Assay · Form P-1 · Privacy Updated 2026-08-16

Privacy Policy

Your photos never leave your phone. The rest of this page explains what that does and does not cover.

The short version

Your photos never leave your phone. Not to us, not to iCloud, not to anyone. We cannot see them, and we could not hand them over if we were asked to, because we never receive them.

What we do store is numbers: which products you are testing, when you took each photo, and the measurements calculated from it on your device.

Photos

Photos are written to a private folder inside the app on your device. They are hidden from your camera roll, and the folder is flagged so that iOS excludes it from iCloud and iTunes backups.

That has a consequence worth stating plainly: if you delete Assay or lose your phone, the photos are gone and we cannot restore them. Use the export feature to keep your own copy.

No photo, and no part of a photo, is ever transmitted off the device.

What we store on our servers

An account identifier, and the Apple identifier if you use Sign in with Apple. An email address only if you give us one.

The names of products you enter, and their prices if you enter them.

For each test: which product is being tested, which measurement is the primary one, the start and end dates, and the resulting verdict.

For each day you take a photo: the day number, the time, and the three numbers measured from that photo on your device.

Whether you have an active subscription or a founding place.

Choosing an existing photo

You can use a photo you already have instead of taking a new one. When you do, iOS shows you its own picker and hands Assay only the photo you selected.

Assay never asks for access to your photo library and never receives one. We cannot browse it, count it, or see anything you did not pick.

A photo chosen this way is checked exactly like one taken in the app, and the app records that it came from your library so the result can say so.

What we do not do

We do not sell your data. We do not share it with advertisers. We do not run advertising in the app.

We do not use your data to train models.

We do not attempt to identify you from your face, and the app performs no facial recognition. It locates facial landmarks in order to measure the same patches of skin each day, and that calculation happens on your device.

Other companies involved

Apple processes your purchase and, if you use it, Sign in with Apple. Apple gives us a token and, if you allow it, an email address.

RevenueCat manages subscription status for us. It receives your purchase information and an anonymous account identifier. It does not receive your photos or your measurements.

Deleting your account

Write to dev@starise.ca and we will delete your account and everything stored against it. Photos are already only on your phone, so deleting the app removes those.

Children

Assay is not intended for anyone under 13, and we do not knowingly collect their data.

How long we keep things

Photos stay on your phone until you delete them or delete the app. We never hold a copy, so there is nothing for us to expire.

Measurements and verdicts stay on our servers until you ask us to delete your account.

Security

Traffic between the app and our servers uses HTTPS. Photos are not part of that traffic, because they are never sent.

No system is perfectly secure, but the strongest protection here is structural: the most sensitive thing the app handles never reaches us at all.

Where your data is held

Starise operates from the Province of Ontario, Canada. Data we hold may be processed there or in other countries where our providers operate.

Your rights

You can ask for a copy of what we hold, ask us to correct it, or ask us to delete it. Export in the app already gives you everything on your phone.

Write to dev@starise.ca.

Changes

If we change how any of this works, we will say so in the app before the change takes effect, not afterwards.