Rifelle
Privacy
Rifelle processes photos on your device, without accounts, ads, tracking, or analytics SDKs.
Last updated: November 2, 2026
The Rifelle app
Photos are captured and developed on your device. Rifelle does not send your photos to servers for processing. No account is required. The app has no ads, no tracking, and no analytics SDKs.
Camera and photo library permissions
Camera access is used to capture photos. Permission to add to your photo library is used when you choose Save to Photos. RAW import uses the Files picker, where you choose which files to open. You can manage permissions in iOS Settings.
Purchases
Apple handles purchases and restoration through the App Store and StoreKit, using your Apple Account. Rifelle does not receive your payment card details. No Rifelle account is needed.
Storage and deletion
Photos, edits, settings, and local diagnostic counters stay on your device. Rifelle does not automatically upload them. Removing the app deletes its locally stored app data. Photos and files you save or share outside the app remain in their destinations; delete those separately. You can choose to share a diagnostic report for support.
This website
The website is separate from the app. It has no forms, analytics cookies, trackers, or fingerprinting. Cloudflare hosts the site and processes standard request logs, such as IP addresses, to operate and protect the service. Site hosting logs do not contain your in-app photos. The sign-up endpoint accepts registrations and stores email addresses and sign-up times in Cloudflare KV, used only for announcements about the Mac version (Rifelle for Mac) and Rifelle releases. Stored registrations have no automatic expiry and are not shared or sold. To request deletion of your registration, contact us below.
Rifelle for Mac announcements
We process your email address, locale, registration time, confirmation time and expiry time to send development and release announcements you request. Records are stored in Cloudflare KV; confirmation and unsubscribe tokens are hashed. Hashes of IP and email addresses are kept temporarily to limit abuse. Processing is provided by Cloudflare and an email delivery provider (to be named before registration opens). Unconfirmed registrations expire automatically after 24 hours. Confirmed registrations are kept for up to 365 days after confirmation, or deleted earlier when you unsubscribe or the announcement program ends. Every announcement email includes an unsubscribe and deletion link. You can also request deletion through the contact below. Legacy registrations are never transferred to this purpose.
Contact
For privacy questions, email: