Privacy Policy

1. Who we are

Photo Expert (the “App”) is developed and operated by MIOPS TEKNOLOJİ ANONİM ŞİRKETİ (“MIOPS”, “we”, “us”), a company registered in Türkiye. MIOPS is the data controller for the information described here.

This policy covers the Photo Expert iOS app, its home-screen widgets, its Apple Watch companion, this website at photoexpert.app, and the MIOPS backend services the app talks to.

2. Information we collect

2.1 Information you give us

• Account details. If you sign in with Google, Apple, Facebook or GitHub, we receive your email address and display name from that provider. We never receive or store your password.
• Profile preferences. The photography interests and skill level you choose during onboarding, so recommendations match what you actually shoot.
• Camera bag. The camera bodies and lenses you add, so shot suggestions fit your equipment.
• Plans and locations. Shooting plans, favourite locations and calendar events you create in the App.
• Support correspondence. Anything you send us by email or through our Help Center or feedback board.

2.2 Information collected automatically

• Device identifier. A stable per-device identifier (derived from Apple's identifierForVendor) that lets us keep your guest data — plans, gear, preferences — associated with your device before you sign in, and migrate it to your account if you later do.
• Location. Your coordinates, used to compute sun and moon positions and to fetch local weather. See device permissions below.
• Device and diagnostic data. Device model, OS version, App version, language, crash reports and performance traces.
• Usage analytics. Which screens and features you open, session length, and in-app purchase events — collected in aggregate to improve the App.

2.3 What we never collect

• We do not read, upload or scan your photo library. The App only asks for permission to add images you explicitly choose to save.
• We do not record or upload audio from your microphone.
• We do not collect biometric or face data. Photo Expert has no face-processing features.
• We do not read your calendar. The App only writes reminder events you ask it to create.

3. Google Sign-In & Google user data

Photo Expert offers “Continue with Google” as one of several sign-in options. Sign-in runs through Apple's ASWebAuthenticationSession — a secure system browser sheet — against Google's own OAuth 2.0 authorization endpoint. Our backend at services.miops.net completes the exchange and issues the App a short-lived session token. Your Google password is never seen by, sent to, or stored by Photo Expert.

3.1 The scopes we request

We request no other Google scopes. Photo Expert does not read your Gmail, Drive, Contacts, Calendar or any other Google service.

3.2 Limited Use

Concretely, this means:

• We use Google user data only to provide and improve the features you can see in the App.
• We do not transfer Google user data to third parties, except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger or acquisition — and never for advertising.
• We do not use Google user data to serve advertisements, and we never sell it.
• We do not use Google user data to develop, improve or train generalised or non-personalised AI or machine-learning models.
• No human at MIOPS reads your Google user data, unless you give explicit consent for a specific issue, it is necessary for security purposes such as investigating abuse, we are legally required to, or the data has been aggregated and de-identified.

3.3 What we store

From the Google response we persist only your email address, display name and the pseudonymous account identifier, alongside the plans, preferences and gear you create in the App. Access and refresh tokens issued to the App are stored in the iOS Keychain on your device, and are revoked when you sign out or delete your account.

You can review and revoke Photo Expert's access to your Google Account at any time from Google Account → Third-party apps & services.

4. How we use information

• To run the App. Calculating sun, moon and Milky Way positions, drawing map overlays, fetching weather, and syncing your saved plans across devices.
• To personalise recommendations. Matching shot suggestions to your location, interests, skill level and camera bag.
• To operate subscriptions. Validating in-app purchases and restoring premium entitlements.
• To send notifications you have opted into — event reminders, plan alerts and product news.
• To support you when you contact us, and to answer your feature requests.
• To keep the App working. Diagnosing crashes, monitoring performance, and preventing abuse or fraud.
• To comply with the law and to establish, exercise or defend legal claims.

Where the GDPR applies, our legal bases are: performance of a contract (running the App and your account), legitimate interests (security, diagnostics, product improvement), consent (location, notifications, tracking, marketing), and legal obligation.

5. Device permissions

Every permission is optional and requested only when the relevant feature is first used. The App keeps working, with reduced functionality, if you decline.

6. AI-assisted recommendations

Photo Expert can suggest shots and summarise conditions for you. To do that, the App sends our servers the date and coordinates you are planning for, the interests and skill level on your profile, and the gear in your camera bag. It returns a ranked list of shot ideas and a short written summary.

• We do not send your photos, your contacts, or your Google account data to any AI provider.
• Prompts and responses are not used to train third-party models.
• Recommendations are advisory. Always check conditions and access rights before travelling to a location.

7. Third-party services

We use a small set of established providers. Each processes only what it needs, under contract with us.

Attribution and analytics SDKs are configured not to collect the advertising identifier unless you grant App Tracking Transparency permission. You can withdraw that permission at any time in Settings → Privacy & Security → Tracking.

8. When we share data

We do not sell your personal data, and we do not rent or trade it. We disclose it only:

• To the processors listed above, strictly to run the App on our behalf.
• When the law requires it — a valid court order, subpoena or regulatory demand.
• To protect rights and safety, including investigating fraud, abuse or security incidents.
• In a corporate transaction, such as a merger or acquisition, in which case this policy continues to apply to the transferred data.
• With your consent, for anything else.

9. Retention

• Account data — kept while your account is active, and erased within 30 days of a deletion request.
• Guest data tied to a device identifier — kept for up to 24 months after your last use of the App.
• Crash and diagnostic logs — retained for up to 90 days.
• Aggregated, de-identified analytics — retained indefinitely; it can no longer be linked to you.
• Records we must keep by law, such as purchase and tax records — retained for the statutory period.

10. Security

All traffic between the App and our servers is encrypted with TLS. Session tokens are held in the iOS Keychain, protected by the Secure Enclave, and are short-lived and rotated. Access to production data is restricted to the staff who need it and is logged.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant supervisory authority within the timeframes the law requires.

11. Your rights

Depending on where you live — in particular under the EU/UK GDPR, the Turkish KVKK, and the CCPA/CPRA in California — you have the right to:

• Access the personal data we hold about you, and receive a copy.
• Rectify data that is inaccurate or incomplete.
• Erase your data (see Account & data deletion).
• Restrict or object to processing, including profiling and direct marketing.
• Port your data to another provider in a structured, machine-readable format.
• Withdraw consent at any time, without affecting processing already carried out.
• Not be discriminated against for exercising any of these rights.
• Lodge a complaint with your local data protection authority.

Write to info@miopsteknoloji.com and we will respond within 30 days. We may need to verify your identity before acting on a request.

12. Account & data deletion

You can delete your account and everything attached to it from inside the App — open Profile → Account → Delete account and confirm. If you have lost access to your device, email info@miopsteknoloji.com from the address you signed up with and we will do it for you, within 30 days and usually within two business days.

If you signed in with Google, you can also revoke the App's access independently from Google Account → Third-party apps & services. Note that deleting your account does not cancel an App Store subscription — do that in Settings → your name → Subscriptions on your device.

Deletion removes your email address, display name, profile preferences, camera bag, saved plans and locations. Backups are purged on their normal rotation, within 30 days. Aggregated analytics that can no longer identify you, and records we are legally obliged to keep, may remain.

13. Children's privacy

Photo Expert is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal data, contact us and we will delete it promptly.

14. International transfers

MIOPS is based in Türkiye and our providers operate in the European Union and the United States. When we move personal data out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision, and we apply additional safeguards where needed.

15. Changes to this policy

We may update this policy as the App evolves. Material changes will be announced in the App or by email before they take effect, and the effective date at the top of this page will change. Continuing to use Photo Expert after an update means you accept the revised policy.

16. Contact us

Questions, requests or complaints about privacy — write to us: