Privacy Policy

Effective 23 October 2026 · Applies to the Goodside iOS app and the Goodside website

1. Who we are

Goodside is an iOS camera app developed and operated by Max Li, a sole trader based in New South Wales, Australia ("Goodside", "we", "us"). Goodside puts you in control of how you are photographed: you set your framing once, and the app coaches whoever is holding your phone toward it.

For anything in this policy, contact us at app.goodside@gmail.com.

2. What happens on your device (and stays there)

The live camera

When you use the camera, Goodside analyses the live frames on your iPhone to detect where a face sits in the frame and to read the phone's angle. This processing happens in memory, on your device, using Apple's built-in Vision and CoreMotion frameworks. Live frames are never stored, and never transmitted anywhere. A photo is saved only when the shutter is tapped, and it is saved to your own photo library.

Reference photos

If you build a Style Profile from a photo, you choose that photo through Apple's photo picker. Goodside keeps a copy inside its own storage on your device and reads its composition on your device, using Apple's Vision framework, to suggest where the two framing anchors should sit. No part of that analysis involves a server, a cloud model or any third party. Reference photos are never uploaded, transmitted or shared. You can delete them at any time in Settings, under "Clear my data", or by deleting the app.

Your photo library

With your permission, Goodside reads your photo library in two places: the picker you use to choose a reference photo, and the grid of recent shots on the Home screen and in the in-app gallery. Those photos are displayed on your device and nothing more. They are never copied off it. Photos you take with Goodside are written to your own photo library, into a Goodside album. You can decline photo library access and still use the app's shot types.

Your settings and profiles

Your shot preferences, Style Profiles, saved framings and app settings are stored locally on your iPhone. They are not synced to any server, because there is no server.

Notifications

Notifications are optional, and all of them are scheduled locally on your device. Nothing is sent to us or through any push service to deliver them, and we cannot see whether you received or opened one.

• Tip of the Day, if you allow notifications, arrives three mornings a week (Tuesday, Thursday and Saturday). The content is a fixed list of photography tips shipped inside the app. You can switch this off in Settings.

3. What leaves your phone: purchases

Goodside is sold through Apple's App Store. When you start a trial, subscribe or buy the lifetime unlock, two parties process data so the purchase works:

• Apple processes your payment. We never see your payment details, name or Apple Account. Apple's handling of this data is described in Apple's Privacy Policy.
• RevenueCat is the service we use to check whether a purchase or trial is active. The app sends RevenueCat a randomly generated anonymous identifier (not your name, email or Apple ID), your purchase and subscription status from Apple, and basic device information such as device model, iOS version and locale. RevenueCat receives your IP address as a technical part of handling those requests. RevenueCat acts as our processor and does not use this data for its own purposes. See the RevenueCat Privacy Policy.

No photo, camera frame, reference photo or coaching data is ever included in purchase processing.

4. What leaves your phone: anonymous usage

To find out where the app is confusing and what to improve, Goodside sends anonymous usage events to PostHog, a product analytics service. Each event records an action in the app, never its content:

• which onboarding screens were reached, and the answers chosen on its multiple-choice questions (for example, which shot types you take most);
• whether camera and notification access were allowed;
• paywall interactions: which plan was selected, whether a purchase was started, completed, cancelled or failed (and, if it failed, Apple's or RevenueCat's error message and code), whether the paywall was closed, and which locked feature opened it, plus, for the one-time offer that can follow the paywall during setup, what raised it, the saving it showed and whether you were eligible for its free trial;
• which shot type, library framing or kind of Style Profile is used for coaching, and whether a saved photo was taken with coaching on;
• whether creating a Style Profile was started, a photo was chosen and the profile was saved, and whether the framing library was opened;
• whether the small reference photo on the camera screen was tapped to make it bigger or smaller, whether "Shoot again" was used, and which camera aids (grid, level indicators, reference photo, haptics) were switched on or off in Settings.

Each event also carries the same anonymous identifier described in section 3, the app version, basic device information (device model, iOS version and the region setting of your iPhone), and a timestamp. The identifier lets us connect usage to whether a trial started, which is how we learn what helps. It is not your name, email or Apple ID, and we have no way to link it to you.

Usage events never include photos, camera frames, reference photos, the content of your library, the names you give Style Profiles, or anything you type. Screen recording is switched off. IP addresses are not stored, and are not used to locate you. PostHog acts as our processor. See the PostHog Privacy Policy.

5. What leaves your phone: crash reports

When the app crashes, freezes or is closed by iOS for using too much memory, Goodside sends a crash report to Sentry, an error monitoring service, so we can find and fix the cause. A crash report contains the technical record of what the app's code was doing at that moment (which functions were running), the app version, basic device information (device model, iOS version, language and region settings, free memory) and a timestamp, plus a random identifier that Sentry creates for this installation of the app.

Crash reports never include photos, camera frames, reference photos, screenshots, the layout of the screen, screen recordings, the names you give Style Profiles, or anything you type. Each of these is switched off in the app's code. IP addresses are not stored, and are not used to locate you. Sentry acts as our processor. See the Sentry Privacy Policy.

6. What leaves your phone: feedback you send

Settings has a "Send feedback" screen where you can write to us. Nothing is sent unless you type a message and tap Send. When you do, the app sends the message, the app version, the iOS version and your iPhone model. It is stored in a private database run for us by Cloudflare, and only we can read it. It is never shown to other users and never published.

The sender's IP address is not stored, and no identifier is sent with the message, so it cannot be traced back to you. Because of that we cannot reply to it; for help, email us instead. Don't include anything in a message you would not want us to read. Cloudflare acts as our processor. See the Cloudflare Privacy Policy.

That is the complete list. Goodside makes no other network connections: there is no content server and no remote model.

7. What we do not do

• No user accounts. You never give us your name or email to use the app.
• No advertising SDKs and no tracking across other companies' apps or websites.
• No advertising, and no advertising identifiers.
• No sale or sharing of personal information, to anyone, ever.

8. The website

This website is a static site and sets no cookies. It uses Cloudflare Web Analytics to count visits to each page. Cloudflare's analytics does not use cookies or fingerprinting and does not follow you across other websites; it reports page views, referring sites and broad device and country totals to us in aggregate, as described in Cloudflare's Privacy Policy. Fonts are loaded from Google Fonts, which means your browser requests font files from Google and Google receives your IP address as part of serving them, as described in Google's Privacy Policy.

9. Data retention and deletion

• Photos, reference photos, profiles and settings live only on your iPhone. Delete them in the app (Settings, then "Clear my data") or by deleting the app. We hold no copy, so there is nothing for us to delete on a server.
• Anonymous usage events are kept by PostHog for up to 12 months and then deleted automatically. Because they are not linked to your identity, we cannot pick out yours on request, but deleting the app ends their collection.
• Crash reports are kept by Sentry for up to 90 days and then deleted automatically. Like usage events, they are not linked to your identity.
• Feedback messages are kept until we have dealt with them, and for no more than 2 years. To have a message deleted sooner, email us and tell us roughly what you wrote and when.
• Purchase records are retained by Apple and RevenueCat for as long as needed to operate your subscription and meet their legal obligations. You can manage your subscription in your Apple Account settings.

10. Your rights

Because almost everything stays on your device, you already hold and control your own data. Where privacy law gives you rights over the limited purchase and usage data described above, we honour them.

Australia

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You may ask us what information we hold about you, ask for it to be corrected, or complain about our handling of it by emailing us. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

European Union and United Kingdom

Where the GDPR or UK GDPR applies, the legal bases for the processing described in this policy are: performance of a contract (checking your purchase entitlement so the app you paid for works), our legitimate interest in operating a reliable purchase system, our legitimate interest in reading and answering feedback you choose to send, and our legitimate interest in understanding, through anonymous usage events, how the app is used so we can improve it. On-device processing of your photos never reaches us, so we are not a controller of it. You have rights of access, rectification, erasure, restriction, portability and objection over the personal data we are responsible for, and the right to complain to your local supervisory authority. Contact us to exercise any of these.

California

We do not sell or share personal information as defined by the CCPA/CPRA, and we collect no sensitive personal information. You have the right to know what we collect (this policy is the complete list), to request deletion, and to not be discriminated against for exercising your rights. Contact us to make a request.

11. International transfers

RevenueCat is based in the United States, so the anonymous purchase data described in section 3 is processed there. PostHog stores the anonymous usage events described in section 4, and Sentry the crash reports described in section 5, in the United States. Cloudflare, which stores the feedback described in section 6, is also based in the United States. All four commit to appropriate safeguards for international transfers in their privacy documentation.

12. Children

Goodside is not directed at children and we do not knowingly collect personal information from children. The app collects no identity data at all.

13. Changes to this policy

If we change this policy, we will update this page and its effective date. If a change meaningfully affects how data is handled, we will say so in the App Store release notes for the update that introduces it. Material changes will never be applied retroactively without notice.

Questions? Email app.goodside@gmail.com, or see Support.