OldPic — Privacy Policy
Last updated: 25 August 2026
Controller: BUSATER YAZILIM ANONİM ŞİRKETİ, Türkiye
Contact: bsdigitalapp@gmail.com
The short version
OldPic scans your printed photographs on your phone. Your photographs never leave your device. There is no account, no upload, and no cloud copy. We cannot see your photographs, and neither can anyone else, because they are never sent anywhere.
The only data that ever leaves your phone is usage counting — how often a scan succeeds, whether a preset was used — recorded against a random identifier created by this installation, and never joined to your name, your e-mail or your account. You can turn it off in Settings with one switch.
1. What we do not collect
We want this list first, because it is the important one. OldPic never collects, transmits, stores or has access to:
- your photographs, or any part of them: no image, thumbnail, crop, face or
- any file name, album name, photo title, note or other text you type;
- EXIF metadata, GPS coordinates or capture timestamps from your photographs;
- OCR text, image classification or content labels;
- your contacts, calendar, microphone or precise location;
- your advertising identifier (IDFA on iOS, Advertising ID on Android).
pixel data of any kind;
This is not only a policy. The list of analytics events the app can emit is fixed in its source code, and the server independently rejects anything not on that list, so there is no code path that could send photo content even by mistake.
2. What we do collect
Only if you leave "Share usage data" switched on in Settings.
A random installation identifier. Generated on your device the first time you open the app and stored only inside the app. It is not your advertising identifier, not your device ID, and is not derived from any hardware value. It cannot be linked to you or to anything outside OldPic, and it is destroyed when you uninstall the app.
Basic technical context: platform (iOS or Android), app version and build, operating system version, device model, your language code, and whether the install came from the App Store, Google Play or a test channel.
Product usage events, such as: the app was opened, a scan succeeded or failed, a preset was chosen, a photo was exported, the paywall was viewed, a purchase completed. Each event carries the time it happened and a small number of properties, and nothing else.
Measurements are rounded into ranges; counts are not. How long a scan took, how large the image was, how confident the detector was and how much glare it saw all leave your phone as a range rather than a figure — a scan that took 1,842 milliseconds is recorded as "1–2 seconds" — because the exact value is no more useful to us and precise measurements are more identifying. Plain counts are sent as they are, because they are small whole numbers that describe an action rather than a measurement: how many photographs were in a batch, how many corners you dragged, how many onboarding screens you saw, how many free scans remain.
Country is determined from the network connection by our server. Your device never sends location information of any kind.
3. Why we collect it
To understand whether the product works: whether scans succeed, which parts of the flow people abandon, which devices have problems. Legal basis under GDPR: our legitimate interest in improving the app (Art. 6(1)(f)), and your consent where required — the switch in Settings is that consent, and turning it off also deletes anything not yet sent.
We do not use this data for advertising, profiling or automated decision-making, and we do not sell or share it with anyone.
4. Where your photographs live
On your device only, inside the app's private storage:
- Original captures — the untouched full-resolution files. These are never
- Processed photos and thumbnails — the corrected results.
- Scan cache — temporary working files, safe for the system to reclaim.
deleted automatically, including by "Clear scan cache".
On Android, cloud backup of the app is disabled, so your photograph library is not copied to Google Drive.
Deleting a photo in OldPic moves it to "Recently Deleted"; the files are removed only when you empty it. Uninstalling the app deletes everything.
5. Permissions
We deliberately do not ask for permission to read your photo library, and on Android we explicitly block broad storage permissions.
Import works without that permission. When you tap Import, your phone's own photo picker opens — PHPicker on iOS, the system photo picker on Android. It runs outside OldPic and hands back only the single image you chose. OldPic never gains the ability to browse, search or read the rest of your library, and an imported photo is treated exactly like one taken with the camera: processed on the device, stored on the device, never uploaded.
6. Purchases
Payments are handled entirely by Apple and Google. We never see your card details, billing address or Apple/Google account. We receive only whether a valid purchase exists, from the platform itself.
7. Accounts, and the free allowance
You do not need an account. Everything in OldPic — scanning, correcting, enhancing, saving, exporting — works without one, and always will. Signing in does exactly two things: it carries a purchase you have already made to another device, and it gives you a way to delete what we hold.
If you do sign in, with Apple or with Google, we store your provider's stable user identifier and, when the provider gives us a verified one, your email address. Apple's private relay addresses are discarded rather than stored: they identify nobody and cannot be written to. Nothing else is kept — no name, no profile photo, no contacts.
Deleting your account removes it immediately, along with everything stored against it. The photographs on your phone are not touched; they were never ours to delete. The control is in Settings, beside the sign-in buttons.
### The free allowance
The five free scans are counted per device, not per installation. To make that work, the app sends a salted, one-way hash of a device identifier — a random value kept in the Keychain on iOS, the system `ANDROID_ID` on Android — and receives back a number. The raw identifier never leaves your phone, and the hash is useless to anyone else because it is salted with a value specific to OldPic.
That request contains no photograph, no file name, no album, no location and nothing about what you scanned. If it fails, or you are offline, the app carries on using its local count rather than refusing to work.
7. Third parties
None. OldPic contains no advertising SDK, no attribution SDK, no analytics vendor and no social SDK. Our own analytics endpoint runs on infrastructure we control (Cloudflare). If this ever changes, this document changes first.
8. Children
OldPic collects no personal data and has no social features, user-generated content or messaging. It is suitable for all ages.
9. Your rights
We hold no name, e-mail address or account alongside this data — only an identifier this installation made up for itself — so we have no way to tell which rows are yours in order to export or delete them individually. That is a consequence of collecting so little, not an evasion, and we would rather say it plainly than claim a degree of anonymity a persistent installation identifier does not support. In practice:
- To stop collection: turn off "Share usage data" in Settings.
- To delete everything: uninstall the app. All photographs and the
- To ask a question or make a request under GDPR or KVKK, write to
Anything queued but not yet sent is deleted immediately.
installation identifier are destroyed with it.
10. Changes
If this policy changes materially, the updated version will be posted here with a new date, and where the change concerns what we collect it will also be surfaced in the app.
11. Contact
BUSATER YAZILIM ANONİM ŞİRKETİ — bsdigitalapp@gmail.com