Privacy policy

1. In short

Your photos stay on your phone. Face detection and masking run on the device, with no account and even offline. No photo, no face and no face position is sent to us or to any third-party service.

Third-party services communicate for what is strictly necessary: Google Play and RevenueCat for the Premium purchase, Google AdMob for the free version's ads (after your consent where it is required) and Firebase Crashlytics for crash reports.

2. Your photos

You choose photos with Android's photo picker: the app only receives the ones you select, never access to your whole gallery. Your original photo is never modified.

To find faces, the app uses Google ML Kit, which runs on your phone. It only computes where faces are: it does not recognise or identify anyone, and it remembers nothing.

Masks are merged into the pixels of a new copy of the photo, without the location data (GPS) or other metadata of the original. That copy is saved to your gallery or shared with the app you choose; from then on, you decide who receives it.

Temporary working copies are deleted by the app. No photo or face data is written to logs, and none is passed to the ad SDK, RevenueCat or Crashlytics.

Blurring and pixelation do not guarantee absolute anonymity: always check the result before sharing.

3. What the app keeps on your phone

Only your settings (theme, language, default effect and strength, the crash report choice) and, with Premium, your saved presets (effect, strength, pixel size, emoji, margin) are stored on your device. Presets contain no photo and no face.

This data is removed when you uninstall the app, or from “Settings > My data” (“Erase my settings and favorites”, “Erase everything”). Android's automatic backup is turned off for the app.

4. Internet access and permissions

The app asks for Internet access for the Premium purchase, advertising and crash reports; editing a photo remains possible offline. It uses neither the camera, nor the microphone, nor your contacts, nor your location. On Android 9 and earlier, saving to the gallery uses the system storage permission.

The app declares the advertising ID permission used by Google AdMob (see section 6).

5. The Premium purchase

Premium is a one-time purchase handled by Google Play and RevenueCat. There is no account: RevenueCat uses a pseudonymous ID generated by its SDK and your purchase status, to recognise the purchase and restore it (“Restore my purchases”). We never receive your payment method or banking identity.

6. Advertising in the free version

The free version may show ads provided by Google AdMob. They do not appear with Premium. Where consent is required, it is collected through Google's form (UMP) before any ad.

To show and measure ads, Google AdMob may process, depending on your choices, an advertising ID, your IP address and information about your device and your interaction with the ad. Blur Go sends AdMob no photo, no detected face and no position. See Google's advertising policy.

You can reopen your choices at any time in “Settings > Ad preferences” where this option is offered.

7. Crash reports

If the “Crash reports” option is on (it is by default, and you can turn it off at any time in Settings), Firebase Crashlytics receives an anonymous technical report if the app crashes: device model, Android version, app state, installation ID and the error trace. Never your photos.

8. Updates and reviews

The app may check for an update and offer to rate it using Google Play features. They are handled by Google Play.

9. What we do not collect

We collect neither your name, nor your e-mail, nor your location, nor your contacts, and we never receive your photos or the faces they contain. We use no audience measurement tool.

10. Why this processing takes place

To provide the service you ask for (editing, Premium purchase), for our legitimate interest in fixing crashes, and, for advertising, on the basis of your consent where it is required. We do not sell your data.

11. How long we keep it

On your phone: photos are not kept by the app; settings and presets are kept until you erase them or uninstall the app. With us: we keep no personal data about you. Purchase, advertising and crashes: under the rules of Google Play, RevenueCat, Google AdMob and Firebase.

12. Your rights

Your photos do not leave your phone: you control them directly. You can erase your settings, withdraw your advertising consent (section 6), turn crash reports off (section 7), or uninstall the app.

For processing carried out by Google, RevenueCat or Firebase, you can exercise your rights with them. For any question, write to us at [email protected]. You may also contact the data protection authority of your country.

13. Transfers outside the European Union

Google, RevenueCat and Firebase may process data outside the European Union, in particular in the United States, with the safeguards provided by the GDPR (standard contractual clauses or an equivalent mechanism).

14. Children

The app is not directed to children under 13.

15. Changes

We will post any material change to this policy here, with its update date.