Privacy Policy

Last updated: August 6, 2026

MINT (“we”, “the app”) is a personal photo diary. This policy explains what we collect, why, and your choices. We designed the product so your memories stay private to your account.

What we collect

Account. When you sign in with Apple, we receive a stable user identifier (and, if you choose to share them, your name and/or email) through Firebase Authentication. We use this only to identify your diary and keep it synced to your account.
Your content. Photos, titles, descriptions, page layout choices, and related diary data you add. Optional voice notes attached to hardware-camera captures may be stored and transcribed so they can appear as text in your diary.
Viewfinder sessions. When you use the live viewfinder, a temporary peer-to-peer video session may run between your device and a cameraman’s phone; photos they capture are saved to your diary.
Usage counters. Counts we need to enforce plan limits (for example photo vault size and daily viewfinder minutes).
Purchases. If you subscribe to Bloom, Apple and RevenueCat process the payment and tell us whether your entitlement is active. We never see your card details.
Optional feedback. If you send anonymous feedback from the You tab, we store the message you typed (rate-limited; not linked to your diary content).
Basic technical data. Minimal operational logs (errors, rate limits, security) needed to run the service.

How your content is stored

Photos and diary data are stored on Cloudflare (R2 object storage and KV) under an identifier derived from your account. Content is isolated to your account and is not shown to other users. There is no public social feed.

Processors we use

Service providers that process data on our behalf are limited to: Apple (Sign in with Apple, App Store), Google Firebase (authentication), Cloudflare (hosting and storage), and RevenueCat (subscription status). Optional on-platform AI features (for example voice transcription or caption helpers), when enabled, run via Cloudflare Workers AI and only process the content needed for that feature.

What we do not do

We do not sell your data.
We do not use your photos or diary for advertising.
We do not track you across other apps or websites for ads.

Sharing

Content leaves the app only when you choose to share (for example via the device share sheet: AirDrop, Messages, Photos) or when you invite a cameraman into your viewfinder session.

Data retention & deletion

Your content is kept until you delete it or your account. You can delete your account anytime from the You tab; that permanently removes your diary and uploaded photos from our storage. Items in Recently Deleted are purged automatically after 31 days.

Children

The app is not directed to children under 13, and we do not knowingly collect personal information from them.

Contact

Questions or requests: miss.mantou.studio@gmail.com