← Offline Convert

Privacy Policy

Effective date: August 7, 2026

Your files never leave your device. All format conversion and compression happens locally. There is no account, no advertising, and no tracking or product analytics. The app does send a report when it crashes, so the bug can be fixed — see below.

Information We Collect

We collect no personal information and the app requires no account. We never see your files, their names, or their contents.

How Your Files Are Handled

• The videos and images you select never leave your device and are never uploaded to any server.
• Intermediate files and converted output are stored in the app's local sandbox directory.
• Converted output is automatically deleted after 30 days. You can also delete it manually at any time via the system Files app.
• Deleting the app removes all files in its sandbox.

Purchases

The app offers an optional paid upgrade. Purchases are processed by Apple; we never receive your payment details.

To validate purchases and keep your access working across reinstalls and devices, we use RevenueCat, a subscription management service. This is one of only two components in the app that ever contact a server — the other is crash reporting, described below. What is sent:

• A randomly generated anonymous identifier for your installation. It is not linked to your name, email, or Apple Account.
• Purchase and subscription status received from the App Store.
• Device model, operating system version, app version, and country.
• Counters describing how you reached the upgrade screen — for example, how many times the daily free allowance ran out. These are numbers, never file names or content.

Your media files are never part of this. The conversion engine has no networking code at all.

Crash Reports

When the app crashes, a report is sent to Sentry so we can find and fix the bug. Conversion failures depend heavily on the exact device and the exact file — without a stack trace, "it quit halfway through" is usually impossible to reproduce. What is sent:

• The stack trace: which line of our code failed, and what the app was doing at the time.
• Device model, operating system version, and app version.
• A randomly generated identifier for your installation, used only to tell "one device crashing fifty times" apart from "fifty devices crashing once". It is not linked to your name, email, or Apple Account.

Your files are never part of a crash report — not their contents, not their names. Reports are sent only from released builds running on a real device, and only when something actually goes wrong. Normal use sends nothing.

Permissions

• Photos (Add Only) — used solely to save converted files to your photo library. The app uses the system's add-only authorization and cannot read or browse your existing photo library. Source selection uses the system photo picker, so only the items you explicitly choose are handed to the app.
• Notifications — used only to alert you when a conversion is paused because the app moved to the background. Notification content includes no file information.

On-Device Storage

Stored locally on your device only: a conversion speed factor (to improve progress estimates), your language and appearance preferences, your conversion history, and a counter for the daily free allowance. The allowance counter is kept in the system keychain so it survives reinstalling the app.

Third Parties

RevenueCat and Sentry, both described above, are the only third parties. The app integrates no product analytics platform, advertising network, or data broker, and does not track you across other apps or websites.

Children's Privacy

We collect no personal information from anyone, including children.

Changes to This Policy

If a future version introduces functionality that changes how data is handled, we will update this page and revise the effective date above.

Contact

Questions about this privacy policy: sophisheng@gmail.com