Privacy Policy
Last updated: August 6, 2026 · Effective: August 6, 2026
The short version. Your photos and the 3D cards made from them stay on your iPhone. They are never uploaded to our servers or anyone else's — the entire scan runs on the device.
We collect anonymous usage analytics to understand how the app is used. That data is tied to a random identifier created when you install the app, not to you. It never includes your photos or anything you write on a card.
This policy explains what Poca 3D (the “app”) collects, what it does not, and what control you have. Poca 3D is published by Melo Media LLC, a limited liability company organized under the laws of Wyoming, United States (“we,” “us”). You can reach us any time at support@photocard3d.com.
1. What stays on your iPhone
Everything that makes up your collection is stored in the app's private storage on your device and is never transmitted to us:
- The photos you scan and the card images produced from them.
- The measurements of each card, and the 3D model built from it.
- Notes you write on the back of a card, and the back style and handwriting style you choose.
- The order of your cards, your collections, and each collection's stage color.
The reconstruction — finding the card in your photo, measuring it, and building the 3D model — runs entirely on your iPhone. The app has no server that receives images, and no account to sign in to.
Deleting it
Deleting an individual card removes it and its files from the device immediately. Settings → Delete All Data permanently removes every card, note, and scan from the device and resets the app to its first-launch state. Deleting the app from your iPhone also removes all of it.
2. Camera and photo access
| Permission | How it is used |
|---|---|
| Camera | Only while the scan screen is open, to show the live preview and take the photo you capture with the shutter. The preview is not recorded and nothing is captured until you tap the shutter. |
| Photos (choosing) | The app uses Apple's system photo picker. It never receives access to your photo library — only the single image you select is handed to it. |
| Photos (add only) | Requested only if you choose Save Video when sharing a card, so the video can be written to your library. This grants no ability to read your existing photos. |
3. What we do collect: anonymous analytics
To understand which features people use and where the app is falling short, we collect product analytics through PostHog, a third-party analytics provider whose servers are located in the United States. PostHog processes this data on our behalf.
How events are identified
When you first open the app, a random identifier is generated and stored on your device. It is not your Apple ID, your name, your email address, your device's advertising identifier, or your vendor identifier — it is a random value that exists only to group one install's events together. Tapping Delete All Data discards it and generates a new one.
What is sent
- Feature usage — for example that the add sheet was opened, a card was focused, a theme was changed, or a card was deleted.
- Scan outcomes and diagnostics — whether a scan succeeded, how long it took, the detection confidence, the measured card size in millimetres, and the input image's megapixel count. This is how we improve scanning accuracy.
- Subscription events — that a paywall was shown, a plan was selected, and whether a purchase started, completed, was cancelled, or was refunded, plus which plan.
- Session summaries — counts of interactions such as card spins, page swipes, and time spent in the immersive view.
- Standard technical context collected automatically by PostHog — app version, iOS version, device model, language, and time zone. PostHog also receives your IP address as part of any network request and may use it to derive an approximate, city-level location.
What is never sent
We do not transmit the content of your photos or scans, the text of any note you write on a card, file names or paths, your name, your email address, your contacts, your precise location, or any advertising identifier.
4. Purchases
Subscriptions and the one-time lifetime unlock are sold and processed by Apple through the App Store. We never receive or store your payment card, billing address, or Apple ID credentials. The app stores your subscription's expiration date locally so it knows whether Pro features are active, and records the anonymous purchase events described above.
5. Sharing a card
Share videos are composed on your device from files already stored there. When you share one, it goes wherever you send it and is governed by that service's own privacy policy. If you choose Instagram Stories, the video is placed on your device's clipboard — marked local-only, so it is not synced to your other Apple devices — and Instagram reads it when it opens. We never receive a copy.
6. No tracking and no advertising
Poca 3D contains no advertising, no third-party ad networks, and no cross-app or cross-site tracking. It does not use Apple's App Tracking Transparency identifier and will never ask to track you across other companies' apps and websites. We do not sell or share your personal information, as those terms are defined under California law.
7. Children
Poca 3D is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.
8. How long data is kept
Data on your device stays until you delete it — we cannot reach it or remove it for you. Analytics events are retained for up to 24 months and then deleted.
9. Security
Your collection is stored inside the app's sandboxed container and is protected by iOS app isolation and your device's encryption. Analytics data is transmitted over encrypted HTTPS connections. No method of transmission or storage is perfectly secure, but because your photos never leave your device, the most sensitive data the app handles is never exposed to a network at all.
10. Your rights
Wherever you live, you can erase everything the app holds about you from within the app itself: Settings → Delete All Data. That wipes your on-device collection and resets your analytics identifier.
California (CCPA / CPRA)
If you are a California resident you have the right to know what personal information is collected and how it is used, to request deletion or correction, and to not be discriminated against for exercising those rights. We do not sell or share personal information, so there is nothing to opt out of. To make a request, email support@photocard3d.com. Because our analytics are pseudonymous, we may ask you for the identifier shown in the app so we can locate the right records.
European Economic Area, United Kingdom, and Switzerland (GDPR)
If you are in one of these regions, you have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. Our legal basis for analytics is our legitimate interest in understanding and improving the app; our legal basis for processing purchase records is performance of our contract with you. Analytics data is transferred to and processed in the United States. You have the right to lodge a complaint with your local supervisory authority.
Other regions
If your local law grants you rights over your personal data that are not listed here, contact us and we will honor them.
11. Changes to this policy
If this policy changes, we will update the date at the top of this page. If a change materially affects how your information is handled, we will make that clear in the app before it takes effect.
12. Contact
Questions, requests, or concerns: support@photocard3d.com. We reply to every message.