Legal

Privacy Policy

Last updated: 5 October 2026

In short

Your photos are processed on your device. Photos, edits and your library are not uploaded to us or to anyone else.
No sign-up. You don’t need to create an account; Tonalier does not ask for your name, email address or phone number.
The app has no analytics, no advertising and no tracking. It does not measure how you use it.
This website counts visits without cookies. It uses a privacy-first counter that does not identify you.
Purchases go through Apple. If you subscribe to Tonalier Pro, a subscription service keeps track of your purchase under an anonymous ID.
If you write to us, we use your email address and message only to reply.

1. Who is responsible

Tonalier is a photo editor for iPhone, iPad and Mac, published by Eralp Yücel, an independent developer. “We” in this policy means the publisher, who is the controller of the personal data described here. This policy covers the app and the tonalier.com website.

Contact: support@tonalier.com

2. What stays on your device

The following are stored and processed only on your device:

the photos you import, and the copies Tonalier keeps in its library;
your edits, masks, crops and history;
photo metadata such as the date, camera, lens and location of a photo;
the search index of your library (what is in a photo, its colors, its camera settings);
your preferences, including the Effect each character has learned from you.

We have no access to any of this. Deleting a photo in Tonalier removes its copy and its edits from the library; deleting the app removes the whole library. The app’s storage may be included in your own device backups, such as iCloud Backup or Time Machine, which are managed by you and Apple.

3. Analysis of your photos

Characters, automatic masks and library search rely on image analysis that runs on your device, using Tonalier’s own image engine and Apple’s on-device Vision framework. Tonalier finds where a person or a subject is in a photo so that it can be edited; it does not identify who anyone is and does not create face prints or other biometric identifiers. Tonalier does not use generative AI, and your photos are not used to train any model.

When you send a photo to Tonalier from the Share sheet of Photos or another app, the photo is copied into Tonalier’s library on your device. It is not sent anywhere else.

When you export, you choose which metadata is written into the new file, including whether location is kept.

5. Purchases and subscriptions

Tonalier Pro is sold through the App Store. Apple processes the payment under its own privacy policy; your card details, billing address and Apple Account name do not reach us.

To know whether a subscription is active on your devices, Tonalier uses RevenueCat, a subscription management service that acts as our processor. RevenueCat receives:

a random, anonymous app user ID created on your device;
your purchase history for Tonalier: the product, Apple’s transaction identifiers, and purchase, renewal and expiry dates;
your App Store storefront country, and the app and operating system version.

This information is not linked to your name or email address, is not used for advertising and is not used to track you across apps or websites. If you never open the Tonalier Pro page or make a purchase, the only information RevenueCat holds is the anonymous ID and technical details of the request.

RevenueCat privacy policy · Apple privacy policy

6. Reports from Apple

If you have chosen to share analytics with app developers in your device settings, Apple may show us aggregated crash and performance reports that do not identify you. You can change this at any time in your device’s privacy settings.

7. Support messages

If you email us, we process your email address, your name if you give it, and the content of your message, including any attachments, in order to answer you and fix the problem you describe. Please send only what is needed; if you attach a photo, consider exporting it without location.

8. This website

tonalier.com sets no cookies, uses no browser storage and shows no advertising. Fonts and images are served from the site itself. The site is delivered by Cloudflare, which processes your IP address and basic request information (the page requested, browser type, time) to deliver pages and protect the site from abuse.

To see how many people visit and how fast pages load, this website uses Cloudflare Web Analytics. It works without cookies, does not fingerprint your browser and does not identify or follow individual visitors. It records the address of the page you open, the page that referred you, your browser and device type, your country, and page-load timings. Cloudflare processes this for us as our processor; we see only totals. This applies to the website only: the Tonalier app contains no analytics.

Cloudflare privacy policy

9. Who receives data

We do not sell personal data and do not share it for advertising. The only recipients are the service providers named above, each for the purpose described: Apple (distribution and payment), RevenueCat (subscription status), Cloudflare (website delivery and visit statistics) and our email provider (support messages). Their servers may be located outside your country, including in the United States; where required, transfers are covered by the safeguards these providers offer, such as standard contractual clauses.

10. Legal bases

Purchases and subscriptions: performing our contract with you, and meeting legal obligations.
Support messages: our legitimate interest in answering you, or steps taken at your request.
Website delivery and visit statistics: our legitimate interest in running a secure website and knowing, in aggregate, how it is used.

There is no automated decision-making or profiling.

11. How long data is kept

Photos, edits and library: on your device, until you delete them or the app.
Purchase records: while your subscription is active, and afterwards for as long as accounting and legal obligations require.
Support messages: up to two years after the conversation ends.
Website request logs: kept briefly by Cloudflare under its own policy; we keep none ourselves.

12. Your rights

Depending on where you live, including under the EU and UK GDPR, Türkiye’s Law No. 6698 and California law, you can ask us to tell you what personal data we hold about you, give you a copy, correct it, delete it, restrict or stop its processing, and you can object to processing based on legitimate interest. Write to support@tonalier.com; we answer within 30 days, free of charge.

Because you never sign up for Tonalier, requests about purchase records need the anonymous app user ID of your installation; write to us and we will tell you how to find it. Your photos and edits exist only on your device, so you can delete them yourself at any time.

If our answer does not satisfy you, you can complain to the data protection authority where you live.

13. Children

Tonalier is suitable for all ages and has no sign-up, chat or advertising. It is not directed at children, and we do not knowingly process personal data from them beyond what is described above.

14. Changes

We update this policy when the app or the services it relies on change. The date at the top shows the latest version. Questions: support@tonalier.com