Effective date
This Privacy Policy applies to the Instant Passport & ID Photo apps for iOS and Android, and related Kiducate web pages. Last updated: September 21, 2026.
Instant Passport & ID Photo by Kiducate
Privacy Policy
Unlike other Kiducate apps, this one is not fully on-device: producing your document photo requires uploading it to a background-removal service. This page explains exactly what is sent, what is stored, and what is not.
What this app does
Instant Passport & ID Photo turns a phone photo into a correctly sized document photo — Emirates ID, passport, visa, and similar formats — with the background replaced by white and, optionally, a print-ready sheet.
Account requirement
The app does not require you to create an account, sign in, or provide an email address to use it.
Your photo is uploaded — here is exactly what happens to it
When you take or pick a photo, the app first checks its lighting on your device and rejects photos that are too dark before doing anything else. That check never leaves your phone.
To replace the background with white, the app cannot do this on-device. It normalizes your photo (converts it to JPEG and caps it at roughly 4 megapixels) and uploads it to Kiducate's own server — a Firebase Cloud Function running in the europe-west1 region — which adds an authentication key and forwards the image to Pixelcut (pixelcut.ai), a third-party image-editing API, to remove the background. Pixelcut returns the cut-out image, Kiducate's server passes it straight back to the app, and the app composites it onto a white background on your device.
This upload happens for the free preview as well as for a paid export — the preview and the final photo go through the same background-removal step, just at different points in the flow.
Kiducate's server does not write your photo to a database or to disk. It streams the image through to Pixelcut in memory and returns the result; nothing about the request is logged except the image size and the HTTP status, for debugging the service itself. We cannot make claims on Pixelcut's behalf about how long they retain images on their own servers after processing — see Pixelcut's own privacy policy at pixelcut.ai for their stated retention practices.
On-device processing
Two parts of the flow run entirely on your device and never involve any upload:
- Lighting check. The app analyzes brightness and contrast locally to warn you about dark or harshly lit photos before anything is processed.
- Face detection. The app uses Google's on-device ML Kit to locate your face and eye positions so it can align the crop to your document's specification. This runs locally. See Face data below for exactly what is measured, how long it lasts, and how to delete it.
Face data
This app measures your face in order to crop your photo correctly. Document photo specifications are written in terms of head height and eye position, so the app cannot size a photo without measuring them. This section explains exactly what that means.
1. What is collected, what it is used for, and who it is disclosed to
The app uses Google's ML Kit face detection, which runs entirely on your device. It produces two things: a rectangle describing where your face sits in the photo, and the approximate positions of your eyes. These are used for one purpose only, to scale and position your head inside the frame so it falls within the head-height range your document requires.
The app does not create a faceprint, face template, face embedding, facial geometry map, landmark set or identity vector. It does not perform face recognition, face matching, age or gender estimation, emotion detection, or any attempt to identify who you are. It cannot tell one person from another and never tries to.
These measurements are disclosed to nobody. They are not sent to Google, to us, or to any other company. ML Kit performs this work offline on your device.
2. Sharing and retention
The face measurements above are held in memory while you are working on a photo and are discarded when you leave the screen. They are never written to storage and never leave your device, so there is nothing to share and nothing retained.
Your photograph is a separate matter, and it does leave your device. To remove the background, the photo is sent to Pixelcut (pixelcut.ai). Because the photo is of you, it contains your face. The app asks your permission before this happens and sends nothing until you agree. See Third-party image processing below for what is sent and what is not.
The finished photo and the print sheet are saved on your device, in the app's private storage, limited to your 50 most recent results. They are not uploaded to any Kiducate server and not backed up to one.
3. Deletion, and withdrawing your consent
- Withdraw consent for the upload: open Help and Settings, then Photo processing consent, then Withdraw consent. The app will ask again before your next photo is sent, and until you agree nothing is sent.
- Delete one photo: remove the entry from the app's history screen.
- Delete everything: uninstalling the app removes all local history, credits and settings.
- On our servers: there is nothing to delete. We do not store your photo or any measurement of your face at any point, so there is no account to close and no server-side record to erase.
- At Pixelcut: their retention is governed by their own privacy policy. Write to support@kiducate.eu and we will pass a deletion request on.
4. Third parties and equal protection
The face measurements described in section 1 are shared with nobody. The photograph containing your face is shared with exactly one company, Pixelcut, and only to remove its background. We use no other service that receives your photo, and we do not use a service whose published commitments fall short of the protection described in this policy.
Pixelcut's developer documentation states that both input and output images are automatically deleted within 24 hours of being processed, that Pixelcut does not use your data to train models without your consent, and that your data is not shared with third parties except as required by law or to provide the service. We checked those statements on 21 September 2026 and rely on them. We cannot give undertakings on another company's behalf beyond what they publish, so we point you to their own policy rather than restate it as our promise.
Third-party image processing, and your consent
Removing a background cannot be done on a phone to the quality a document photo needs, so this one step uses an outside service.
Who receives it. Pixelcut, at pixelcut.ai, an image editing service operated by another company. It is the only third party that ever receives your photo.
What is sent. The photograph you took or chose, converted to JPEG and reduced to roughly 4 megapixels. Nothing travels with it: no name, no email address, no location, no device identifier, no advertising identifier, and no account, because the app has no accounts.
How it gets there. Through Kiducate's own server, a Firebase Cloud Function in the europe-west1 region, which adds the API key so it never ships inside the app. That server streams the image through in memory. It does not write your photo to disk or to a database. The only thing recorded about the request is its size in bytes and the HTTP status code, for debugging the service.
What comes back. The same photograph with the background removed. Your device then places it on the background colour your document requires.
Your permission comes first. Before the first photo is ever sent, the app shows a screen naming Pixelcut and stating what is sent. Nothing is uploaded until you agree. If you decline, no photo is sent, nothing is charged, and you can change your mind later. You can withdraw your agreement at any time in Help and Settings under Photo processing consent.
What Pixelcut does with it. They remove the background and return the image. Their published developer documentation states that input and output images are deleted automatically within 24 hours and are not used to train models without your consent; their retention practices are governed by their privacy policy at pixelcut.ai.
Device permissions
| Permission | Why it is needed |
|---|---|
| Camera | To capture the photo you turn into a document photo. |
| Photo library (read) | To let you choose an existing photo instead of taking a new one. |
| Photo library (add) | To save your finished photo and print sheet to your photo library when you choose Save. |
The app does not request access to your location, contacts, calendar, microphone, or health data.
What is stored on your device
Unlike Kiducate's other apps, this app's local history does contain photo content:
- A history of your most recent results — limited to the last 50 entries — including the finished photo and print sheet for each one, stored in the app's private storage on your device.
- Your export credit balance and monthly usage count, so the app knows how many exports you have left.
- Your language preference and app settings.
This history is not uploaded or backed up to any Kiducate server. It stays on your device until you delete an entry, clear it from within the app, or uninstall the app.
Purchases
The app offers a one-time purchase for a single export and an auto-renewing monthly subscription — see Terms of Use for what each includes. Purchases are processed by Apple through the App Store; Kiducate never sees or stores your payment card details, billing address, or Apple ID credentials.
To manage entitlements and confirm what you're entitled to on each device, the app uses RevenueCat, a subscription-management service. RevenueCat receives an anonymous app-user identifier and your purchase receipt data — never your photos.
Analytics
The app uses TelemetryDeck for product analytics. Events sent include things like a photo being captured, the lighting check result, a preview starting or finishing, a template being selected, the paywall being shown, and a purchase completing or being cancelled. These events carry only technical values — a source ("camera" or "gallery"), a lighting level, a template ID, whether a purchase succeeded — and a randomly generated identifier. They never include your photo, its content, or anything that identifies you personally.
Advertising and tracking
The app contains no advertising and no advertising SDKs. It does not use the Advertising Identifier and does not request App Tracking Transparency permission, because it does not track you across apps or websites.
Third parties we use
| Service | Purpose | Data shared |
|---|---|---|
| Pixelcut | Removes the background from your photo and replaces it with white | The normalized photo, sent once per preview or export. Handled under Pixelcut's own privacy policy. |
| Kiducate proxy (Firebase Cloud Function) | Adds the Pixelcut API key server-side so it never ships inside the app | Streams your photo through to Pixelcut and the result back; does not store it. |
| Apple App Store | Processing purchases | Handled entirely by Apple under Apple's own privacy policy. |
| RevenueCat | Subscription and entitlement management | Anonymous app-user ID, purchase receipt. |
| TelemetryDeck | Anonymous product analytics | The event types described above. No photo content. |
The app does not use any other analytics, attribution, crash-reporting, or advertising service.
Sharing your photo
When you tap share, the app hands your finished photo to your device's standard share sheet. From that point you decide where it goes. The app does not transmit the file anywhere else and has no visibility into what you do with it afterward.
Government affiliation
This app is independent and is not affiliated with, endorsed by, or representing any government entity. It follows publicly published size and background specifications; it is not an official government tool.
Children
This app is a general-purpose utility and is not directed at children. It does not knowingly collect personal information from anyone, including children.
Deleting your data
Because your photo history is stored only on your device, there is no account to close and no server-side photo record for us to delete on your behalf.
- Delete individual results: remove entries from the app's history screen.
- Delete everything: uninstalling the app removes all local history, credits, and settings.
If you have questions about a specific upload or want confirmation of what was sent, contact us at support@kiducate.eu.
Changes to this policy
If this app starts using a different background-removal provider, adds a new third party, or changes what leaves the device, this policy will be updated to describe that before the change ships.
Contact
Questions about this policy or about how this app handles your data: support@kiducate.eu.
Get Instant Passport & ID Photo
Instant Passport & ID Photo is available on the App Store and on Google Play.