

Data on your device

Watcher saves timers, timer history, routines, preferences, imported audio, selected dial photos, and any accountability contacts you choose locally. These items are used to provide the app’s features, not uploaded to a Watcher server.

Apple’s Screen Time frameworks manage your selected app restrictions and display usage reports on your device. Watcher does not upload your Screen Time activity. The app and its extensions share the local information needed for timers and restrictions.

Permissions and messages

Screen Time access is optional and used for App Lock and usage reports. Notifications and Live Activities show timer or access-session information. Use iOS Settings to manage these permissions.

You choose which photos, audio files, and contact details to provide through system pickers. Accountability contacts are stored locally. Messages open in Apple’s message composer and are sent only after you confirm. Your recipient, Apple, and your carrier handle the resulting communication; messages are not sent through a Watcher server.

Optional product analytics

If you enable Share product analytics in Settings → About, Watcher sends a small set of usage and purchase-flow events to PostHog in the United States. Events use a random installation identifier and describe actions such as opening Watcher or viewing an upgrade. They may include the app version, platform, environment, selected plan, and purchase outcome.

Events do not include timer names, photos, audio files or filenames, contact details, Screen Time selections, message contents, payment details, or Apple transaction identifiers. We do not use session recordings, automatic interaction capture, advertising identifiers, or cross-app identity linking. Location enrichment is disabled. PostHog still receives standard network request information such as an IP address when handling a request.

You can switch analytics off at any time. This stops new requests and removes the local analytics identifier; it does not automatically delete events already received. Contact [email protected] for data questions.

Purchases

Optional Watcher Plus purchases are processed by Apple. Watcher checks Apple-verified purchase entitlements to unlock features. We do not receive your payment card details. You can restore purchases in Watcher and manage subscriptions through your Apple account.

This website

Optional website analytics are off by default and controlled separately from the app. Use Analytics choices in the footer. When allowed, page views and selected Watcher link or dial-preview actions go to PostHog using a random identifier for this browser tab. Your choice is saved in local storage; the identifier is saved in session storage. We do not send query strings, fragments, referrers, form content, or session recordings, and we honor Global Privacy Control and Do Not Track. The 123 Cheese Online privacy hub has the full website details.

Support and external services

If you contact [email protected], we receive your email address, message, and any attachments you send so we can respond. Do not include passwords or information you do not want to share. Our email provider processes that correspondence.

Links to recording credits or other websites open external services, which handle information under their own policies. Apple may process device backups, App Store transactions, or diagnostics under its policies and your settings. Device backups may contain Watcher’s local data.

Your choices

You can remove saved items and imported audio in Watcher, remove accountability contacts in Settings, and revoke permissions in iOS Settings. Deleting the app removes its local app data; device backups and messages you have already sent are managed separately.

To ask about support correspondence or request its deletion, email [email protected]. We use support correspondence to address your request and retain it only as needed for support or applicable obligations.

Changes and contact

We will update this policy when Watcher’s practices change. The date above identifies the latest revision. For questions about this policy or your data, contact [email protected].

Information stored on your device

Your profile name and chosen photo, saved games and hands, lesson progress, puzzle history, practice scores, preferences, and simulated practice balances are stored locally on your device. A profile photo you choose is provided through the system photo picker and remains on your device.

Limited product analytics

The app uses PostHog’s United States service for limited product analytics. When analytics is enabled, PostHog assigns a random identifier to this app installation and sends it with named events such as opening a room, starting or completing an activity, receiving a coaching insight, choosing a continuation, viewing a paywall, or starting, completing, or restoring a purchase. The identifier is not your Apple ID, advertising identifier, name, email address, or in-app profile, but it allows events from the same installation to be associated over time. The app does not associate analytics with your name or an account.

Events include categorical activity details, a timestamp rounded to the start of the UTC day, and, for activity start and completion events, a random activity-session identifier. Purchase events may include only the chosen access type—monthly, annual, or lifetime—the paywall source, and whether a restore found active access. PostHog also assigns a unique identifier to each event. The event identifier and network processing may reflect more precise capture or delivery timing. The app does not use PostHog identify calls, automatic screen or interaction capture, session replay, surveys, feature-flag evaluation events, push-notification capture, or crash and error capture.

Analytics events do not include chess positions, move notation, poker cards, hand histories, blackjack cards, exact balances, profile photos, names, email addresses, free-form text, transaction identifiers, receipts, payment methods, or localized prices. The app sets PostHog’s geo-IP disable control on every analytics event and does not send location fields. As with any internet request, PostHog’s service receives the network request needed to deliver the event.

Your choice

Product analytics is enabled by default. To disable it, open Profile and turn off Share product analytics. Disabling it takes effect immediately and prevents the app from creating new analytics events.

Accounts, ads, and purchases

The app does not require an account and does not contain advertising. It does not support real-money gambling or cash-out. Apple processes Professor Orin+ purchases under the applicable App Store terms. The app reads Apple-verified entitlement status and stores only the access type and, for subscriptions, its expiration date on the device so verified access can continue offline. Professor Orin does not receive or store payment-card details.

Contact

Questions about this policy can be sent to [email protected].