Last updated: August 7, 2026
1. Who we are
PhotoArsenal is an independently developed iOS app. The data controller for GDPR purposes is the developer of PhotoArsenal, reachable at support@photoarsenalapp.com.
2. What data we collect
PhotoArsenal has been designed following the principle of data minimization. Most of the information you manage never leaves your device.
Data stored locally on your device
- Your photography gear catalog (cameras, lenses, drones, batteries, accessories, etc.)
- Photos and notes you attach to inventory items
- Backpacks, trips, stages, sessions and compatibility configurations
- Maintenance, warranty, rental and loan records
- App preferences
This data is stored using SwiftData, Apple's local storage framework, and stays exclusively on your iPhone unless you choose to export it.
Trip stage locations
When you set the location of a trip stage, PhotoArsenal requests the weather forecast for that place and date through WeatherKit, Apple's weather service.
- You enter the location yourself when planning the stage: we do not track your position in the background.
- That location is sent only to Apple, as part of the WeatherKit request, and is used solely to show you the forecast inside the app.
- It is not shared with any third party other than Apple, and it is not used for advertising or profiling.
Access to your photos (ShotCard)
The ShotCard tool creates cards from photographs you select from your library. To do so it reads the EXIF metadata of those images and recognises the gear they were taken with.
- Only the photos you explicitly choose are accessed, each time.
- All processing happens on your device: neither the photographs nor their metadata are uploaded to PhotoArsenal servers.
- You can revoke photo access at any time from your iOS settings.
Minimal technical data
- Apple App Store: Apple may collect anonymous usage and install data when you download the app. This data is handled by Apple, not by PhotoArsenal. See Apple's policy for more information.
- Email support: If you contact support, we'll only collect the information you voluntarily include in your message (name, email, content).
Anonymous telemetry (TelemetryDeck)
PhotoArsenal uses TelemetryDeck to collect anonymous usage data. This information helps us understand how the app is used and improve it. TelemetryDeck is a European service (based in Germany) that is GDPR-compliant by design.
- Data collected includes: app usage events (screens visited, features used) and technical device data (model, iOS version).
- This data is fully anonymous: it contains no user identifiers, no IP addresses, and no data that could identify a specific person.
- It is not used for advertising and is not shared with third parties for commercial purposes.
- TelemetryDeck does not use cookies or cross-app tracking technologies.
Data we do NOT collect
- We do not track your location in the background or record your movements: only the locations you set for trip stages are used.
- We do not access your whole photo library — only the photos you explicitly select.
- We do not use tracking cookies or advertising SDKs.
- We do not access your contacts or your calendar.
- We do not build user profiles or track you across apps.
3. Legal basis for processing
For the minimal data we do process (such as support emails), the legal basis is your consent when you contact us voluntarily (GDPR art. 6.1.a) and our legitimate interest in responding to you appropriately (GDPR art. 6.1.f). Access to your photos and sending a stage location to WeatherKit rely on your explicit consent, given through the iOS permission prompts and when you plan the stage (GDPR art. 6.1.a). For anonymous telemetry, the legal basis is our legitimate interest in improving the app (GDPR art. 6.1.f), given that the data is fully anonymous and poses no risk to your rights and freedoms.
4. Sharing data with third parties
PhotoArsenal does not share your personal information with third parties for commercial, advertising, or analytics purposes. The only third parties involved are:
- Apple: as the iOS platform and App Store provider, and as the provider of the WeatherKit weather service, which receives the stage location and date in order to return the forecast.
- TelemetryDeck: anonymous telemetry service based in Germany. It receives only aggregated and anonymous usage data. It does not receive personal data. More information at their privacy policy.
- Email provider: if you contact us, your message is processed through a standard email provider.
5. Your rights (GDPR)
As an EU resident, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data (right to be forgotten)
- Restrict or object to processing
- Request data portability
- Withdraw consent at any time
- File a complaint with your local data protection authority
Because most of your data is stored only on your device, you can exercise most of these rights directly from the app: deleting items, exporting your catalog, or uninstalling the app removes your data.
For any inquiries related to your rights, email us at support@photoarsenalapp.com.
6. Children
PhotoArsenal is not directed at children under 13. We do not knowingly collect information from minors.
7. Security
Your data is stored on your device using the security mechanisms provided by iOS. We recommend keeping your device up to date and protected with a passcode or biometrics.
8. Changes to this policy
We may update this policy occasionally. If we make substantial changes, we'll indicate so in the app or on this page. The last updated date will always be visible at the top.
9. Contact
If you have any questions about privacy or this policy, email us at support@photoarsenalapp.com.