App Privacy Policy

The Reverse Video Search app for iPhone (the "app") is published by RM ECOM, sole proprietorship of Emile Moureau, 18 rue Goubet, 75019 Paris, France. RM ECOM is the controller of the personal data described here, within the meaning of the EU General Data Protection Regulation (GDPR). Contact: emiledevcontact@gmail.com.

This policy covers the app as distributed on the App Store, and the servers at reverse-video-search.com the app talks to. The website has its own privacy policy, and both are completed by the Terms of Service. Where this page and the website policy differ about the app, this page applies.

It does not cover the sites you open from a search result, nor Google, Yandex, Bing, OpenAI or Together AI acting under their own terms: each of them has its own privacy policy, which we do not control.

• The videos and pictures you pick stay on your phone. Frames are cut on the device.
• A free Google Lens search sends one frame from your phone directly to Google. Nothing goes through our servers.
• Paid searches (Deep search, AI location guess) send only the frames you choose, only after you tap Allow, and our storage deletes them within 7 days.
• Signing in is optional. Until you do, the app uses an anonymous account, not linked to your name, email, phone number or contacts. If you sign in (Apple, Google or email), your account holds your email address.
• No advertising, no analytics SDK, no tracking across other apps or websites. We never sell or rent personal data.
• Account > Delete account erases your data on our servers and on the phone, at any time, in two taps.

Frames are re-encoded as plain images on the phone before they are searched, which drops the metadata embedded in the original file (such as the GPS position). The app never uploads the video file itself, except the copy of a public post you asked it to import.

We do not collect, and the app does not ask for:

• your phone number or postal address, or your name and email address unless you choose to sign in;
• your contacts, calendar, messages or browsing history;
• your precise or approximate location (the app has no location permission);
• your advertising identifier, or any device fingerprint;
• health, financial or other sensitive data. Payment details stay with Apple.

The app does not ask for location, contacts, Bluetooth, local network, tracking or notification permission. You can change any permission at any time in Settings > Privacy & Security, or Settings > Reverse Video Search.

Paid features need somewhere to keep your credits, so on first launch the app creates a random identifier and stores it in the iOS Keychain, marked "this device only": it is not synced to iCloud and not restored onto another phone. The app exchanges it for a session with our servers, which keep only a one-way hash of it. The session token is stored next to it in the Keychain.

The account holds your credit balance, the results of your Deep searches, your imported videos and your purchase status. Until you sign in, it is not linked to your name, email, Apple ID, phone number or contacts: we know which account made a request, never who you are.

Signing in is optional (Account > Sign in or create an account). With Sign in with Apple, Google, or a code we email you, the anonymous account moves into a regular Reverse Video Search account, the same one you can use on reverse-video-search.com. That account holds your email address (with Sign in with Apple, possibly a private relay address) and, if Apple shares it, your name. Your credits, plan and search results move into it; your videos stay on the phone. Signing out leaves the account as it is and gives the phone a new anonymous account.

Because the Keychain survives uninstalling, reinstalling the app on the same phone finds the same account and the same credits. To erase the account, use Delete account(section "Deleting your data"); uninstalling alone does not.

Deep search and the AI location guess cannot run on the phone: they need the frame to reach search engines and AI models. Before the first time, the app shows who receives the frames and asks for your permission. Nothing is sent until you tap Allow. If you tap Not now, the search does not run and no credit is spent.

When you tap a frame, the app opens Google Lens inside the app and uploads that one frame from your phone directly to Google, the same way Safari does. Our servers are not involved and no account is needed.

Google processes the image under its own terms and privacy policy. To keep you on the most private setting, the app tells Google that you reject optional cookies before the upload. Opening a result takes you to a third-party website, which applies its own policy.

Plans and credit packs are sold through Apple's in-app purchase system. Apple takes the payment; we never see your card details, Apple ID or billing address. RevenueCat, our purchase-management provider, receives the purchase record from Apple together with your anonymous account identifier, and tells our servers which credits to add. RevenueCat also processes basic technical data such as the app version, operating system and country, as described in its privacy policy.

Subscriptions are managed and cancelled in your Apple ID settings (Settings > your name > Subscriptions), or from the app with Account > Manage subscription.

Like any internet service, our servers see the IP address of each request. We use it in two ways only:

• Abuse limits: the address counts requests over a short window (10 minutes to 1 hour), for example to stop one address creating thousands of accounts. The counter is deleted when its window ends.
• Security log: when an account is created, we record the event with a truncated IP address (IPv4 cut to its /24 network), a salted one-way hash of the full address, the country and the app's user-agent. The full address is not stored.

The app also tells our servers its platform (iOS) and your interface language, so answers come in the right language. The app contains no crash reporter or analytics SDK. If you share crash reports with developers in your iPhone settings, Apple may pass us anonymous crash logs.

Your library (videos, pictures, frames, search history, AI guesses), your theme choice and your data sharing choice are stored in the app's private storage, which other apps cannot read. Like other app data, the library may be included in iCloud or computer backups of your iPhone, according to your settings; those backups are protected by Apple and by your device passcode.

Deleting an item in History removes it from the phone. Account > Clear library removes all of them. Uninstalling the app removes the library.

We rely on the providers below. Each receives only what its job needs. Providers acting for us (marked "processor") may not use the data for their own purposes.

We may also disclose data when a competent authority makes a valid legal demand, or to defend a legal claim. If the business is ever sold, the data would pass to the buyer under this same policy, and we would tell you in the app first.

Most providers above are US companies, so data reaches the United States. These transfers rely on the EU-US Data Privacy Framework where the provider is certified, on the European Commission's Standard Contractual Clauses, or on the transfer being necessary to run the search you asked for.

Open Account > Delete account and confirm. Right away, and without contacting us:

• our servers erase the account, credits and credit history, Deep search results, imported videos and their files, and every session;
• the app clears its library on the phone, forgets the identifier in the Keychain and turns data sharing off;
• the next launch starts a new, empty account.

This cannot be undone, and unused credits are lost. Deleting the account does not cancel an App Store subscription, which Apple bills: cancel it in Settings > your name > Subscriptions. The app shows a link there before you confirm.

After deletion we keep only the security log of the account's creation (truncated IP and hash, 13 months) and anonymous usage counters no longer linked to any account. Apple and RevenueCat keep their own purchase records under their policies.

You can also ask us by email at emiledevcontact@gmail.com to delete your data. Tell us roughly when you installed the app; since we do not know who you are, we may need a detail only the phone shows to find the account.

All traffic between the app and our servers uses TLS. The account identifier is stored on the phone in the iOS Keychain and on our side only as a hash. Access to our database and storage is restricted to the operator of the service. No system is perfectly secure: if a breach is likely to put your rights at risk, we will notify the CNIL within 72 hours and tell you in the app where the law requires it.

Wherever you live, you can ask us to:

• tell you what we hold about you and give you a copy (access, portability);
• correct it (rectification) or delete it (erasure);
• restrict or object to processing based on our legitimate interest;
• withdraw consent to data sharing, in the app or by email, at any time.

Write to emiledevcontact@gmail.com. We answer within one month. If you are in the EU, you can also complain to your data protection authority; ours is the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 (cnil.fr).

The answers we give on the App Store product page, for reference:

• Data used to track you: none.
• Data linked to you: User ID, Purchase History, and Email Address and Name only if you sign in. Used for app functionality only.
• Data not linked to you: Photos or Videos (the frames you choose to search). Used for app functionality only.

The app is not directed at children and is not meant for anyone under 15. We do not knowingly collect data from children. If you believe a child used a paid feature, write to us and we will delete the account.

The date at the top shows the version in force. Before a change that affects data the app already handles, or adds a new recipient, we will update this page and tell you in the app; where the change needs your consent, the app will ask for it again.

Any question about this policy or your data: emiledevcontact@gmail.com, or RM ECOM, 18 rue Goubet, 75019 Paris, France. In the app: Account > Contact support.