Last updated: 15 September 2026
Dürer is published by Kiducate. This policy explains what the app does and does not collect. It describes the app as it actually behaves, and matches the App Privacy answers filed with Apple.
Dürer has no account and no server of its own. Your photographs and camera view never leave your device. This page explains exactly what is and is not collected.
Dürer is published by Kiducate. This policy explains what the app does and does not collect. It describes the app as it actually behaves, and matches the App Privacy answers filed with Apple.
Dürer has no account, no login and no server of its own.
We never see your photographs. Images you import are read, converted to line art and displayed entirely on your device. They are never uploaded, transmitted or stored by us.
We never see your camera. The camera preview is rendered on screen and discarded frame by frame. It is never recorded, saved or sent anywhere.
We do not collect your name, email address, phone number, contacts or location. We do not use the Identifier for Advertisers (IDFA), we do not show the App Tracking Transparency prompt, we do not display advertising, and we do not track you across other apps or websites. We do not sell or share personal data with data brokers.
We never see your payment details. If you buy the unlock, Apple processes the payment; card and billing details stay with Apple.
Three things, all anonymous, to keep the app working, to confirm your purchase, and to understand whether the app is useful.
Product analytics, via PostHog. We record which features are used — that the app was launched, that onboarding was completed, that a tracing session started and how long it lasted. These events carry technical properties such as app version, operating system version, device model and language, plus an anonymous identifier generated on your device. That identifier is not connected to your identity, because the app has no accounts. If you buy the unlock, the purchase event also records the product, its price and the currency. Processed by PostHog on servers in the United States.
Crash and error diagnostics, via Sentry. When the app crashes or hits an error we receive a technical report: the error, a stack trace, the app version, the device model and the operating system version. We have configured Sentry not to attach IP addresses, so the anonymity here is enforced in the app's code rather than merely promised. Processed by Sentry on servers in the European Union (Germany).
Purchase validation, via RevenueCat. When you buy or restore the unlock, RevenueCat processes the purchase record from Apple — the transaction and product details — together with an anonymous app user ID that it generates, so that it can confirm the purchase and restore it later. That record is not linked to your identity, because the app has no accounts, and it is not used for tracking.
None of these services receives your photographs or your camera imagery.
Where the UK GDPR or EU GDPR applies, our legal basis is our legitimate interest in maintaining and improving the app. You have the right to access, correct or erase data relating to you, and to object to processing.
Because the data is anonymous and not linked to an identity, we may need your help to locate it. Write to us and we will act on any valid request.
Camera — required for the live preview the app is built around. If you decline, you can still browse the image library.
Photo library — requested only when you choose to import your own image.
You can change both at any time in iOS Settings.
Dürer is rated 4+ and is suitable for all ages, but it is not directed to children under 13, and we do not knowingly collect personal data from them.
If this policy changes we will update this page and the date at the top.
For privacy questions, contact Kiducate at ahmed@kiducate.eu.