Privacy Policy
Effective 26 July 2026
HDRI Studio turns a set of bracketed iPhone photos into a 360° HDR environment map. This policy explains how the HDRI Studio app, its hosted processing service, and this website handle data. In short: your photos are used only to build your panorama, there are no named user accounts, and we do not sell or share app, processing, or contact data with advertisers.
What the app captures
To build an HDRI the app records two things, only while you are actively capturing: the bracketed RAW (DNG) photos of your surroundings, and your device’s orientation from the motion sensors at each shot so the photos can be placed correctly on the sphere. The camera and motion sensors are used solely for this purpose.
Where your captures go
Stitching happens on the hosted HDRI Studio processing service. Your captures are uploaded only to be merged and stitched into an EXR, and the finished panorama is returned to your device.
What the app does not collect
The app has no named account or sign-in and contains no analytics, advertising identifiers, or advertising SDKs. Through the app, we do not collect your precise device location or contacts. The hosted service uses a random installation identifier, processing job IDs, camera metadata, and the purchase records described below to operate securely. For abuse prevention it temporarily counts accepted work using a one-way pseudonymous hash of the network address supplied by the hosting proxy; the raw address is not stored in the app's credit ledger. We never sell this data or share it with advertisers.
Website analytics
This website uses Ahrefs Web Analytics, provided by Ahrefs Pte. Ltd., to understand aggregate site usage and improve the website. According to Ahrefs, its default tracker uses no cookies or persistent identifiers. It processes page and referring URLs, the user-agent string and information derived from it (such as browser, operating system, and device type), language settings, country and city inferred from the network address, and events such as page views and outbound-link clicks, including visits to the App Store. Ahrefs says raw network addresses are discarded rather than stored; daily visitor counts use a salted hash of the network address and user agent, and the salt is replaced and deleted every 24 hours. Ahrefs says it may use aggregated data to improve its services and may publish studies or reports based on anonymized and aggregated data. Ahrefs is based in Singapore and may process analytics data internationally as described in its privacy policy. See Ahrefs' Web Analytics documentation for details.
Email and the former launch waitlist
The public launch waitlist is closed and the website no longer displays an email signup form. Before release, waitlist addresses were sent to Netlify, Inc., our website hosting and former form-processing provider, and may also have appeared in submission notifications sent to our support inbox. We use any remaining address only for the single promised launch notice; we do not add it to a general marketing list or sell it. We retain any remaining copy only until that notice has been sent, unless you withdraw your consent or request deletion earlier by contacting support@hdristudio.app. Netlify may process retained submissions internationally, including in the United States, under its data-processing terms; see Netlify's privacy statement and data-protection information.
If you contact us by email, we receive the information and attachments you choose to include, such as device and app details, screenshots, job IDs, or filenames, and use them to handle your request.
Purchases
Payments are handled by Apple through StoreKit; we never receive or store your payment card details. To keep credits available after reinstalling or changing devices without requiring a named account, the service stores Apple's app transaction identifier together with the random installation identifier, Apple purchase, product, and notification identifiers, notification delivery outcome, purchase/expiration/revocation times, and render-credit balance. Apple cryptographically signs this data, and the server uses it only to verify and account for processing access.
App integrity
On supported iPhones, Apple's App Attest service creates a per-install cryptographic key and certifies that requests come from an authentic copy of HDRI Studio. The processing service stores the key identifier, public key, Apple attestation receipt, assertion counter, and any integrity signals Apple supplies, linked only to the random installation identifier. This is used for fraud prevention and service security, never advertising or tracking.
Storage and retention
Captures and finished EXRs are stored on your device until you delete them. After successful processing, the hosted service deletes the uploaded bundle and extracted DNG files. It keeps the generated EXR, preview, checksum, and processing diagnostics in private storage for up to 7 days so an interrupted download can be resumed. Failed-job image payloads are removed after diagnostic state is recorded. To request earlier deletion of a hosted-server job, contact support@hdristudio.app with the server job ID or EXR filename. You can delete any local capture or panorama from inside the app at any time.
Support messages are handled through email. Any remaining former-waitlist address is retained only as described above. Analytics history may remain in Ahrefs while we use the service, subject to its terms and our account settings; Ahrefs says raw network addresses are never stored and its daily salts are deleted every 24 hours.
Children
HDRI Studio is not directed to children under 13 and does not knowingly collect data from them.
Changes to this policy
We may update this policy as the app, processing service, or website evolves; the effective date above changes when we do.
Contact
Questions about privacy? Contact support@hdristudio.app.