LunexCam privacy policy

The short version

LunexCam keeps what you shoot on your iPhone. It has no accounts, no analytics, no advertising and no tracking, and it never sends anything to its developer. Photos, videos and records leave your iPhone only when you choose: by sharing or exporting them, by sending them to your own Mac or iPad with LunexLink, or through a Remote Signing relay that you or your organisation runs.

Photos and videos

Everything you capture is saved to your Photos library. The gallery inside LunexCam shows your library so you can review shots and see their EXIF details; LunexCam only reads it to show it to you.

If GPS & compass tagging is on, each photo records where it was taken, its altitude and the direction you were facing. You can turn this off in LunexCam's Settings at any time.

With the Metadata & Watermark add-on, the creator name, copyright and other details you enter are written into each photo, and an optional watermark is drawn onto it.

Consent forms (add-on)

If you use Consent Forms, LunexCam stores each signed form on your iPhone: the person's name, email address (if you ask for it), signature, whether they're under 18 and their parent or guardian's name, the purposes they agreed to, when and (if location is on) where they signed, and the photos linked to the form. A PDF of each form is kept in Files › On My iPhone › LunexCam › Consent Forms.

These records are saved with iOS's strongest file protection, so they're encrypted whenever your iPhone is locked. You can delete any record in the app. Each photo carries its consent ID and permitted uses in its metadata.

The photographer or organisation using LunexCam decides why people are photographed and is responsible for these records, as the data controller under data protection law such as the UK GDPR. LunexCam's developer never receives them.

Remote Signing (add-on)

Remote Signing lets a guest sign a consent form on their own phone. The form and the signed reply pass through a relay server that you or your organisation set up and enter in Settings; LunexCam's developer doesn't run it or receive anything from it.

Everything sent through the relay is end-to-end encrypted. The keys are made fresh on your iPhone for each session and never reach the relay, so the relay can't read the form, the guest's details or their signature. Replies are deleted from the relay once your iPhone collects them, and sessions expire within 24 hours.

LunexLink: sending to LunexStudio

If you turn on Send to LunexStudio, each new photo or video is also sent to LunexStudio on a Mac, iPad or iPhone you've paired with its six-digit code. Shots go directly between your devices over your local network, encrypted with that code, and never through the internet or any server. Shots that couldn't be sent yet wait on your iPhone until they can, and are removed once delivered or if you forget the pairing.

Apple Watch and widgets

The Apple Watch app shows a live preview from the camera and works as a remote shutter. The preview is sent directly from your iPhone to your Watch and isn't stored.

The Golden Hour and Blue Hour widgets use your location to work out sunrise and sunset times and to show your place name. The place name is looked up with Apple's location services; LunexCam doesn't keep or send your location anywhere else.

Purchases

Add-ons and LunexCam One are bought through Apple's App Store. Apple handles the payment; LunexCam only receives confirmation of what you own, so it can unlock it.

Permissions

Camera: to take photos and videos.

Microphone: to record sound for videos and Live Photos.

Location (while using the app): to tag photos with where they were taken and for the light widgets. Optional.

Photos: to save what you take and to show your library in the gallery.

Local network: only for LunexLink, to send shots to LunexStudio.

You can change any of these in iPhone Settings › Apps › LunexCam.

Sharing

Nothing is shared automatically. A photo, video, PDF or the consent register leaves your iPhone only when you share or export it yourself, for example through the share sheet, AirDrop or the Files app, or when you've set up LunexLink or Remote Signing as described above. Once shared, it's handled by whoever you send it to and under the terms of the service you use.

Children

If someone signing a consent form is under 18, LunexCam asks for their parent or guardian's name. Organisations photographing children should follow their own safeguarding policies. LunexCam isn't directed at children as users.

Deleting your information

You can delete consent records, imported LUTs and your settings in the app. Deleting LunexCam removes everything it stored, but not photos and videos already saved to your Photos library or files you've shared.

People who were photographed

To see, correct or delete your consent record, or to withdraw consent, contact the photographer or organisation that photographed you, using the contact details on your copy of the form. LunexCam's developer holds no information about you.

Changes and contact

If this policy changes, the new version will appear in the app with a new date.

Questions about the app or this policy: email contact@henryharris.co.uk, or see the support page at henryharris.co.uk/lunexcam/support.