Privacy policy.

What we collect.

Nothing. There is no analytics SDK, no crash reporter, no advertising framework, no remote configuration, no cloud API, and no account system. Vantage has never sent a single byte of your data to any server, including ours, because there is no server.

What stays on your device.

The following is written to Vantage's app sandbox on your iPhone:

• Captures, thumbnails, subject masks, depth maps (on LiDAR-equipped iPhones), composites, and time-lapse exports
• Spot names and capture timestamps
• Alignment data (computed by Apple's Vision framework on-device)
• If you grant location permission, a single GPS coordinate per spot — rounded to roughly 110m precision — used for sunrise / sunset times

Vantage marks these files with iOS's strongest file-protection class, which means they are unreadable while the device is locked. When you delete a spot or uninstall Vantage, the data is deleted with it.

iCloud Backup.

If you have iCloud Backup turned on in iOS Settings, Apple will include Vantage's sandbox as part of your encrypted device backup. We don't control this backup, can't read it, and have no access to it — it's handled entirely by Apple between your device and your iCloud account, and is encrypted end-to-end. It's the same mechanism every iOS app's data uses unless the developer opts out.

If you'd prefer Vantage's data not to be included, you can exclude it under Settings → [your name] → iCloud → Manage Account Storage → Backups → This iPhone → Vantage on iOS.

Permissions.

• Camera — required to take photos.
• Photos (add-only) — only used when you tap Save on a composite or time-lapse, so the file can be added to your library. Vantage never reads from your Photos library.
• Location (When In Use) — optional. Used once per first capture to pin a spot, and to compute that day's sunrise and sunset times for the spot detail screen. The coordinate is stored locally at coarse precision and never transmitted.

You can revoke any of these in iOS Settings → Privacy → Camera / Photos / Location Services. Vantage degrades gracefully when permissions are off.

Third-party services.

None. Vantage uses no analytics SDKs, no crash reporters, no advertising frameworks, no remote configuration, no cloud APIs.

In-app purchase.

Vantage Pro is a one-time purchase that removes the corner watermark from exported composites. Apple processes the transaction; we receive a receipt confirming the purchase, but no personal information about you. The purchase is restored automatically on a fresh install once you sign in to the same Apple ID.

Children.

Vantage does not knowingly collect data from anyone, including children under 13. There is no account system and no data leaves the device.

Changes.

If a future version of Vantage ever collects or transmits data, this policy will be updated and clearly described in the corresponding "What's New" notes before the change ships. By default, the app stays local-only.