Privacy Policy

Effective October 31, 2026

Your face belongs to you. Your paintings stay in your sketchbook.

Popmask is developed by Tomás Ruiz López. This policy covers the Popmask app and this website. For questions or privacy requests, contact truizlop@gmail.com.

Camera and face tracking (ARKit and TrueDepth)

With camera permission, Popmask uses Apple’s ARKit face tracking, including TrueDepth capabilities on supported devices. The app accesses live camera images, a three-dimensional face mesh that changes with your expressions, the face’s position and orientation, and tracking status. This information is used only to place your painting on your face, keep it aligned as you move or change expression, and show whether the live mirror can track your face.

Camera images and face-tracking data are processed on your device. Face geometry, position, orientation and tracking status are held transiently in memory for the mirror session and its rendering objects; they are not written to files, included as tracking data in recordings, or saved with your paintings. In-memory tracking state is released when those objects are released. Camera processing pauses when you leave the mirror or the app becomes inactive. Camera imagery is saved only when you choose to record a video, as explained below.

Popmask does not use face data to identify you, create a biometric profile, infer personal characteristics, train models, or provide advertising or analytics. We do not sell face data or automatically upload camera images or face-tracking data to us, Google Firebase, RevenueCat, advertisers or any other third party. User-directed exports of recorded videos are described below. There are no other planned uses of face data.

The illustrated face guides are app artwork. Saved paintings contain your drawing, sticker placements and the chosen illustrated guide, not a scan of your face.

Recordings and permissions

When you choose Record, Popmask creates a temporary MP4 video in the app’s private storage on your device. The video contains camera imagery with your painting applied, so your face may be visible, but it does not contain the face mesh or other face-tracking data. The microphone is used only with permission when you choose to include sound. Photos access is requested when you choose to save a finished video.

Saving or sharing a recording is your choice. Copies you save to Photos may sync through your own iCloud settings; a destination you select in the share sheet receives the video and handles it under its own policy. Popmask does not automatically upload recordings.

Popmask attempts to delete the temporary video when you discard it or close its preview after saving or sharing. If the app or recording is interrupted, or deletion fails, temporary recording files may remain until the operating system cleans them up or you delete the app. There is no guaranteed cleanup deadline. Copies saved to Photos, shared destinations or backups remain under your control and must be deleted there separately.

You can revoke Camera, Microphone and Photos permissions in your device’s Settings. Painting does not require camera or microphone access. The app does not keep a server-side copy of face-tracking data or recordings that we could retrieve or delete for you.

Your local sketchbook

Paintings, previews, preferences and sticker placements are stored locally. Your device backups may include them. Delete a painting in the sketchbook to remove its local file. Removing the app removes its local sketchbook; it does not remove exported copies or existing backups. Popmask does not operate a cloud artwork account.

Optional purchases

Apple processes sticker-pack payments. We do not receive your payment-card details. Popmask uses RevenueCat to retrieve products, validate transactions, restore purchases and determine which permanent sticker packs you own.

RevenueCat processes an automatically generated anonymous app-user identifier, purchase and transaction history, product identifiers, ownership status, and app/device information needed to provide the purchase service, such as app and OS versions and storefront locale or currency. We do not provide your name, email, a custom identifiable account ID, an advertising identifier, your paintings or your face data.

Purchase information is used for app functionality, purchase restoration, fraud prevention, support, and purchase analytics in RevenueCat’s dashboard. It is not used by Popmask for advertising or tracking across other companies’ apps and websites. See RevenueCat’s privacy policy and Apple’s privacy policy.

App analytics and crash diagnostics

Starting with version 1.1, Popmask uses Google Analytics for Firebase and Firebase Crashlytics to understand use of the app and find reliability problems. Analytics receives app-instance identifiers, app and operating-system versions, device information, session and engagement events, purchase events, and coarse geographic information derived from the network connection. Popmask also records fixed events for opening the studio, creating a painting and opening a saved painting. These events contain no painting names, drawing contents, sticker placements or face data.

Crashlytics receives crash stack traces, app and device state, installation and session identifiers, diagnostic information and Analytics breadcrumbs showing app actions before a crash. This information can be associated with the same app installation. We do not set a personal user ID or send your name, email address, artwork, camera frames, face geometry, tracking status, recordings or microphone audio to Firebase.

Popmask has no ads. Advertising-ID support, vendor-ID collection and ad-personalization signals are disabled in the Firebase integration. We do not use this data to track you across other companies’ apps or websites, and we do not sell personal information. Google processes analytics and diagnostics to provide these services; see Firebase’s privacy and security information and Google’s privacy policy. Apple may separately provide diagnostics or aggregate App Store reports according to your device and Apple Account settings.

Analytics and diagnostic records are retained according to the configured service retention periods and provider policies; uninstalling Popmask does not immediately delete records already sent. Contact us for privacy questions or deletion requests. We may be unable to locate an individual installation’s records because Popmask has no user account and does not collect your contact details through analytics.

Support and retention

If you email us, we receive your email address and the information you choose to send. We use it to respond and resolve your request, and retain it as needed for that purpose and applicable obligations. Please do not send face recordings unless you choose to and they are necessary for your request.

Purchase records are retained as needed to verify permanent ownership, restore access, prevent fraud and meet legal obligations. Deleting the app does not erase records held by Apple or RevenueCat and does not refund a purchase. We cannot retrieve or delete artwork that exists only on your device.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of information we can associate with you, or request a portable copy. Contact us to exercise these rights or raise a concern. We may need limited transaction information to locate an anonymous purchase record; never send your Apple Account password. You may also complain to your local data-protection authority.

Where applicable, purchase processing supports the performance of your purchase and our legitimate interests in reliable service and fraud prevention; support communications serve our legitimate interest in responding to you. App analytics and crash diagnostics support our legitimate interests in understanding app use and improving reliability, subject to applicable law and your rights. Camera and microphone access depends on your permission. Providers may process information in other countries under their applicable privacy terms and safeguards.

Children and families

Popmask does not ask for a name, age or account. Apple’s purchase controls apply to optional sticker packs. A parent or guardian can contact us about information a child has sent through support. Please ask permission before recording or sharing someone else’s face.

This website

This site has no advertising, added analytics scripts, tracking pixels or embedded third-party media. Fonts and images are hosted with the site. GitHub Pages may process ordinary connection and security information, including IP addresses, to serve and protect the website. See GitHub’s privacy statement. External links have their own policies.

Changes

We may update this policy when the app or its services change. The effective date above identifies this version. Material changes will be reflected here and, where appropriate, in the app.