YOUR MOMENTS ARE YOURS

Privacy, in plain language.

Updated October 10, 2026

DuoCanvas processes your photos and videos on your device. The app does not require an account, and we do not receive your selected media or editing projects.

Selected photos and videos

DuoCanvas uses Apple's system picker to let you choose media for editing. Selected files are processed locally and are not uploaded to us. When you save an export, the app requests add-only Photos permission to write the result to your photo library.

Projects and preferences

Project copies, originals, previews, exports, and preferences are stored inside the app on your device. They are not synced to our servers. Delete a project to remove its local project files. Uninstalling DuoCanvas removes its locally stored app data; exports you already saved to Photos are separate.

Sharing is your choice

When you use the system share sheet, you choose the destination. DuoCanvas does not receive the shared content. The destination service handles it according to its own privacy practices.

Optional usage analytics

Usage analytics remains off until you agree. DuoCanvas asks once whether you would like to help improve the app; choosing No keeps analytics off and does not restrict any editing features. You can also enable or disable “Usage analytics” in Settings at any time. While enabled, DuoCanvas sends limited usage events to PostHog, hosted in the United States, to help us understand which features work well and improve the app.

Events include feature and screen names, foreground usage duration, import/export counts and outcomes, fixed error categories, app version/build, event time, a random installation identifier, and a random foreground-session identifier. The installation identifier links usage events from the same installation; it is not your name, email, advertising identifier, or Apple account. No person profiles are created.

We do not send photos, videos, captions or other entered text, filenames, project titles, file paths, screen recordings, or the contents of your projects. Location enrichment is disabled. Network requests still expose an IP address and technical request information to the service provider; disabling location enrichment does not hide that network information. See PostHog’s privacy policy.

While enabled, unsent events may be stored locally for up to seven days (at most 500 events) and retried when a connection is available. Turning analytics off stops new collection, cancels pending uploads, clears unsent events, and removes the local installation identifier. Turning it on again creates a new identifier. Data already delivered to PostHog is not automatically erased by switching it off, and an upload already received by the service cannot be recalled. Contact us for questions or requests concerning delivered data.

Ads and tracking

The app does not include advertising or cross-app advertising tracking. We do not sell your media or use analytics for advertising. All editing features remain available whether or not you enable analytics.

Visiting this website

This website is hosted on Cloudflare. Requests necessarily pass through Cloudflare, which may process technical information such as IP addresses and request details for delivery and security. This website does not add analytics scripts, advertising trackers, or application cookies. See Cloudflare's privacy policy for its practices.

Contacting support

If you email us, we receive your email address and the information you choose to include so we can respond. Do not include passwords or sensitive media. Email is handled by the relevant email providers.

Questions

For privacy questions or support, contact changboa66@gmail.com. Older releases without the usage-analytics switch do not send these analytics events.