Blur, Watermark & Metadata / Privacy

Your images stay yours.

This policy explains how Veil handles a photo you choose, the copy you create, and information needed to operate the app.

Controller: Maksym Bilyi
Poland
Effective date: 2026-10-28
Privacy contact: veil.app.support@proton.me

Photos and editing

You choose a photo through Apple’s system photo picker. Veil does not request broad photo-library read access. A selected iCloud Photos item may be downloaded by the system. Face, plate and document suggestions, image editing, metadata handling and watermark rendering run on your iPhone. Recognition text is used for the current detection and is not saved or uploaded by Veil.

Veil creates a new JPEG copy when you save or share; it does not alter your original. Save to Photos requests add-only permission when you choose that action. Sharing and Photos handle the copy you send according to their own services and privacy terms.

Metadata is your choice

Keep metadata is selected by default for a new photo. Keep carries supported source fields, including location when available. Remove metadata omits supported source location, capture date and time, camera/device details, descriptive metadata, comments and embedded previews from the new copy.

Veil re-encodes the edited pixels as JPEG. It rebuilds orientation, dimensions and color information, so exact source-tag preservation is not possible. Original previews, auxiliary images, opaque application data and unsupported fields may be excluded. Photos and receiving apps may add their own dates or identifiers. The choice applies to new saved, shared and gallery copies and their thumbnails. It does not rewrite originals, older saved copies or copies already sent. Older gallery entries without a saved policy use Remove. Operational gallery dates and identifiers are separate from metadata embedded in the photo.

If Veil cannot create a copy that follows your selected policy, it reports an error instead of changing the choice or exporting the original.

Watermark text

Custom watermark wording and settings stay in the current editing session and its Undo history. Veil does not save the wording as a reusable template or send it to a watermark service. When you save or share, the visible mark becomes part of the image pixels and thumbnail. A recipient may crop or alter it; a watermark does not prove authenticity. Avoid putting sensitive information in watermark text.

Private Gallery and export count

Save to Veil stores the processed image, a thumbnail and limited operational details in protected local app storage excluded from device backup. Your gallery remains until you delete it or remove Veil. Temporary files used for Share are cleaned after sharing closes or at a later app launch; app termination may interrupt cleanup.

Two successful Save or Share outputs are included without a Veil account. A device-only, nonsynchronizing Keychain record stores its format version and completed-operation count only—not a photo ID, image fingerprint, recognized text, watermark wording or account ID. It is protected while the iPhone is locked and excluded from migration and backup. Keychain data may survive app removal, so reinstall survival is not guaranteed. Deleting gallery history does not reset the count.

Veil Pro offers unlimited protected photo exports through monthly and yearly Apple subscriptions with the same export entitlement. Apple processes payment and provides verified subscription status; Veil does not receive card details or send purchase records to a Veil billing server. A three-day introductory offer is shown only when available and Apple confirms eligibility. Apple manages renewal, cancellation and restoration.

Accounts and cloud sync

Veil account sign-in and cloud sync are not configured in this release. Your editing and local gallery work without an account.

Website hosting

This website uses Cloudflare Pages. Cloudflare may process your IP address and request details such as the requested page, timestamp and browser/device headers to deliver and protect the site. The site files contain no analytics scripts, forms or third-party embeds. Hosting and international processing: Cloudflare operates a global network. Website request information may be processed outside Poland and the European Economic Area. Cloudflare’s applicable service, privacy and data-processing terms describe its processing and international-transfer safeguards. No EU-only hosting is promised. Website request information: The static website files contain no custom visitor logging code. Cloudflare may retain operational and security information under its applicable policies. We do not specify a fixed retention period for records controlled by Cloudflare.

Support correspondence and processing purposes

If you email support or the privacy contact, your email provider and the provider of our dedicated mailbox process the sender address, message and any attachments to deliver and store correspondence. We use that information to respond and resolve your request. Do not send photos, identity documents, payment-card details, passwords or authentication tokens for routine support. Email is not part of the app’s photo-processing pipeline.

Where the GDPR applies, responding to requests about the app may be necessary to perform a contract or take steps you request before entering one. Handling privacy requests and required records may be necessary to comply with legal obligations. Delivering and securing this website, preventing abuse and handling other enquiries may rely on legitimate interests in operating and supporting the service. These purposes do not authorize access to photos held only on your iPhone.

Diagnostics and advertising

This release includes no Veil advertising, analytics or tracking service. Apple platform diagnostics are controlled by your device settings. Account or cloud processing applies only when configured; this policy describes the services in use.

Your rights and contact

Maksym Bilyi is based in Poland. Where the GDPR applies, you may request access, correction, erasure, restriction or portability of personal data, or object to processing where applicable. You may complain to Poland’s Personal Data Protection Office (UODO) or another competent supervisory authority. To ask a privacy question or submit a request, contact veil.app.support@proton.me. Request handling and retention: Email the privacy contact. We respond without undue delay and normally within one month. If a lawful extension is needed, we explain it within that month. We request only information reasonably needed to identify the request. We cannot retrieve photos retained solely on your iPhone.

Local gallery files are removed through the app’s history controls or by removing Veil. The device-only Keychain export count may survive app removal. Support correspondence and any required records follow these retention criteria: Support correspondence is retained only as needed to resolve the request, handle necessary follow-up, and meet applicable legal duties or establish, exercise or defend legal claims. Unnecessary correspondence is reviewed and deleted. Provider-held technical records and backups follow the applicable provider policies; no fixed retention period is promised for records outside our control.

Limits of protection

Automatic detection can miss identifying details or include unrelated content. Blur and pixelation do not guarantee anonymity. Inspect every copy before sharing; use solid Redact with enough coverage for sensitive details.