PhotoStudio

Data collection

The standard editor does not collect usage analytics, advertising identifiers or diagnostic information and does not include advertising or third-party analytics SDKs. Optional Instagram connection in test builds processes the limited account data described below.

Photos and projects

The app accesses only photos you select through Apple’s system photo picker. Selected media and project files are stored in the app’s private local container. PhotoStudio does not upload them to a developer-operated server.

On-device framing

For some Story layouts, PhotoStudio detects face rectangles on your device to suggest a crop. It does not identify people, upload face data or retain a biometric profile. You can adjust the crop yourself.

Exporting and sharing

When you save a design, PhotoStudio writes the exported file to Photos after you grant permission. When you use the share sheet, the destination you choose processes that file under its own privacy policy. When you choose to open a Story in Instagram, PhotoStudio places the exported image on the device-local clipboard for up to five minutes and opens Instagram’s composer. Instagram processes the image under its own privacy policy; you decide whether to publish it there. This handoff does not connect your Instagram account to PhotoStudio.

Optional Instagram connection in test builds

Test builds offer an optional connection for Instagram professional accounts. If you approve it, the server processes your Instagram-scoped account ID, granted basic permission and an encrypted access token on Cloudflare. When you open the connected-account preview, the server reads your username and up to eight recent media entries from Instagram. These are not stored in our database. Preview images load from Meta’s image servers into temporary app memory, not into your projects or exports. Meta receives the network information needed to deliver these images. Closing the preview releases its displayed data. This connection does not upload your editor photos. New connections last up to 60 days, using the expiry reported by Instagram. Earlier test sessions retain their original one-hour expiry. Sessions are not automatically renewed; expired records are deleted by a cleanup job every ten minutes. Incomplete login records expire after ten minutes. The app stores its own session credential in the device Keychain, not your Instagram token.

Use Disconnect in the test connection screen to delete the stored connection immediately. Permissions granted at Instagram can also be removed in Instagram settings. Cloudflare processes network information to deliver and protect the service. Application request logging is disabled for authentication.

Children

The editor does not require an account. The optional professional-account test connection is not intended for children.

Changes

If PhotoStudio’s data practices change, this page and the App Store privacy disclosure will be updated before the relevant version is released.

Contact

For privacy questions or data requests, email hello@mtuzer.com.