Privacy policy
The short version. Citus Camera has no accounts and collects no personal data. Your photos are processed entirely on your iPhone and saved only to your own photo library. The app sends a small number of anonymous usage events to help us improve it, with no identifiers that could link them to you, and you can turn even that off in Settings. The website keeps one thing on purpose: the email you give us if you join the waitlist.
Who we are
Citus Camera is developed by Citus Studio, an independent developer. Contact: support@citus.studio.
Your photos and videos
Everything you shoot with Citus Camera is captured, processed and rendered on your device. Photos are saved to your own iOS photo library, in a "Citus Camera" album. We never see, upload, store or have any access to your photos, videos or the contents of your photo library.
Permissions the app asks for
- Camera, to shoot photos with real-time film looks in the viewfinder.
- Photo library, to save your shots and show your Citus album in the in-app gallery.
- Microphone, only if and when video recording ships; it is not requested today.
Denying a permission never breaks the rest of the app; you can change permissions any time in iOS Settings.
Anonymous usage analytics
To understand which features matter, the app sends a small number of anonymous events to our own server, a Cloudflare Worker we operate. An event contains: an event name (for example photo.captured, recipe.saved) with small technical properties such as which look was active; onboarding progress; permission outcomes (granted, denied or limited, never anything about the content those permissions unlock); app-health signals such as capture errors, camera-session interruptions, bucketed capture timing and the device's thermal state; purchase-flow signals such as that a locked look was tapped or an unlock screen was shown, and whether a purchase started, completed or failed (payment itself is handled entirely by Apple; we never see payment details, prices paid or your Apple ID); a random session identifier generated fresh each launch and never stored; and the app version, iOS version and device model.
What is not collected: no names, no email addresses, no phone identifiers, no location, no contacts, no photo contents or filenames, no advertising data. We do not track you across apps or websites, we build no profiles, and we never sell or share data with third parties. Events are used only in aggregate.
Opt-out: Settings, Privacy, "Share Usage Data" turns analytics off entirely.
The website and the waitlist
citus.studio runs no analytics and sets no tracking cookies. It stores two flags in your browser only: that you dismissed the cookie notice, and that you joined the waitlist, so the form does not ask twice.
If you join the waitlist, we keep the email address you enter, the time you entered it and which page you were on, in a database we operate on Cloudflare. It is used for one purpose: to tell you when Citus Camera is released and, at most, a small number of notes about the app afterwards. It is never sold, shared or combined with anything else. Write to support@citus.studio from that address and it is deleted the same week.
Data retention
Analytics events are retained as aggregate statistics; since they contain no identifiers, there is nothing that could identify you to retain or delete. Waitlist emails are kept until you ask us to remove them or until the list has served its purpose after launch.
Children
Citus Camera does not knowingly collect any personal information from anyone, including children.
Changes
If this policy changes, for example when video recording or new features ship, we will update this page and the effective date above.
Contact
Questions or requests: support@citus.studio