Privacy Policy

1. Scope and contact

This policy explains how Qingxin Studio handles information in HushPic for iPhone and Android and on this website. For privacy questions or requests, email support@qingxin.studio.

2. Photo processing

HushPic processes only photos you choose through a system photo picker, file-opening flow, or supported system share sheet. Photo contents, OCR text, coordinates, and metadata values stay on your device and are not uploaded to Qingxin Studio or third-party SDKs. Originals are read-only.

HushPic uses system-provided selection flows for its core task. On iPhone, add-only Photos access is requested only when you choose to save a verified copy. On Android, HushPic uses the system photo picker and does not request broad photo-library or original-location access for its core flow.

3. Purchases

Apple App Store or Google Play handles payment. RevenueCat processes an anonymous app user identifier, product and entitlement information, and purchase status to provide and restore HushPic Lifetime. These services do not receive photo contents, OCR text, coordinates, or metadata values.

Starting with iOS 1.0.2, HushPic has no ads and does not include Google Mobile Ads or User Messaging Platform. Earlier iOS releases may still use those SDKs to serve ads and handle advertising privacy choices; their processing may include device identifiers, approximate network-derived location, ad interactions, and diagnostics. Update to 1.0.2 or later to use the ad-free version.

4. Crash diagnostics

Release builds use Firebase Crashlytics for crash and stability diagnostics. Diagnostic data may include device, operating-system, app-version, crash, and performance information. HushPic does not attach photo URIs, photo contents, OCR text, coordinates, or metadata values to reports.

5. Usage analytics

Starting with iOS 1.0.2 and the first Android release that includes activation analytics, Firebase Analytics measures how the privacy flow works using actions, entry points, outcomes, counts, and elapsed times. The SDK also processes an app-instance identifier, app and device information, session and purchase events, and approximate region derived from network addresses. This is not the GPS location stored in your photos. HushPic does not send filenames, photo URIs, photos, OCR text, coordinates, metadata values, or user instructions to analytics.

Advertising identifiers, IDFV collection, advertising personalization, and automatic screen reporting are disabled. AppsFlyer is included as an inactive integration and does not start without production configuration; it is not enabled in iOS 1.0.2 or the current Android analytics configuration.

6. Retention and deletion

Failed or unverified files are deleted when cleanup can run. Verified copies kept for sharing expire within 24 hours and are removed the next time HushPic has an opportunity to clean them up. Uninstalling HushPic removes its private local data according to the operating system; copies you saved to your photo library remain under your control.

HushPic does not create a Qingxin Studio account or server-side photo record. For deletion or privacy requests about third-party purchase, diagnostic, or analytics records, contact us at support@qingxin.studio.

7. Website data

The photo metadata checker reads a file you select locally in your browser. It does not upload the photo, filename, or extracted metadata values. The checker is limited to the formats and fields described on its page; it does not clean files or verify a safe copy.

This website records daily aggregate counts for page views, metadata checks started, completed or failed, App Store, Google Play, and guide CTA clicks, and 50% or 90% page scroll. Each count is grouped only by page, privacy topic, broad referring-source category, and a fixed campaign label for the link position or one of two acquisition scenes. Qingxin Studio does not store cookies, user or device identifiers, IP addresses, user-agent strings, full referring URLs, or query text in these Cloudflare D1 counters.

Ahrefs Web Analytics also measures page views, referring sources, browser and device categories, language, approximate region, and outbound-link activity. It does not use cookies or persistent cross-day identifiers. Ahrefs receives the IP address and user-agent information included in a web request, combines them with a salt that changes daily to estimate daily visitors, and states that it does not store the raw IP address. Its handling of this information is governed by the Ahrefs Privacy Policy. Website analytics does not receive photos, OCR text, coordinates, metadata values, or other content processed by HushPic or the browser checker.

Cloudflare delivers the site and stores the aggregate counters described above; it may separately process standard connection and security data needed to provide and protect the service.

8. Service providers and updates

HushPic uses Apple App Store or Google Play, RevenueCat, Firebase Crashlytics, and supported releases use Firebase Analytics for the purposes described above. This website uses Cloudflare and Ahrefs Web Analytics as described above. Earlier ad-supported iOS versions also use Google Mobile Ads and User Messaging Platform. Their handling of information is also governed by their published privacy terms. We will update this policy when product behavior, service providers, or legal requirements materially change.