DigniView Privacy Policy
DigniView is a Safari content-filtering app. It analyzes webpage images to decide whether to reveal them or hide the whole image.
Local processing
Apple Vision person detection, the analysis cache, and settings run or remain on the device. DigniView does not provide an incorrect-filter reporting or image-reveal control in V1.
Optional OpenAI processing
Cloud analysis requires your explicit image-sharing permission. Version 1.0.2 includes filtering without a subscription. Version 1.0.3 restores an active trial or subscription requirement for all filtering, with a three-day introductory trial for eligible new subscribers. Version 1.0.1 also requires a subscription, while version 1.0 retains its original local-access behavior. Image-sharing permission is separate from payment: once you agree and have access for your installed version, cloud setup and reconnection run automatically. When enabled, DigniView sends a normalized, reduced-size copy of webpage image pixels through the private DigniView service to OpenAI for modesty classification and explicit-content moderation. When the app offers Strict and Moderate modes, the selected filtering mode accompanies those pixels so the service can apply your choice. It does not send the image URL, filename, search query, page title, alt text, or surrounding webpage text.
The DigniView service does not persist image pixels. Its OpenAI Responses request sets store: false, so response application state is not retained. OpenAI states that API data is not used to train its models by default. OpenAI may still create abuse-monitoring logs containing API content and retain them for up to 30 days, unless a longer period is legally required or reasonably necessary to prevent harm. Images are scanned for potential child sexual abuse material, and flagged material may be retained for manual safety review as described by OpenAI.
Other data and retention
The service validates an Apple DeviceCheck token and, for app versions that present one, an App Store subscription transaction. It converts the random app-installation identifier and any subscription quota identifier into one-way keyed pseudonymous subjects. Raw installation and transaction identifiers are not written to DigniView logs or durable storage. Daily pseudonymous usage counters expire automatically after their short anti-abuse window. Server telemetry is limited to anonymous request and image counts, latency, status and error types, and policy version. Short-lived classifier sessions expire after ten minutes.
DigniView does not sell data, serve behavioral advertising, or track users across apps or websites. It does not require an account.
Controls and deletion
You may withdraw cloud consent at any time in Settings > Privacy Details. Withdrawal deletes the shared cloud session and stops cloud uploads. Conservative on-device protection hides detected people because it cannot assess clothing. In versions 1.0.1 and 1.0.3, this protection requires an active trial or subscription; version 1.0.2 includes it without a subscription. “Clear Local Analysis Cache” invalidates locally cached analysis decisions. Deleting the app removes app-container data subject to normal iOS backup and deletion behavior.
Safari limitations
DigniView cannot inspect Safari browser controls, other native apps, closed shadow roots, protected cross-origin frames, DRM media, or every frame of playing video. Media pixels that Safari does not make readable remain hidden when DigniView controls the element.
Contact and changes
For privacy questions, email asilvy19@gmail.com. Material changes will be reflected by updating the effective date.