Privacy Policy
Last updated: August 1, 2026
This or That is an iOS app developed by OzTech App Studio (Istanbul, Türkiye). It helps you choose between two options by comparing two photos. This policy explains exactly what the app handles, who processes it, and the control you have. The short version: there is no sign-up and we never ask for your name, email or phone number. Your two photos leave your phone only after you have agreed, they are analysed in memory and discarded as soon as the answer comes back, and they are never written to any storage — not ours, not a bucket, not a database. Your decision history and the photos themselves stay on your phone and are never synced anywhere.
1. Who is responsible
The data controller is OzTech App Studio, Istanbul, Türkiye. For anything in this policy, write to support@oztechapps.net.
2. The consent gate — read this one first
Before a single photo ever leaves your device, the app shows you a screen that names Anthropic PBC as the company that will analyse it, states exactly what is sent, and asks you to agree. If you decline, the app still works — you simply do not get an AI decision. You can withdraw that agreement at any time from Settings, and withdrawal is exactly as easy as giving it. The check is enforced in the last function before the network call and defaults to no consent, so no screen, no retry and no future code path can route around it.
3. What is sent, and what is not
When you ask for a decision, this is the complete list of what is transmitted:
- Your two photos, resized on your phone to at most 1024 pixels on the long edge and compressed.
- The occasion you tapped (for example “Work” or “Evening”) and the category chip.
- Your style profile, if you filled one in — hair colour, colours you like and avoid, style preference, and your optional free-text note.
- The prices you typed, if you turned price comparison on.
- Your app language, so the answer comes back in it.
What is never sent to the AI provider: your name, your email, your phone number, your device identifier, your location, your contacts, your photo library beyond the two images you picked, or any advertising identifier. There is nothing attached to the request that identifies you.
4. Photos are never stored
This is the part most apps get wrong, so it is worth being precise. Your photos are sent directly to our decision function, held in memory only for the duration of that single request, and discarded when the answer is returned. They are never written to a storage bucket. We do not use the write-then-delete pattern, because scheduled deletion rules operate on roughly twenty-four hour granularity — that is cost hygiene, not a privacy guarantee. The app does not even include a storage SDK, so no current or future code path is able to write your photo anywhere.
5. What stays on your phone
Your decision history, the photos attached to it, and your style profile are stored on your device only. There is no cloud sync, no iCloud backup of this data by us, and no way for us to read it. If you delete the app, it is gone. You can also clear it all from Settings at any time.
6. What our servers keep
Deliberately, almost nothing:
- A hashed identifier and a daily decision counter, so the free allowance can be enforced without trusting the app. The identifier is stored as a one-way hash; we cannot turn it back into anything about you.
- The text of a locked result, for up to fifteen minutes. When you are on the free tier, the reasoning behind a verdict is withheld. If you subscribe, we return the withheld text from this short-lived record rather than asking the AI again — which would cost you a different answer. The record contains text only. It never contains your photos. It is deleted the moment it is used, and expires by itself otherwise.
- Subscription status, checked against RevenueCat so the app cannot simply claim to be subscribed.
- Aggregate analytics and crash reports (Firebase), which tell us that a screen was opened or that the app crashed. They carry no photo, no profile, and no verdict.
7. Who processes your data
| Processor | What they receive | Why |
|---|---|---|
| Anthropic PBC (Claude) | Your two photos, occasion, style profile, prices, language | To produce the decision. Anthropic does not train its models on data sent through the API. |
| Google (Firebase) | Anonymous session, hashed identifier, quota counter, crash and usage events | Anonymous sign-in, running the decision function, enforcing the free allowance |
| RevenueCat | Anonymous subscription identifier and purchase status | Managing and verifying the subscription |
| Apple | Your payment | All purchases go through Apple; we never see your card |
Each of these is bound by a data processing agreement requiring protection equal to the standard described in this policy.
8. What we never do
- We never rate a person. If someone appears in a photo, the analysis stays on the item — there is no beauty score, no body score, and no comment on the person. This is a permanent rule, enforced by the fixed set of things the app is able to score.
- We do not track you across apps or websites. There is no advertising identifier, no attribution SDK, and therefore no App Tracking Transparency prompt.
- We do not sell your data. There is no advertising in the app.
- There is no social feed, no public content and no voting — nothing you photograph is ever visible to another user.
9. Legal bases (GDPR / KVKK)
Sending your photos for analysis rests on your explicit consent, given at the consent gate and withdrawable in Settings. Enforcing the free allowance and verifying a subscription rest on performance of a contract. Crash reporting rests on our legitimate interest in keeping the app working.
10. Retention
Photos: not retained — discarded when the request ends. Locked result text: at most fifteen minutes. Quota counters: rolling, reset daily. Subscription status: for the life of the subscription. On-device history: until you delete it or delete the app.
11. Deleting your data
Settings → Delete all data clears your on-device history and profile immediately, and asks our servers to erase the anonymous record tied to your device. No email to us is required, though you are welcome to write if you would like confirmation.
12. International transfers
Anthropic, Google and RevenueCat process data outside Türkiye and the EEA. Transfers rely on the European Commission’s Standard Contractual Clauses and, for KVKK purposes, on your explicit consent given at the consent gate.
13. Your rights
You may ask what we hold, ask for it to be corrected or erased, object to processing, or withdraw consent. Because the app has no account, most of these are things you can do yourself from Settings in seconds. For anything else, write to support@oztechapps.net.
14. Children
This or That is not directed at children under 13 and we do not knowingly collect their data.
15. Security
All traffic is encrypted in transit. Requests are attested with Apple’s App Attest, so only the genuine app can reach our functions. API keys live on the server and are never present in the app binary.
16. Updates to this policy
If this policy changes materially we will update the date above and, where the change affects what is sent, ask for your agreement again.
17. Contact
support@oztechapps.net · OzTech App Studio, Istanbul, Türkiye