Privacy policy

Who is responsible

DanceFramer is made by Gilles Bonné, based in the Netherlands. For any question about this policy or your data, contact contact@danceframer.com.

Your videos and Photos library

• You choose videos with the system Photos picker. DanceFramer receives the clips you pick, not access to the rest of your library.
• All video processing happens on your device. DanceFramer does not upload your videos, images from them or file names to us or to the analytics provider.
• Finished videos are saved back to your Photos library. DanceFramer asks for permission to add to Photos; this permission does not let the app read your library.

You can manage Photos permissions in your device settings. Videos you save remain in your Photos library until you delete them. If you use iCloud Photos, Apple may sync your library according to your own settings.

Usage analytics

To understand how the app is used and where it fails, DanceFramer sends pseudonymous usage statistics through TelemetryDeck, a third-party analytics service provided by TelemetryDeck GmbH in Germany. Here, pseudonymous means that events are associated with a coded identifier rather than your name or contact details.

Analytics is enabled by default in the iOS App Store build. The app currently has no in-app switch to turn it off. Apple’s setting for sharing diagnostics with app developers does not control TelemetryDeck analytics.

What is sent

• App and device information: app version and build number; device model; operating system and version; locale, region, app and preferred language; whether the build is debug, simulator, TestFlight or App Store; and analytics SDK name and version.
• Accessibility settings: text size, reduced motion, bold text, inverted colours, darker system colours, reduced transparency and whether differentiate-without-colour is enabled.
• Sessions and timing: session starts; the year and month of first use (such as 2026-10) on each event; session count, average and previous session length, distinct days used and distinct days used in the previous month; a coded user identifier, random session identifier, event timestamp and test-mode flag. The SDK’s one-time new-install event also includes the exact first-use date.
• Imports: video resolution, frame rate and length in broad ranges; portrait or landscape orientation; SDR or HDR; video format, such as HEVC; and whether an import failed.
• Analysis: the largest number of people detected in a single frame (an integer count), approximately how long analysis took, whether the phone appeared to move while filming (still, moved or inconclusive; measured on your device, only this result is sent), and a technical error code if analysis failed. Images and information identifying those people are not sent.
• Exports: selected editor settings and whether each was changed, including aspect ratio, framing, camera movement and effects; slider values rounded to one decimal place; whether the clip was trimmed or the following range narrowed; export length in broad ranges; intro and outro effects; and framing-position settings when advanced positioning is enabled.
• Export outcomes and performance: whether an export has a watermark or uses a monthly quota; whether it completed, was cancelled or failed; a general failure reason and technical error code; and how fast rendering ran relative to the clip’s length, as a broad range.
• Plans and purchases: the plan tier (unknown, free, Casual or Pro) on every event; when the plans screen is shown and where it was opened from; the App Store product identifier for a purchase; and whether the purchase completed, was cancelled, is pending or failed, including a general reason or technical error code where applicable.

What is not sent in analytics

Video content, frames, thumbnails, file names, Photos identifiers, video location metadata, your name, email address, Apple Account, purchase receipts and transaction IDs are not included in analytics events.

The app does not send your precise location. It sends your region, and TelemetryDeck states that it collects location information at country level. Error reports contain a technical error domain and code, not the full error message or other free text.

Time zone, screen size and scale, device orientation, CPU architecture, colour scheme, layout direction and calendar fields (day, week, month, quarter and hour) are overwritten with empty values before analytics is sent. The SDK still includes the field names, but not values for them. Event timestamps and the first-use information described above are retained.

Your IP address is necessarily seen by TelemetryDeck’s servers when a network request arrives. TelemetryDeck states that it does not store IP addresses in its analytics database or server logs.

How identifiers are protected

On iOS, the SDK uses Apple’s identifier for vendor, an identifier associated with the device and apps from the same developer. The SDK hashes it on your device using SHA-256 with a fixed app-specific value, called a salt. That value is included in the app and is not a secret. TelemetryDeck states that it adds its own salt and hashes the identifier again on its servers.

The resulting coded identifier allows events and sessions to be grouped into a usage history. We do not receive your name, email address or Apple Account through analytics, and we do not link the history to those details. We do not promise that hashing alone makes the data legally anonymous.

The underlying vendor identifier can change when all apps from the same developer have been removed from the device, or when moving to a new device. Deleting and reinstalling DanceFramer alone is not guaranteed to change it if another app from the same developer remains installed. The identifier is not synced by DanceFramer across your devices.

Why we use analytics

Our legal basis for collecting and processing usage statistics is legitimate interests under Article 6(1)(f) GDPR: finding and fixing failures, improving performance across devices and video formats, and understanding which features people use. We do not sell the statistics, use them for advertising, or combine them with data from other apps or websites.

You can contact contact@danceframer.com to object to this processing on grounds relating to your particular situation. See Your rights for the current limitations on identifying stored events and stopping collection. Deleting the app stops future transmissions from that installation; it does not erase previously collected events.

For the App Store privacy label, DanceFramer declares Device ID, Product Interaction, Purchase History, Performance Data and Other Diagnostic Data, with Analytics as the purpose, linked to your identity through the coded identifier described above, and not used for tracking. “Tracking” here refers to Apple’s definition, including linking data with other companies’ data for advertising or sharing it with data brokers. The coded identifier still lets analytics events be grouped over time as explained above.

Storage

TelemetryDeck states that usage data is stored in the European Union, using Hetzner in Germany, Microsoft Azure in Amsterdam and Amazon AWS in Frankfurt. TelemetryDeck has announced a move away from Azure and AWS during 2026. Microsoft and Amazon are US companies; EU storage is not a guarantee that data can never be accessed from outside the EEA.

TelemetryDeck’s published FAQ says that a plan’s retention window controls how long events can be queried, not when they are deleted. Older events remain in cold storage. Its privacy FAQ currently gives no guaranteed schedule for deleting those events; it estimates 7–10 years without guaranteeing deletion then.

TelemetryDeck says it also keeps analytics data after a publisher closes its account. We cannot enforce a deletion period for these archived events.

TelemetryDeck’s supplemental data protection agreement forms part of its Terms of Service dated 6 March 2026. It states that, from TelemetryDeck’s perspective, its service processes no personal data and does not act as a processor under Article 28 GDPR. It separately places responsibility for lawful collection and preprocessing inside the app on the app publisher.

Further details are available in TelemetryDeck’s privacy FAQ and its explanation of identifier anonymization.

Subscriptions

Subscriptions are sold and processed by Apple through the App Store. We do not receive your payment details, name or Apple Account. DanceFramer uses Apple’s StoreKit on your device to check your subscription entitlement. Analytics includes the plan tier, product identifier and purchase outcome, but not receipts, transaction IDs, prices or purchase dates.

Apple’s privacy policy applies to Apple’s handling of purchases. You can manage or cancel subscriptions in your Apple Account settings.

Video quota

To keep track of which videos have used the Casual plan’s quota, the app stores a SHA-256 code derived from each counted video, together with the date it was counted. The code is computed from selected samples of the video data and properties such as file size, duration, dimensions and creation date. It is not a copy of the video and cannot reconstruct its content.

These records are stored in your iCloud Keychain so the quota can be shared across your devices and survive a reinstall. They are not sent to us or TelemetryDeck. Apple manages iCloud Keychain according to your device settings and its privacy policy.

The app automatically removes quota records older than 60 days.

Other storage on your device

DanceFramer makes temporary video copies for processing; these are removed when a video is closed, and leftover temporary media is cleaned up when the app next launches.

TelemetryDeck keeps local session history for approximately 90 days. Unsent analytics events can be held in memory and in a cache on your device, with a limit of 10,000 events. The SDK retries sending them when possible.

Crash reports

If you have chosen to share analytics with app developers, Apple may make crash reports and performance diagnostics available to us. We use them to investigate failures and improve reliability.

This sharing is controlled by Apple. You can change it in Settings → Privacy & Security → Analytics & Improvements. Apple’s privacy policy governs its collection and sharing of these diagnostics.

DanceFramer does not include a separate crash-reporting service. Its TelemetryDeck analytics does include analysis timing, rendering performance and failure codes, as described above; those events are separate from Apple’s diagnostic sharing.

Email correspondence

If you email us, we receive your email address and any information you include. We use this information to respond to your request and resolve support or privacy questions. Please do not send videos or sensitive information unless it is necessary for your request.

Support emails are deleted within two years after the conversation ends. Our legal basis for handling ordinary support correspondence is our legitimate interest in helping users; where a legal obligation requires a response, we process the information to meet that obligation.

Children

DanceFramer is not directed at children under 13. If you believe a child has provided personal information to us, please contact us so we can address it.

Your rights

Where we process personal data about you, the GDPR may give you rights to access, correct or delete it, restrict processing, request data portability, and object to processing based on legitimate interests, subject to the conditions in the law.

The app does not show you the coded analytics identifier, and we do not have a reliable way to locate your past analytics events from an email request. We currently have no supported way to delete those stored events through TelemetryDeck.

You can send an objection to analytics processing to contact@danceframer.com. We will respond and explain these limitations. An email cannot remotely stop analytics on your device, and the app currently has no analytics switch. The available way to stop future transmissions is to delete the app, as explained below.

Deleting DanceFramer from your device stops future analytics transmissions from that installation. It does not delete events already stored by TelemetryDeck. Removing the app also does not necessarily reset Apple’s vendor identifier if other apps from the same developer remain installed. To stop transmissions from all your devices, remove DanceFramer from each device.

For questions or requests, email contact@danceframer.com. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or your local supervisory authority.

Changes to this policy

If this policy changes, the new version will be published on this page with an updated date. Significant changes will also be mentioned in the App Store release notes.