Mefo privacy policy
Updated
What Mefo stores
Mefo has a free tier and optional Mefo Plus subscriptions, with no required Mefo account. Photos, optional source videos and sound you choose to record, finished keepsakes, legacy private reference copies from earlier versions, captions, private Journal notes, feedback drafts, session settings, onboarding progress and local free-session usage are stored in the app on your device. Mefo has no media-upload service or advertising. Capture, editing and your Journal work without an internet connection.
Usage analytics and crash reports
When you allow usage analytics, Mefo uses PostHog for product actions with a random identifier for this installation. These include onboarding and help steps, public booth choices, sample use, camera entry and permission result, your choice of photos only or photos with a moving strip, and first or repeat keepsake and moving-strip milestones. Mefo Plus events include how you open an offer, selected plan, offer eligibility and billing or trial period, App Store storefront and currency, and verified trial or paid subscription milestones. When you allow crash reports, it uses Sentry for crash and error reports with technical details such as the app version, device model and iOS version. These services help us understand features and fix problems. Mefo does not include your photos, videos, sound recordings, legacy private reference copies, captions, notes, search text, face information, media file paths, payment-card details, receipts, transaction identifiers or session identifiers in these reports. Session replay, screenshots, advertising identifiers and cross-app advertising tracking are disabled.
Mefo Plus purchases
Mefo Plus purchases and restores use Apple's App Store and StoreKit. Apple handles billing and the payment information you provide to Apple. Mefo checks verified transaction and subscription information on your device to decide Mefo Plus access and keeps local purchase-processing records. Purchases, restores and subscription updates may need an internet connection. When usage analytics are enabled, PostHog receives the subscription milestones described above, without receipts or transaction identifiers.
Your analytics choices
Usage analytics and crash reports are optional. Each service stays off until you allow it. If neither choice has been recorded, onboarding offers Share analytics and crash reports to allow both, or Not now to continue without either. Existing explicit choices are retained; an earlier automatic default-on setting without a recorded choice does not count as permission. People who have completed onboarding or have paid access are not prompted again; unanswered services stay off. In Settings > Privacy and help, change Share usage analytics and Share crash reports independently at any time. Either choice lets you use capture, editing, Journal and Mefo Plus. Your choices are saved on this phone. Turning a service off stops new collection and blocks queued reports from being sent. Information already transmitted cannot be recalled, and changing a switch does not delete reports already received. PostHog and Sentry process reports on our behalf. Contact us with privacy or deletion questions. These settings do not change Apple's separate TestFlight diagnostics.
Camera and Photos
Camera access is requested when you enter capture or open an effects preview. Source video is optional and silent by default. Microphone access is requested only when you turn on Record sound before capture. If you decline, silent capture remains available. Recorded sound is stored locally with the clips; older silent clips do not gain audio. You choose whether a moving-strip video includes recorded sound. Playback starts muted and GIF exports are always silent. Save to Photos requests add-only permission when you choose it and adds a JPEG copy of your finished keepsake or a video copy of your finished moving strip. It does not read your Photos library. The system share sheet remains available and may request permission when you choose to save an image or video there. You can change permissions in iPhone Settings.
Photo effects and face processing
Filters and optional Retouch run on your device. Mefo uses temporary face landmarks to apply effects; it does not identify you, create a face identity profile or send face information to a server. Landmark data is not saved with your sessions. Effects leave your original captures unchanged; generated keepsakes contain the effects you choose. Explicitly confirming a retake replacement is a separate deletion action described below.
Sharing and backups
You decide when to share original photos or a finished JPEG photo, a moving-strip video or a silent animated GIF using the system share sheet, or a finished photo using Share to Instagram Stories. A moving-strip video includes recorded sound only when you enable that option and the selected clips have recorded sound. The Instagram action places only your finished photo on the device clipboard for up to five minutes and opens Instagram, where you choose whether to publish. That clipboard item is not shared through Universal Clipboard. The app or service you choose handles shared copies under its own privacy practices. Journal notes and legacy private reference copies are not included in exported keepsakes. Your app data may be included in ordinary device or iCloud backups according to your system settings; Mefo does not operate a separate cloud backup.
Retention and deletion
Sessions remain on your device until you delete them or remove the app. Use Journal's Select and Delete selected controls to delete sessions, including their media and notes. Session Storage can remove source videos or older export versions separately. Removing older exports is permanent and keeps the current keepsake, current moving strip and remaining originals. Recreating an export requires the necessary original photos, footage and settings. Keep new take asks for a separate Replace and delete confirmation. Confirming deletes only the superseded still and its sidecar from that Mefo session; cancelling preserves both takes. If cleanup cannot finish, New take kept explains that deletion is pending and offers a retry. Source videos, earlier exports, Photos copies, other sessions and backups are not deleted by replacing the still. Private reference copies imported by earlier versions remain stored on this phone. Recreate is retired: the current app does not display, import or use these copies and has no reference-cleanup control. Delete App removes local app data, including those copies; Offload App can retain it. Local deletion does not remove copies you shared, saved to Photos or retained in backups.
Support and privacy contact
For help, privacy questions or feedback-deletion requests, email mefoapp@gmail.com. When direct sending is unavailable, Contact support and Request a feature offer Copy draft, Email support and Copy email. TestFlight is not required for support. Copy draft places your message, any reply email you supplied and only the app/device details you chose on this phone’s clipboard for up to five minutes. Support details start on and can be turned off; feature-request details start off. Copy email places only the support address there. These clipboard items are not shared through Universal Clipboard. Copying does not send anything or remove your draft. Email support opens your email app with our address and a subject; it does not insert or send your draft automatically. You choose whether to paste the draft and send it using your email provider. The current app has no configured direct feedback receiver, so in-app Send is unavailable and drafts are not sent automatically later. Email you choose to send may include your address and any details or attachments you provide. We use this information to respond and investigate your request. Photos, videos, sound recordings, private notes and legacy private reference copies are not attached automatically by Mefo. Review any attachments before sending them.
TestFlight beta testing
If you install Mefo through TestFlight, Apple operates that service and automatically shares beta crash logs and usage information with the developer under Apple's TestFlight privacy terms. Feedback you deliberately send may include contact details, screenshots and diagnostic information. We use beta diagnostics and feedback to investigate issues and support the beta. TestFlight testers can also open TestFlight, choose Mefo and tap Send Beta Feedback.
Policy updates
We will update this policy when Mefo's data practices change. Check the updated date above when installing a new version.
This policy website
This policy page is hosted with OpenAI Sites using Cloudflare infrastructure. Hosting providers may process technical request information, such as IP addresses, to deliver and protect the website. See OpenAI’s Privacy Policy and Cloudflare’s Privacy Policy for information about their general data practices. Mefo does not add analytics or tracking scripts to this page.