Privacy
ilovegrain is a camera app and this website. This page says what happens to your data, which is very little, and what your rights are under the GDPR.
Controller
Nicolai Schmid
Viertelkamp 44
23611 Bad Schwartau
Germany
Email: nicolai@schmid.uno
The app
Every stage of the pipeline runs on your device. The photo you take, the RAW file it came from and the rendered JPEG stay on the phone: renders are saved to your photo library, sources are kept inside the app until you delete the capture. Your look adjustments and settings are stored on the device only; delete the app and they are gone with it.
The app sends nothing about you or your photos. This build makes no network requests; if that changes (for example with an app update), this page changes first. There are no accounts, no sign-in, no analytics and no crash reporting of our own.
The app asks for camera access to take photos and for add-only photo-library access to save them; it cannot read the rest of your library.
App Store and TestFlight
You install the app through Apple's App Store or, during the beta, through TestFlight. Apple processes the data of your Apple account, your download and your device, and any crash reports and tester feedback you choose to send, under Apple's own terms and privacy policy; we have no influence on that processing. Provider: Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA, and for users in the EU Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland.
We receive only what Apple passes on to developers: TestFlight feedback you send (your text, screenshots you attach, the device model and OS version, the app version) and, if you have enabled sharing with developers in your device settings, crash logs. We use it to fix the problem you report, on the legal basis of our legitimate interest in a working app (Art. 6(1)(f) GDPR). We delete it when the report is resolved, at the latest when the beta ends.
This website
The site is static. It sets no cookies, runs no analytics and loads no third-party scripts or fonts; the fonts are served from this domain.
It is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, as our processor under a data processing agreement. To deliver a page and keep the service secure, Vercel processes the data every web request carries: your IP address, the time of the request, the URL requested, the referring page if your browser sends one, your browser's user agent, and the response status and size. Vercel writes this to request logs. We store or export none of these logs ourselves; Vercel deletes them automatically after its log retention period, currently at most one day.
Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). Vercel is certified under the EU-US Data Privacy Framework; in addition, the transfer to the USA is covered by the EU Standard Contractual Clauses in Vercel's data processing agreement.
If you write to nicolai@schmid.uno, we process your address and what you write in order to answer you. The legal basis is Art. 6(1)(b) GDPR when your message concerns a contract or a step towards one, otherwise our legitimate interest in answering (Art. 6(1)(f) GDPR). We delete the correspondence when the matter is done, unless a statutory retention duty (for example under commercial or tax law) requires us to keep it longer.
Right to object
Where we process your data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation (Art. 21(1) GDPR). We then stop the processing unless we can show compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. An objection is sent to nicolai@schmid.uno.
Your rights
You have the right to information about the data we hold about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and the right to object described above (Art. 21). The app keeps no data about you, so for the app there is nothing we could hand over, correct or delete; it is all on your device.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The one responsible for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany. You may also complain to the authority of your own place of residence.
Changes
This page changes when the app or the site changes what it does with data; the current version is always at https://ilovegrain.app/privacy.
Last updated 12 October 2026.