RightFrame — Privacy Policy
com.rightframe.appDeveloper & Publisher Identity
1. Introduction & Core Privacy Philosophy
RightFrame (“we”, “our”, or “the App”) is developed and published by Otmane El Baghazaoui, an individual software developer operating in Morocco (not a corporate entity or registered company). We believe privacy is a fundamental human right. RightFrame was engineered from the ground up as a privacy-first, on-device photo studio for passport photos, national identity documents, visa photos, image compression, format conversion, and signature preparation.
🔒 On-Device Guarantee
Unlike cloud-based photo editors, RightFrame processes 100% of your images locally on your device. We do not operate an application backend, user database, or image upload server. Your photos, biometric facial features, and signatures never leave your device through RightFrame.
This Privacy Policy explains:
- What data is processed on your device.
- What permissions RightFrame requires and why.
- How advertising data is handled through the Google Mobile Ads SDK.
- How user consent and regional privacy regulations (GDPR, UK GDPR, Swiss FADP, CCPA/CPRA, US State Laws) are respected.
- Your privacy rights and choices.
2. On-Device Image Processing & Device Data
2.1 Photo & Document Processing
- 100% Local Execution:When you take a photo or select an image from your library to create a passport photo, resize, compress, crop, or prepare a signature, all computations are executed exclusively by your device's local CPU and GPU.
- No Image Uploads: We do not transmit, upload, inspect, or store your photos or documents on any external servers or cloud services.
- Biometric & Face Frames: Any alignment guidelines, face framing grids, or passport biometric crop boxes are purely visual client-side overlays. RightFrame does not perform remote facial recognition or create biometric identifier databases.
2.2 Temporary Storage & Sandbox Files
During image manipulation (e.g., resizing high-resolution photos or converting formats), the App may temporarily cache working image files in your device's isolated application sandbox cache.
These temporary files are cleared automatically when operations complete or when the application cache is flushed. They are never shared with other applications.
2.3 Saving & Exporting Files
- Saving to Photos:When you tap “Save to Photos”, the processed image is written directly to your device's local photo library.
- Sharing:When you tap “Share”, the processed image is provided strictly to your operating system's native system share sheet. You retain full control over where and with whom you share your files.
3. Device Permissions
RightFrame requests only the minimum permissions necessary to deliver the photo editing and export tools you request:
| Platform | Permission | Purpose & Scope |
|---|---|---|
| iOS | NSCameraUsageDescription | Allows you to capture a live portrait or document photo directly within the app for local processing. |
| iOS | NSPhotoLibraryUsageDescription | Allows you to select an existing photo from your library for local processing. |
| iOS | NSPhotoLibraryAddUsageDescription | Allows RightFrame to save your finalized document photo directly to your Photos library (add-only access; does not grant full photo read access). |
| Android | android.permission.INTERNET | Required by Google Mobile Ads to request and display advertisements and consent forms. |
| Android | android.permission.ACCESS_NETWORK_STATE | Allows the app to verify network availability before initiating ad or consent requests. |
| Android | android.permission.WRITE_EXTERNAL_STORAGE (maxSdkVersion 28) | Used on legacy Android versions to save exported images to the public gallery. Modern Android versions use scoped storage / MediaStore. |
RightFrame never requests photo permissions on initial launch. Permissions are requested strictly at the moment you choose to take a photo, select an image, or save a result.
4. Third-Party Services: Google Mobile Ads (AdMob)
To keep RightFrame's photo studio tools free and accessible, we integrate the Google Mobile Ads SDK (provided by Google LLC and Google Ireland Limited).
4.1 Data Processed by Google Mobile Ads
While RightFrame itself does not collect personal data, Google Mobile Ads may collect and process certain telemetry and device information in accordance with Google's Privacy Policy, including:
- IP Address: Used to determine general coarse location (country, state, or city) to serve geographically relevant ads and detect fraud.
- Device Identifiers & Telemetry: Operating system version, device model, carrier, screen size, and mobile advertising identifiers (where permitted by applicable consent and platform settings).
- Ad Interaction Events: Impressions, clicks, video views, and ad diagnostic logs to prevent advertising fraud, enforce frequency capping, and calculate publisher earnings.
4.2 Personalized vs. Non-Personalized / Limited Ads
- Personalized Ads: If you provide affirmative consent in regions where consent is legally required, Google may use your device identifier and ad interaction history to deliver personalized advertising.
- Non-Personalized / Limited Ads: If you decline consent, or if you reside in a region where consent is withheld or opt-out is exercised, Google Mobile Ads serves non-personalized or limited ads. These ads rely on contextual factors (such as the app type, coarse geographic location, or current content) rather than cross-app behavioral tracking.
5. Google User Messaging Platform (UMP) & Regional Consent
RightFrame integrates Google's official User Messaging Platform (UMP) SDK to manage privacy disclosures and consent collection in compliance with international data protection laws.
5.1 European Economic Area (EEA), United Kingdom & Switzerland
In accordance with the General Data Protection Regulation (GDPR), UK GDPR, and the Swiss Federal Act on Data Protection (FADP):
- RightFrame implements the IAB Europe Transparency and Consent Framework (TCF v2.2) via Google UMP.
- Before loading advertisements, users in the EEA, UK, and Switzerland are presented with a certified consent message.
- You have the right to grant, refuse, or customize consent for individual advertising purposes and third-party ad technology partners.
- Consent Gating: If consent is not obtained or is refused, RightFrame strictly withholds advertising requests or serves only legally permissible limited ads.
- Right to Withdraw / Privacy Options: You can review or modify your consent choices at any time by tapping Settings / Shield icon > Manage Privacy Options directly inside RightFrame.
5.2 United States (California CCPA/CPRA, Virginia, Colorado, Connecticut, Utah, etc.)
Under applicable US state privacy laws:
- We disclose that Google Mobile Ads may process identifiers and network activity for targeted advertising or cross-context behavioral advertising.
- RightFrame does not sell your personal data or photos for monetary consideration.
- You may exercise your right to opt out of targeted advertising through the Google UMP privacy message or the in-app Manage Privacy Options entry point.
5.3 Offline & Failure Behavior
If you are offline, or if Google's consent servers fail to respond, RightFrame fails safely open for the user: advertising is withheld, while all photo compression, resizing, and document tools remain 100% available without interruption.
6. Apple App Tracking Transparency (ATT) & iOS Privacy
- No Cross-App Tracking:RightFrame does not track users across other companies' apps and websites, does not access Apple's Identifier for Advertisers (IDFA) for cross-app behavioral targeting, and does not share your data with data brokers.
- SKAdNetwork Attribution: On iOS, ad performance and attribution are evaluated using Apple's privacy-preserving SKAdNetwork framework, which does not link device identities or track users across applications.
- Because RightFrame does not engage in tracking as defined by Apple, an App Tracking Transparency (ATT) permission prompt is not presented, ensuring a seamless, non-intrusive experience while fully adhering to Apple App Store Review Guideline 5.1.2.
7. Data Retention & Security
- RightFrame Processing Data: Retained for 0 dayson remote servers. Photos and signatures exist only in your device's memory and temporary app cache during active processing.
- Advertising Telemetry: Any telemetry collected by Google Mobile Ads is retained according to Google's Data Retention Policies.
- Security:All processing takes place within your operating system's sandboxed environment. System export mechanisms rely exclusively on standard operating system security controls.
8. Children’s Privacy
RightFrame is a general-purpose utility designed for individuals creating document and portrait photos. RightFrame is not directed to children under 13 years of age (or under 16 in the European Union and United Kingdom). We do not knowingly collect personal information from children.
9. Your Rights & How to Exercise Them
Depending on your jurisdiction, you have specific rights under data protection laws (such as GDPR or CCPA/CPRA):
- Right to Access & Portability: All photos and generated documents are saved directly to your device and are in your immediate possession.
- Right to Erasure:Deleting a photo from your device's photo library or uninstalling the app permanently purges all local app data.
- Right to Withdraw Consent / Opt-Out: You can withdraw or adjust your advertising consent at any time inside RightFrame by navigating to Settings / Privacy > Manage Privacy Options.
- Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.
10. Contact Information & Inquiries
If you have questions, feedback, or concerns regarding this Privacy Policy or RightFrame's privacy practices, please contact the developer directly:
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect enhancements to RightFrame, regulatory updates, or changes to advertising network requirements. The updated policy will always be accessible within the application and at our hosted policy URL. Continued use of the App following any changes indicates acceptance of the updated policy.