ToneFit App Privacy Policy

How the ToneFit iPhone app handles your photos and data — the short version is that it never sends them anywhere.

ToneFit runs on your device. It has no servers of its own, collects nothing that identifies you, and there is no account to create or sign in to. It goes online only for App Store purchases and, unless you turn it off, to send a few anonymous usage counts.

What we collect

Nothing that identifies you. ToneFit contains no advertising and no tracking code, and we do not collect your name, email, location, contacts, or device identifiers. Unless you turn it off in Settings, the app sends a few anonymous counts — such as "a scan was completed", "the unlock screen was shown", or "a purchase succeeded" — with the app version. Every copy of the app reports under the same shared label, so these counts cannot be tied to you, your device, or each other across sessions. Purchases are processed entirely by Apple: we never see your payment details.

How your photos are handled

Wrist and face photos are decoded into memory, analyzed on your device, and released as soon as the analysis finishes. They are never written to disk, never added to your photo library, and never uploaded. Leaving the scan screen discards them immediately.

What is stored on your device

Only structured results: your skin tone conclusion (undertone, hue, value, confidence, timestamp), clothing match records (color hex, match level, reason), saved colors, and comparison records. All of it lives in the app's private sandbox and is removed when you delete the app.

Permissions

Camera — to photograph your wrist, face, and clothing for on-device analysis. Photo library (read) — only when you pick a clothing photo yourself. Photo library (add) — only when you save a palette card you exported. Notifications — only if you turn on reminders: a weekly color from your palette, a re-scan reminder, and a wardrobe tip. They are scheduled on your device and never involve a server. Declining a permission never breaks the app; the affected feature simply explains what it needs.

Third parties

ToneFit bundles no third-party SDKs and shows no ads. Two outside parties are involved. Apple processes App Store purchases and tells the app whether this Apple Account owns the unlock. TelemetryDeck (TelemetryDeck GmbH, Germany) receives the anonymous usage counts described above and does not store IP addresses. Nothing else you do in the app is shared with anyone.

When the app uses the network

For the purchase: buying the full unlock, restoring a previous purchase, and one check at first launch to see whether this Apple Account already owns it. For anonymous usage counts, unless you turn them off in Settings. The scan, the analysis, your palette, and wardrobe matching all run with no network at all and keep working in airplane mode once the unlock has been recorded on your device. No photo, measurement, color, or result is ever sent anywhere.

Your control

Settings lets you export everything as a JSON file you keep, and permanently clear all data after a confirmation. Deleting the app removes anything left along with it.

Children and contact

ToneFit is not directed at children under 13 and collects no personal data from anyone. If you have questions about this policy, get in touch:

[email protected]