Privacy policy
Last updated: 20 August 2026
Hidee lets parents and guardians mask children’s faces in photos and videos before sharing them.
All photo/video processing and face masking happens entirely on your device. Your media, and the face measurements the App makes, never leave your device, and we do not receive them.
The only data we hold on our servers is your account record, your subscription status and, on the free plan, a count of the exports you have used. That data is stored in the European Union (Frankfurt, Germany). No photos, videos or face data are ever stored there
We do not sell your data, we do not run advertising, and we do not track you across other apps or websites.
To keep a mask on the right person, the App measures each face it detects, on your device. Those measurements are used only for the edit you are making and are then destroyed, and they never reach us. Depending on where you live they may be treated as biometric data — see section 9.
Payments are handled entirely by Apple. We never see your card details.
AR masks are powered by Snap’s Camera Kit. Snap receives usage and performance data about the App. We do not send your photos or videos, or the face measurements described in sections 3 and 9, to Snap.
This Privacy Policy describes how Hidee Technology Ltd collects, uses, shares and otherwise processes your personal data in connection with your use of the Hidee mobile application (the App) and any services accessible through it (the Services).
The App is intended for adults: parents and guardians aged 18 and over. It is not directed at children, and we do not knowingly collect personal data from children. Because the App is a tool that helps protect children’s privacy, children’s images are processed only on your device and never reach us (see ‘Children and children’s images’ below).
Please read this policy carefully to understand our practices regarding your personal data. This version applies to users in the European Union / EEA and the United Kingdom.
Hidee Technology Ltd (registration number HE 490226), a private company limited by shares incorporated in the Republic of Cyprus, having its registered office at Dimitri Charalampous, 13, Office 4B, Agios Antonis, 3020 Limassol, Cyprus, is the controller responsible for your personal data (“Hidee”, “we”, “us” or “our”).
Contact details
Full name of legal entity: Hidee Technology Ltd (HE 490226)
Email (privacy and general enquiries): info@hidee.app
Postal address: Dimitri Charalampous, 13, Office 4B, Agios Antonis, 3020 Limassol, Cyprus
We have not appointed a Data Protection Officer, as we are not required to. If you have any questions about this policy or our data practices, contact us at info@hidee.app.
Your right to complain
You have the right to lodge a complaint at any time with a data protection supervisory authority. Our lead authority is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (www.dataprotection.gov.cy). If you are in another EU/EEA country you may also complain to your local authority, and if you are in the UK you may complain to the Information Commissioner’s Office (ICO) (www.ico.org.uk). We would, however, appreciate the chance to address your concerns first, so please contact us before you do.
Changes to this policy
We keep this policy under regular review. This version was last updated on 20/07/2026. If we make changes, we will post them on this page and, where appropriate, notify you by in-app or push notification. You may be required to read and acknowledge material changes to continue using the App.
Hidee is built on a local-first, on-device architecture, applying data protection by design and by default (Article 25 GDPR).
The photos and videos you select, and all face detection and masking, are processed entirely on your device. No media is transmitted to our servers during processing.
Your projects and drafts are stored only on your device. They do not sync between devices, and if you delete the App they cannot be restored.
To place a mask and keep it on the face you selected, the App detects each face and computes, on your device, a numerical description of that face (a face template). These measurements are used only while your file is being processed, are not written to storage, and are destroyed when processing finishes. They are not transmitted off your device and we never receive them. Depending on where you live, such measurements may be treated as biometric data (see section 9).
After editing, you choose whether to export and share media using Apple’s native share sheet. Once you share to another app, that app’s own privacy policy applies.
Our servers never receive or store photos, videos or face data. They hold only your account record, your subscription status and, on the free plan, your export count, all of which is stored in the European Union (see sections 4, 10 and 11).
Given our on-device design, we collect very little personal data. The categories we collect are:
• Account Data: an internal user identifier we generate for your account, and the email address Apple
returns to us when you use Sign in with Apple. You can choose to hide your email using Apple’s Private
Relay, in which case we receive only a private, Apple-generated relay address (ending
@privaterelay.appleid.com). We do not collect or store your name.
• Subscription Data: the Apple product identifier for the plan you have bought and the Apple transaction
identifiers for your purchase, the start and end dates of your current subscription period, and your
renewal, cancellation and refund status, received from Apple so that we can unlock and manage paid
features.
• Usage Data (free plan): a count of the number of exports you have used in the current free-plan
window, held against your account so that we can apply the free allowance. It is a number only, and
tells us nothing about the content you have edited or exported.
• Diagnostics and Usage Data: anonymous crash reports, performance data and product-interaction data
(for example, which Lens is used), collected through the Snap Camera Kit SDK. This is ‘Data Not Linked
to You’ and is not used to identify you.
• Content Data (on-device only): the photos, videos and projects you create or edit. These are stored
only on your device; we do not receive, access or store them.
We do not collect: your name; your payment card details, billing address or payment history (handled solely
by Apple); your location; contacts; marketing profiles; or, save as described in section 9, special categories of
personal data. We receive no biometric data. As explained in sections 3 and 9, the App computes face
measurements on your device in order to mask faces; those measurements are not stored and are not
transmitted to us, we hold no face templates, and we operate no face database. No photos, videos or facedata are stored on our servers at any time. The catalogue of masks available in the App (Snap Lens
identifiers, mask names, preview image filenames and whether a mask is a premium mask) is static
configuration data about the App, and is not personal data about you.
Sign in with Apple: when you create or sign in to your account, we receive the email address Apple returns (your Apple ID email or a private relay address) and generate an internal identifier for your account.
From Apple: we receive your subscription status and related purchase information so we can unlock paid features and validate receipts.
In the App: when you export a file on the free plan, the export counter held against your account is increased, so that the free allowance can be applied.
Automatically via the Snap Camera Kit SDK: anonymous diagnostics and usage data when you use the AR Lenses.
On your device: your projects, drafts and media are generated and stored locally as you use the App; this stays on your device.
The App is a native iOS application. It does not use cookies or similar web-tracking technologies, and it does not track you across other apps or websites for advertising purposes.
We only use your personal data when the law allows us to. The lawful bases we rely on are: performance of a contract with you; our legitimate interests (where these are not overridden by your rights); compliance with a legal obligation; and, where required, your consent. The tables below set out what we do and why.
8. Automated decision-making and profiling
We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or that similarly significantly affect you.
9. Special categories of personal data and children’s images
The App masks faces by detecting each face on your device and computing a numerical description of it (a face template), so that a mask stays on the person you selected while your file is being processed. In automatic mode the App also estimates, on your device, whether a detected face appears to be that of a child, so that it can suggest which faces to cover.
Data of this kind is capable of amounting to biometric data within the meaning of Article 4(14) GDPR and, where it is used to distinguish one individual from another, may fall within Article 9(1) GDPR. Under the laws of certain jurisdictions, including the US states of Illinois, Texas and Colorado, it may be treated as a biometric identifier or biometric information.
These measurements are created and used on your device only. They are not written to storage, they are destroyed once processing finishes, and they are not transmitted to us or to Snap Inc. We do not receive or hold them, we operate no face database, and the App does not compare a face against anything outside the file you are editing or use it to establish anyone’s identity.
Apart from the on-device processing described above, we do not intentionally collect special categories of personal data (such as data revealing health, race or religion). Where you use the App on a child’s image, please also see section 15.
10. Who we share your personal data with
We do not sell your personal data and we do not share it for advertising. We share limited data only with the following:
Apple Inc. : for App distribution, Sign in with Apple, In-App Purchase and receipt validation. Payment data is processed by Apple in accordance with Apple’s Privacy Policy; we do not receive or store it.
Snap Inc. (Snap Camera Kit) : provides the AR Lenses. The Camera Kit SDK reports usage data (for example, which Lens is used) and diagnostics (crash and performance data) to Snap, and this reporting cannot be switched off while the Lenses are in use. We do not send your photos or videos, or the face measurements described in sections 3 and 9, to Snap. What is passed to the Lens on your device, so that it can draw the mask, is the position of each detected face in the frame and the number of faces detected. Lens assets are downloaded to your device from Snap’s servers. A record that you accepted Snap’s terms is kept. See Snap’s Privacy Policy at: https://snap.com/privacy/privacy-policy
Supabase (hosting, database and authentication): our backend is provided by Supabase, running on Amazon Web Services infrastructure. Our database, authentication data, automated backups and file storage are all located in a single region within the European Union: Frankfurt, Germany (AWS region eu-central-1). Supabase acts as our processor under a data processing agreement and holds only your account record (internal user identifier and email address), your subscription status and your free-plan export counter. No photos, videos or face data are held there.
Authorities and advisers : regulators, law enforcement, courts or our professional advisers, where necessary to comply with a legal obligation or to establish, exercise or defend legal claims.
A buyer or successor : if we sell, transfer or merge parts of our business, in which case the new owner may use your personal data as set out in this policy.
11. International transfers
As the controller, we are established in the Republic of Cyprus (EU). We aim to keep the limited data we do process within the EU/EEA.
Snap Inc. (US): transfers of the anonymous diagnostics/usage data described above are covered because Snap is certified under the EU–U.S. Data Privacy Framework, and a GDPR-compliant Data Processing Agreement and standard contractual clauses are available.
Apple: any transfers are governed by Apple’s own compliance mechanisms and privacy terms.
Hosting: your account, subscription and usage data are stored in the European Union (Frankfurt, Germany) and are not transferred outside the EU/EEA in the ordinary course of providing the App. Where our provider or its group companies outside the EEA may access that data for support or maintenance purposes, the access is governed by the provider’s data processing agreement and the EU standard contractual clauses (together with the UK Addendum for data relating to UK users).
12. Data security
Your projects and media are stored on your own device and are protected by your device’s security (such as
your passcode, Face ID/Touch ID and Apple’s data protection). The limited account, subscription and usage
data we hold is stored on our EU-hosted backend, is transmitted over encrypted connections and is
encrypted at rest, with automated backups kept in the same EU region. Access to the backend is restricted to
authorised personnel. Authentication is handled through Sign in with Apple, so we do not hold your
password. We have procedures to detect, respond to and, where legally required, notify you and the
relevant regulator of a personal data breach.
13. How long we keep your personal data
Account and subscription data: kept for as long as you have an account, and afterwards only as long as necessary to meet legal, tax or accounting requirements.
Free-plan usage data: the export counter is held against your account for as long as the account exists and is reset at the start of each free-plan window.
Account deletion: you can delete your account at any time using the delete-account button in the App. Doing so removes your account record together with your subscription record, your export counter and the Apple token linked to your account. Copies may remain in our provider’s encrypted automated backups for a short period until those backups expire in the ordinary retention cycle, after which they are overwritten. We keep only what we are required by law to keep (for example, for tax or accounting purposes, where that data is held by Apple as the seller of record).
Projects and media: stored on your device and kept until you delete them or delete the App; they are within your control.
Diagnostics and usage data: anonymous and retained by Snap in accordance with Snap’s policies.
14. Your legal rights
Under the GDPR (and UK Data Protection Act) you have the following rights in relation to your personal data:
• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct incomplete or inaccurate data.
• Erasure — ask us to delete your personal data; deleting your account removes it from our systems,
subject only to the short backup period described in section 13.
• Objection — object to processing based on our legitimate interests.
• Restriction — ask us to restrict processing in certain circumstances.
• Portability — ask us to transfer certain data to you or a third party in a machine-readable format.
• Withdraw consent — where we rely on consent, withdraw it at any time (this does not affect
processing before withdrawal).
• Complain — to us, or to a supervisory authority (see ‘Your right to complain’ above).
You can exercise any of these rights at any time by contacting us at info@hidee.app. Much of your data is on
your device and within your direct control; you can delete projects in the App, delete your account, or delete
the App entirely. We will not usually charge a fee, and we aim to respond within one month.
15. Children and children’s images
Hidee exists to help protect children’s privacy. The App is for use by adults (parents and guardians). We do not knowingly collect personal data from anyone under the age required to hold an Apple ID and use the App. Sign in with Apple helps confirm the account holder’s eligibility.
Where you use the App to mask a child’s face, the child’s image is processed only on your device and never leaves it. We do not receive, store or have any access to those images or to any facial data derived from them. If you believe a child has provided us with personal data, contact us at info@hidee.app and we will delete it.
16. Description of the data categories
Account Data: an internal user identifier, and the email or Apple private-relay address linked to your Apple ID. No name is stored.
Subscription Data: Apple product and transaction identifiers, current subscription period dates, and renewal, cancellation and refund status.
Usage Data (free plan): the number of exports used in the current free-plan window.
Diagnostics and Usage Data: anonymous crash, performance and product-interaction data collected via Snap Camera Kit.
Content Data: photos, videos and projects you create or edit, stored only on your device.
Mask catalogue: the list of masks offered in the App (Snap Lens identifiers, mask names, preview image filenames and whether a mask is a premium mask). This is static configuration data about the App and is not personal data about you.
Hidee Technology Ltd · HE 490226 · Dimitri Charalampous, 13, Office 4B, Agios Antonis, 3020 Limassol, Cyprus · info@hidee.app