Privacy Policy

This policy explains what information VOID STD collects when you use our apps and our website, why, and what you can do about it. We keep it short and specific, and we collect as little as we can.

These apps and this website are made by VOID STD (Özgür Odabaşı), Türkiye, who is the data controller for the information described here (“we”, “us”). Contact: support@voidstd.io.

What this policy covers

Our apps: ImageFlux, Brackt, Flattr, Exporty, Spot Light Meter and Yip IPTV.
Our website, voidstd.io, and our newsletter.

The short version

Your photos stay on your device. Merging, blending, metering and exporting happen on your device. The only exceptions are your own choices in ImageFlux: a photo you submit to a photo event is uploaded to us, and blends you sync with iCloud go to your own iCloud account.
You choose. Our apps ask before they send usage statistics, crash reports or notification data. Each app works fully if you say no, and you can change your mind at any time in the app’s privacy settings.
No account is needed. ImageFlux offers an optional Sign in with Apple, used only for photo events, and you can delete that account in the app.
None of our apps shows ads. Yip IPTV versions before 1.6.1 did (see Advertising below).
We don’t sell your personal information.

Your choices in the apps

The first time you open the current version of each app, it asks before anything below is collected. Nothing is sent until you answer, and the app works the same either way.

Usage statistics and crash reports (all six apps): off until you tap Allow.
Notifications and offers (ImageFlux, Brackt, Yip IPTV): our push notification service is not started for your device until you allow it. iOS then asks for notification permission separately.

To change a choice later: in ImageFlux, Brackt, Spot Light Meter and Yip IPTV, open Settings > Privacy in the app; in Exporty, open the menu on the home screen and tap Privacy; in Flattr, tap Privacy at the bottom of the home screen. Turning usage statistics off stops collection and deletes crash reports still waiting on your device. Turning notifications off stops push notifications and removes the notification attributes described below.

These choices are in the latest version of each app. If you use an older version, update it from the App Store to get them.

Information processed on your device

Our apps ask for access only when a feature needs it. You can change these permissions at any time in iOS Settings.

Photo library (ImageFlux, Brackt, Flattr): to open the photos and RAW files you pick, and to save results. Exporty opens only the photos you pick and asks only to add the photos it exports to your library. Images are processed on your device and are not uploaded, except an ImageFlux photo event submission you send yourself (see below).
Files (ImageFlux, Brackt, Flattr, Exporty): to open RAW and image files you select.
Camera (ImageFlux, Spot Light Meter): to capture new photos in ImageFlux, and to read the light in the scene in Spot Light Meter. Spot Light Meter does not record, store or send the camera feed.
Location (ImageFlux): only to add location data to photos you capture in the app, if you allow it. This location is saved in your photo on your device; we don’t receive it. Brackt, Flattr, Exporty, Spot Light Meter and Yip IPTV never ask for your location.
iCloud (ImageFlux Pro, Yip IPTV Pro): ImageFlux can sync your blends, and Yip IPTV syncs your playlists, provider logins and favourites, through your own private iCloud account. Apple stores this data; we can’t see it.
Playlists and credentials (Yip IPTV): the playlist addresses, provider logins and favourites you add stay on your device (and in your iCloud, as above). We don’t receive them, and they are never part of usage statistics. When you load a playlist or play a channel, your device connects directly to the provider you added, which sees your IP address like any server you connect to.

Information we receive

Usage statistics and crash reports (all apps, only if you allow it)

If you tap Allow, the app uses Google Firebase Analytics and Firebase Crashlytics. They collect a random app instance identifier, device model, iOS version, app version, language, an approximate location (country or region) derived from your IP address, the screens and features you use, purchase events, and crash and performance details. Brackt also gives crash reports a random identifier so that crashes from one device can be grouped. We use this to understand which features matter, to measure performance and to fix crashes. It doesn’t include your photos, file names, playlist addresses, logins or the content you create, and we don’t link it to your name or account.

In Brackt, ImageFlux and Yip IPTV, anonymous usage counts (no device ID, country only) are also sent to our own notification and settings service, which is operated by VOID STD (see Notifications below). It receives only daily counts of in-app events (event names and a few non-personal settings, such as a format or plan type), the app version, the number and length of sessions, and your country, which the server works out from your connection; your IP address itself is not stored. It receives no device ID, user ID or advertising ID. This is sent only if you allow usage statistics in the app and stops when you turn them off. We don’t use it for tracking or advertising and we don’t share it with third parties.

App settings from our server (all apps)

Each time our apps start, they download a small set of settings, whatever you chose above. This lets us change things like free usage limits, which plans are offered, and which of our other apps are shown, without an app update. These settings aren’t used for analytics or advertising.

In Brackt, ImageFlux and Yip IPTV, the settings come from our own service, operated by VOID STD. The request carries only the app version, iOS version, device language, the platform and a random number from 0 to 99 that the app picks once and keeps on your device (so a new setting can be tried with part of our users first). It carries no installation ID or device ID, and our server stores nothing about the request; your IP address is used only briefly to limit request rates and is not stored.

In Flattr, Exporty and Spot Light Meter, the settings come through Firebase Remote Config. To do this, Firebase receives a Firebase installation identifier (a random ID for this install of the app), the app version, device language and country, and your IP address.

The “More from VOID STD” lists in our apps also load app details from voidstd.io and from Apple’s public App Store lookup service.

Notifications (ImageFlux, Brackt, Yip IPTV, only if you allow them)

If you allow notifications, we send them through our own notification service. It is operated by VOID STD, hosted in the EU, and delivers each notification through Apple’s Push Notification service. News and offers are sent only if you opted in to them; other notifications, such as reminders and, in ImageFlux, photo event results, are sent only if you allowed notifications.

For this, our service stores your device’s push token, a random installation ID, your notification and marketing choices and whether iOS notifications are allowed, and the app version, iOS version, device language and time zone needed to send the right message at the right time. It also records whether each notification was delivered and opened. We attach a few attributes so we can choose who gets which message: in ImageFlux, whether you have Pro; in Brackt, while you are opted in to news and offers, whether you have Pro and your plan, and some usage information (for example how many free merges you have used and when you last merged or opened the app). Our service doesn’t receive your name, email address or advertising ID, doesn’t store your IP address, and we don’t link this data to your name or account.

Earlier versions of these apps used an outside notification provider. If you had allowed notifications there, your device’s push token and notification choice now live in our own service, so notifications keep reaching you. If you still use an older version, it keeps using that provider until you update.

When you turn notifications off in the app, the attributes are removed and our service marks your device as opted out, so it no longer receives notifications. Where the app has a separate switch for news and offers, turning only that off stops those messages and, in Brackt, removes the attributes, while other notifications continue. You can also turn notifications off in iOS Settings at any time.

Purchases and subscriptions (all apps except Flattr, which is free with no purchases)

Purchases are handled by Apple through the App Store. We never receive your payment details. We receive confirmation of what you bought and its status from Apple. ImageFlux, Brackt and Yip IPTV also send the App Store’s purchase record for your device to our server to confirm your subscription status. In ImageFlux, if you are signed in, this record is linked to your account so your Pro status follows you.

ImageFlux account (optional)

You can sign in to ImageFlux with Sign in with Apple. You only need this to take part in photo events. Apple gives us a user identifier and, the first time, the name and email address you choose to share (you can use Apple’s Hide My Email). Our server stores them with your account. You can delete your account at any time in ImageFlux, Settings > Delete Account. This permanently deletes your account data on our server, your photo event submissions and the photos you uploaded, and your profile details, and where possible disconnects ImageFlux from your Apple ID. You can also stop using Sign in with Apple for ImageFlux in your Apple ID settings.

ImageFlux photo events (only if you submit)

If you submit a blend to a photo event, ImageFlux uploads the photo you chose (as a JPEG) with the name, email address, optional Instagram username and optional description you enter. You confirm that you own the rights and allow us to publish the photo with your credit, for example as a featured submission in the app. If you also tick the box, we may contact you about future events. We use your email only to contact you about that event and, if you agreed, future ones. To remove a submission, delete your account or email us.

Advertising (older Yip IPTV versions only)

Yip IPTV 1.6.1 and later show no ads and do not ask to track you. Versions before 1.6.1 showed ads through Google AdMob, only to users without Pro, and only after you have answered our privacy screen and the iOS tracking question. Personalised ads use your device’s advertising identifier only if you allow tracking when iOS asks (App Tracking Transparency). If you don’t, ads are not personalised, but Google still receives device information, your IP address and ad interactions to deliver ads, limit how often you see them, prevent fraud and measure them. You can change your choice in iOS Settings > Privacy & Security > Tracking.

Yip IPTV is a media player. It does not provide any channels or content, and we don’t receive information about what you watch.

The website

Contact form: the name, email address and message you send, and the topic you choose. We use them only to reply to you. They are delivered to our mailbox through a Cloudflare worker.
Analytics: we use Cloudflare Web Analytics, a cookieless service, to count visits and see which pages are read. It sets no cookies, doesn’t fingerprint your device and doesn’t track you across sites; it reports only aggregate figures such as page views, referrers, country and browser type.
Web push: our pages load OneSignal’s script, which receives your IP address and browser information like any file your browser loads, and keeps its own settings in your browser’s storage. Only if you choose to subscribe to browser notifications does it store a push subscription for your browser. You can unsubscribe in your browser’s site settings.
Newsletter: our newsletter runs on Substack (voidstd.substack.com). If you subscribe, Substack collects your email address and handles it under Substack’s privacy policy. We see your email address and subscription details, and use them only to send you the newsletter. Every email has an unsubscribe link.
Hosting and security: our hosting and network providers process standard request logs, such as IP address and browser type, to deliver the site and protect it from abuse.
The website sets no tracking or advertising cookies. It remembers your light or dark theme choice in your browser.

Why we process information (legal bases)

Your consent: usage statistics and crash reports, notifications and the attributes that go with them, location tagging in ImageFlux, personalised ads in Yip IPTV versions before 1.6.1, publishing your photo event submission and contacting you about future events, the newsletter, and web push. You can withdraw consent at any time, as described above, without affecting what happened before.
To provide what you asked for (performance of a contract): purchases and subscriptions and checking their status, your ImageFlux account, handling your photo event submission, and replying to your messages.
Our legitimate interests: downloading app settings, non-personalised ads in Yip IPTV versions before 1.6.1, cookieless website statistics, and keeping our apps, server and website secure. We keep this data minimal and don’t link it to your name.
Legal obligations: where the law requires us to keep or disclose information, for example purchase records for tax purposes.

We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects.

Who we share information with

We share information only with service providers that run parts of our apps and website for us, under their own privacy and data processing terms:

Google (Firebase Analytics and Crashlytics in all apps, Firebase Remote Config in Flattr, Exporty and Spot Light Meter): app statistics, crash reports and app settings.
Google AdMob: ads in Yip IPTV versions before 1.6.1.
OneSignal: web push notifications on the website, and notifications in older versions of ImageFlux, Brackt and Yip IPTV.
Apple: App Store purchases, Sign in with Apple, iCloud sync and push notification delivery.
Hosting and network providers: hosting for our website and our own servers, the contact form and website statistics.
Substack: the newsletter.
Our email provider: to receive and answer your messages.

If you submit a photo to an ImageFlux photo event and it is featured, your photo and the credit you entered are shown to other users. We don’t sell personal information, and we don’t share it with data brokers. We may disclose information if the law requires it.

How long we keep it

Usage statistics are kept according to our analytics settings, at most 14 months; anonymous daily counts are deleted after 400 days. Crash reports are kept for up to 90 days. Website statistics are kept only in aggregate.
Notification data is kept while you have notifications on. When you turn them off, your device is marked as opted out and is no longer used; push tokens that Apple reports as no longer valid are not used again.
Your ImageFlux account and photo event submissions are kept until you delete your account or ask us to delete them.
Purchase records are kept as long as needed to provide your subscription and to meet legal obligations.
Contact messages are kept as long as needed to help you, and then deleted.
Newsletter subscriptions are kept until you unsubscribe.

Your rights

Depending on where you live (for example under Türkiye’s Personal Data Protection Law No. 6698 (KVKK), the GDPR in the EU and UK, or the CCPA in California), you may have the right to access, correct, delete or export your personal information, to object to or restrict how it’s used, and to withdraw consent. Email support@voidstd.io and we’ll respond within 30 days. You can also complain to your local data protection authority.

If you are in Türkiye, under Article 11 of the KVKK you have the right to: learn whether your personal data is processed; request information about it; learn the purpose of processing and whether it is used for that purpose; know the third parties in Türkiye or abroad it is transferred to; request correction of incomplete or inaccurate data; request deletion or destruction under the conditions of Article 7; request that third parties it was transferred to are notified of such corrections or deletions; object to a result against you arising from analysis exclusively by automated systems; and claim compensation for damage caused by unlawful processing. Send your request in writing to support@voidstd.io, stating your name and the subject of your request. We respond free of charge within 30 days.

Many controls are in your hands directly: each app’s privacy settings, ImageFlux account deletion, and iOS permissions, notifications and tracking in iOS Settings.

International transfers

Our providers may process information in countries other than yours, including the United States and EU countries. These transfers rely on the safeguards the law requires, such as the EU Standard Contractual Clauses and, for transfers from Türkiye, the standard contracts and other mechanisms under Article 9 of the KVKK.

Children

Our apps and website are not directed at children under 13 (or the minimum age in your country), and we don’t knowingly collect their personal information. If you believe a child has given us personal information, contact us and we’ll delete it.

Security

We use encrypted connections (HTTPS) for everything our apps and website send, and we limit access to the data we hold. No system is perfectly secure, but we work to protect your information.

Changes to this policy

If we change this policy, we’ll update the date at the top of this page. For significant changes we’ll also let you know in the apps or on this website.

Contact

Questions about privacy: support@voidstd.io, or use the contact form below.