Last updated: 14 September 2026
Applies to: ExTract for iOS, version 1.1
ExTract does not collect your data. There are no accounts, no servers, no analytics, and no trackers.
Your photos are analysed entirely on your iPhone and never sent to us — because there is nowhere to
send them. We cannot see your photos, your face data, or who you are looking for.
When you pick sample photos and scan your library, everything happens on your device:
The app reads your photo library only after you grant permission in iOS, and only to compare faces
against the person you chose.
Background preparation. So that searching isn't a long wait, ExTract may ask iOS to prepare your
library in the background while your phone is idle — usually while it charges. This does the same
on-device work described above and stores the same on-device results; it never uploads anything, and
iOS decides if and when it runs. It is not tied to any particular person: it simply means a later
search is fast.
Everything ExTract stores stays on your device (and, if you enable it, in your own iCloud):
| What | Where | Why |
|---|---|---|
| Saved people (a name, a small face image, and numeric face "embeddings") | App's private storage on your iPhone | So you can re-scan for someone later without picking photos again |
| Face embedding cache (numbers derived from your photos) | App's cache folder on your iPhone | So repeat scans are fast. Cleared if you delete the app, and iOS may clear it automatically |
| Archived photos | Your own iCloud Drive, under ExTract › Archive › <person> — or on your iPhone if iCloud Drive is off | So archived photos are browsable in the Files app and sync between your devices |
Face embeddings are lists of numbers describing facial features. They stay on your device and are
never transmitted.
Important: archived photos go to *your* iCloud account, provided by Apple under Apple's terms. They
do not pass through, and are not accessible to, the developer of ExTract. Deleting the app does not
delete them — remove them in the app, or in the Files app, if you want them gone.
Nothing. Specifically, ExTract contains:
For Apple's privacy label, this is "Data Not Collected."
When you choose to delete photos, ExTract asks iOS to delete them and iOS shows its own confirmation —
the app cannot delete anything silently. Deleted photos go to Recently Deleted in the Photos app
and are recoverable there for 30 days, per Apple's normal behaviour.
Archiving files a copy into that person's folder, then removes the original from your library — using the same iOS confirmation dialog as a regular delete, so it's never silent. It stays recoverable in Photos › Recently Deleted for the usual 30 days.
ExTract performs face matching on your device to find photos of a person *you* select from *your own*
photo library. The resulting face data is never shared with the developer or any third party, is not
used to identify strangers, and is not used for advertising, profiling, or any purpose other than the
search you asked for.
If you are in a jurisdiction with specific biometric-data rules (for example Illinois' BIPA, or the
EU/UK GDPR's rules on biometric data), note that the developer never receives or processes your
biometric data — it is created, used, and stored solely on your own device, under your control, and you
can erase it at any time by deleting a saved person or deleting the app.
ExTract is not directed at children and does not knowingly collect information from anyone. Since it
collects nothing at all, there is no children's data for us to hold.
iCloud Drive remain until you delete them yourself.
If this policy changes, the "Last updated" date above changes with it. Material changes will be noted
in the app's release notes.
Questions about privacy in ExTract: info@dataquanta.io