Privacy Policy · Frost

Effective Date: October 22, 2026

Thank you for using Frost ("we," "us," or "our"). This Privacy Policy explains how your data is handled when you use Frost on iPhone, iPad, and Mac.

The short version: we collect nothing. Frost has no server, no account, and no analytics. Your photos never leave your device unless you share them yourself.

1. Data Collection and Processing

• No Account Required: You never create an account, sign in, or give us an email address to use Frost.
• Everything Happens on Your Device: Finding faces, people, text, and codes, hiding them, and removing the details stored in a photo are all done on your iPhone, iPad, or Mac. Frost does not send your photos, or anything about them, to us or to anyone else.
• No Tracking or Analytics: Frost contains no analytics tools, no advertising, no crash reporting of our own, and no third party code of any kind.

2. Your Photos

• Nothing Is Kept: Frost has no photo library of its own. A photo you open is held only while you work on it, and any temporary copy is deleted when you close it.
• Your Original Is Never Changed: Frost writes a separate clean copy. Where that copy goes is your choice: the share sheet, your photo library, the clipboard, or a folder on your Mac.
• Details Stored in a Photo: Frost reads the location, device, date, and other details stored inside a photo so it can show them to you and remove them. That information is read on your device and is never transmitted.

3. Face Data

• What Frost Uses: To hide faces, Frost uses Apple's Vision framework on your device to find where faces are in the photo you open. The only result is the position and size of a rectangle around each face. Frost does not identify or recognize anyone, does not compare faces, and does not create face prints, facial geometry, or any other biometric data. Frost does not use Face ID or the TrueDepth camera.
• How It Is Used: Those rectangles are used only to place the blur, pixelation, or solid cover over each face, and to help find the people in the photo, so you can hide them before you share it.
• Storage and Retention: Face rectangles are held only in your device's memory while the photo is open in Frost. They are never written to disk, never saved with your settings, and never added to the copy you share. They are discarded as soon as you close the photo or quit Frost.
• Sharing: Face data never leaves your device. Frost has no server, and face data is not sent to us, to Apple, or to any third party.
• Deletion: Because face data is discarded automatically when you close the photo, there is nothing stored for you to delete.

4. Permissions

Frost asks only for what a feature needs, and only when you use that feature:

• Photos: You pick photos with the system photo picker, so Frost sees only the photos you choose. If you save a clean copy to your library, Frost asks for permission to add photos.
• Camera: On iPhone and iPad you can take a photo to clean. The camera is used only while you are taking that photo.
• Files on Mac: Frost can read only the files you open or drop on its window, and write only where you choose to save.

5. In-App Purchases and Subscriptions

Frost Pro purchases and subscriptions are handled entirely by Apple through the App Store. We do not receive or store your name, payment card, or billing address. Apple may give us combined sales and usage figures that do not identify you, according to your device settings and Apple's own privacy policy.

6. Settings

Your preferences, such as the style used to hide faces, are saved on your device. Deleting Frost removes them.

7. Children’s Privacy

Frost does not collect personal data from anyone, including children under the age of 13.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated effective date.

9. Contact Us

If you have questions about Frost or this Privacy Policy, please get in touch. If you write to us through this form, we receive the name, email address, and message you enter, and use them only to reply.