Privacy Policy

Last updated: August 2026

The short version

Ovrlay edits your photos entirely on your device. Your photos never leave your phone unless you export or share them. Accounts are optional; if you create one we store only your email address to sign you in and sync your subscription.

What we collect

From the app itself, nothing about your content. Ovrlay has no advertising SDKs. We cannot see your photos, your edits, or what you make.

Accounts (optional). You can use Ovrlay without an account. If you create one, we collect your email address (stored with our authentication provider, Supabase) to sign you in and sync your Pro subscription between the app and ovrlay.photo. We send product news only if you tick the optional box when signing up — never as a condition of having an account — and every such email includes an unsubscribe link. Delete your account (and your email) anytime at ovrlay.photo/delete-account, in the app under Settings → Account, or by contacting support.

Purchases. Subscriptions are processed by Apple App Store / Google Play and managed through RevenueCat, our subscription infrastructure provider. RevenueCat receives an app-generated identifier — random for guests, linked to your account if you sign in — and your purchase history for this app (no name, email, or photos) so your Pro access works across reinstalls and devices. See RevenueCat's privacy policy.

Mailing list (website only). If you enter your email in the "Stay in the loop" form on this site, we store that address purely to send you launch news and new-pack announcements. The list is held by Kit (formerly ConvertKit), our email provider, who process it on our behalf. It is a separate thing from an Ovrlay account — giving it to us here does not create one — and every email carries an unsubscribe link. Ask us at support@ovrlay.photo and we will remove you and delete the address. We do not sell it, and we do not use it to build a profile of you.

Crash reports. If the app hits an error we send a crash report through Sentry so we can fix it. A report contains the technical fault (an error message and stack trace), your device model, the OS and app version, and a short trail of the actions that led up to it — which screens were opened and which network requests were made.

It never contains your photos or edits. That is enforced in the app, not just promised: image file paths and image data are stripped out of every part of a report — the message, the tags, and that trail of actions — before it leaves your device. We do not attach your email address or any account identifier, and we configure Sentry not to record your IP address. Screenshots, view-hierarchy capture and session replay are all switched off. Crash reports are used only to keep the app working, never for advertising or tracking.

Your photos

• Photos you open are copied into Ovrlay's private on-device storage so your projects survive app restarts.
• Edited exports are rendered fresh, without the original file's metadata — EXIF data such as GPS location is not carried into exported images.
• Deleting a project (or "Delete all projects" in Settings) removes our copies from the device. Deleting the app removes everything.

Data retention & deletion

Your photos, projects and edits live on your device and are retained until you delete them — we never receive them. If you have an account, your email address is retained by Supabase on our behalf until you delete the account — at ovrlay.photo/delete-account or in the app under Settings → Account — which removes it. A mailing-list address is retained by Kit until you unsubscribe or ask us to delete it. Purchase records are retained by Apple/Google/RevenueCat, and crash reports by Sentry, per their policies.

Children

Ovrlay is not directed at children under 13 and we do not knowingly collect personal information from them.

Your rights (GDPR / CCPA)

If you have an account, you may request access to, correction of, or deletion of the email address we hold — deletion is self-service in the app under Settings → Account, or email us. We do not sell personal information. If you never create an account, we hold nothing about you to begin with. For purchase data, contact Apple/Google or see RevenueCat's policy. For anything else: support@ovrlay.photo.

Changes

We'll update this page and the date above if our practices change. Material changes will be noted in the app's release notes.

Who we are

Ovrlay is operated by Northbound Systems LLC, the data controller for the limited personal data described above.

Contact: support@ovrlay.photo