Last updated: 15 October 2026.

This policy covers the Open Eyes apps for Android and iPhone. It's provided by Aralel GmbH (see the imprint). The data protection page has the formal GDPR details, including legal bases and your rights.

Your photos

  • You choose photos with your phone's own photo picker. The app only sees the photos you pick.
  • Finding faces, lining up shots and blending fixes all run on your device. Your photos and any face data are never uploaded to us or anyone else.
  • Face detection only finds the position of eyes and mouths so they can be lined up. It does not recognise or identify people, and no face templates are stored.
  • Each fix is saved as a new photo in your gallery. Your original photos are never changed.

History on your phone

So you can change a fix later, the app keeps a list of your recent fixes on your device: references to the photos you picked, which one was your favorite, and which eyes and smiles you chose. It does not keep copies of your photos. This list never leaves your phone. Remove single entries in the app; clearing the app's data or uninstalling removes all of it.

Labels in fixed photos

Fixed photos are labelled as composites of your own shots (see how fixed photos are labelled). The labels contain the app's name and version, how many eye and mouth regions were taken from other shots, and an edit number. They don't contain your name, location or the other photos.

  • iPhone: Content Credentials are signed entirely on your phone with a key that never leaves it.
  • Android: where Content Credentials are enabled, the app creates a key on your phone and asks our signing service once for a certificate. That request contains the public key, your Android build identifier and the app version. It never contains a photo. If the service can't be reached, the photo is still saved with the other labels.

Services from Google and Apple

Android: face detection uses Google ML Kit, delivered through Google Play services, which downloads the face model to your phone. Detection runs on the device, but ML Kit may send Google anonymous usage and diagnostic information about the detection feature (never your photos). See Google's ML Kit data disclosure.

iPhone: face detection uses Apple's on-device Vision framework. The app sends nothing to Apple.

Google Play and the App Store process data when you download the app, under their own privacy policies.

Permissions

  • Photos: only the photos you pick in the photo picker are shared with the app. On iPhone, the app also asks to add photos to your library so it can save fixes.
  • Storage (Android 8 and 9 only): needed to save the new photo on these older versions.
  • Internet (Android): used only for the certificate request described above and by Google Play services.

Sharing

When you tap Share, your phone's share sheet sends the fixed photo only to the app you choose.

No accounts, ads or tracking

The app has no user accounts, shows no advertising and contains no analytics or tracking of its own. We don't sell or share data, because we don't collect it.

Children

The app isn't directed at children and collects no personal data from anyone in the app itself.

This website

This website sets no cookies, uses no analytics and loads nothing from other companies (no web fonts, no embedded videos, no social buttons). The hosting provider keeps short-lived server logs; see data protection.

Changes

If this policy changes, we'll update this page and the date at the top. Significant changes will also be mentioned in the app's release notes.

Contact

Questions about privacy: openeyes@aralel.com.