Privacy Policy.

The short version.

Standby Booth runs entirely on your iPad. We do not operate a server. We do not embed advertising. Recordings live on your device until you decide to share them. As of version 1.3.2 the app includes Google's Firebase Analytics for anonymous usage statistics (which screens are used, on what device model) so we can improve the app — it is never linked to your identity, never used for ad tracking, and never touches your recordings or event content. Details in "In-app analytics" below.

The rest of this page is the formal version — the same posture, broken out into the sections a privacy review expects.

Who we are.

Standby Booth ("the app") is published by Kai Ventures. You can reach a human at support@standbybooth.com with any privacy question, request, or concern.

What the app doesn't collect.

To be specific about data collection in the iPad app:

• No personal information. We don't ask for your name, email, phone, address, or birthday.
• No recordings or content ever leave the device through us. Guest videos, prompts, scripts, and event configuration are never uploaded to us or to any analytics tool.
• No advertising IDs. We don't read your IDFA, and analytics is never used for ad tracking.
• No location data. The app never asks for location and never reads it.
• No contacts, calendars, or reminders.
• No device fingerprinting, no cross-app tracking, no cross-app correlation.
• No remote logging of your content. Crash reports stay on the device unless you choose to share them with Apple via the standard iOS setting.

In-app analytics

As of version 1.3.2 the app includes Google Firebase Analytics to collect anonymous usage statistics: which screens are visited, feature usage counts, session length, device model, and OS version, keyed to a random per-install identifier. It is configured with no advertising features and no IDFA access; the data is "not linked to you" in App Store privacy-label terms, is used only to understand which features matter, and never includes recordings, prompts, scripts, or anything a guest does in front of the camera.

The website (standbybooth.com) has a separate, narrowly-scoped analytics setup — described below in "Website analytics". That tool runs only in your browser when you visit this site; it never runs inside the iPad app.

What the app uses on your device.

iOS asks you to grant permission for these because the app needs them to function. All data they touch stays on the iPad:

Camera

Required to record video. Video is written to your iPad's local storage. We have no access to it.

Microphone

Required to record audio with your video. Same locality rules.

Photo Library

Required only if you set "Photos library" as the storage destination in admin. The app saves recordings to your Camera Roll using Apple's standard PHPhotoLibrary API.

Local Network

The app declares this permission for AirDrop and peer-to-peer file transfer to nearby devices. AirDrop is system-managed by iOS; the app does not perform its own network scanning.

Storage destinations.

Standby Booth supports three storage options for guest recordings, chosen by the admin in the admin panel:

• iPad local storage — recordings live in the app's sandbox. iOS reclaims them when the app is deleted.
• Photos library — recordings save to the Camera Roll via Apple's PHPhotoLibrary API. They are subject to your iCloud Photos settings, if enabled.
• USB-C external drive — recordings copy to the connected drive. The app uses iOS security-scoped bookmarks; we never see the drive contents.

In each case, the recording never traverses a server we operate. If you AirDrop a recording to another device, AirDrop is peer-to-peer over Bluetooth/WiFi between your two devices — nothing goes through us.

In-app purchase.

Standby Booth Pro is a one-time, non-consumable in-app purchase via Apple's StoreKit. Apple handles the entire payment flow. We do not see your payment method, billing address, or any other identifying information about you. We receive only a verified entitlement receipt from Apple confirming you have purchased Pro — and that receipt is stored in the iOS Keychain on your device.

Refunds, cross-device restoration, and family-sharing eligibility are managed by Apple. Apple's privacy policy applies to the payment transaction.

Required Reason APIs.

Apple requires apps to declare why they use certain on-device APIs. The app's PrivacyInfo.xcprivacy manifest declares the following, all for legitimate on-device functionality:

• UserDefaults (reason CA92.1) — to store the USB-C drive bookmark and the local file-naming sequence counter.
• File timestamp (reason C617.1) — to read file size attributes after writing a recording.
• Disk space (reason E174.1) — to check available space before starting a long recording, so a 5-minute take doesn't fail halfway through.

None of these touch personal information; all reads stay on-device.

Website analytics & measurement.

This website (standbybooth.com) uses three browser-based measurement tools — loaded after consent where required — so we can understand how many people find the site, which pages they read, and whether our ad campaigns are working. They run only in your browser when you load a page on this site; none of them run inside the iPad app, which remains fully offline.

1. PostHog — anonymous pageview analytics

PostHog tells us basic visitor patterns — which pages get visited, referrers, and roughly which country a visitor is in. It collects pageview events, an anonymous randomly-generated session ID, your browser/OS/screen size, and your IP address (used to derive a country/region, then discarded — we never store the raw IP). We configure it with person_profiles: 'identified_only' and never call identify(), so it never builds a profile tied to who you are; session recording, keystroke logging, and DOM capture are disabled entirely; and it honors the Do Not Track signal.

2. Google Analytics 4 — aggregate traffic measurement

Google Analytics (gtag.js) gives us aggregate traffic and engagement metrics (pageviews, sessions, scroll depth, approximate location from IP, device and browser type). To do this it sets first-party cookies scoped to standbybooth.com and generates a random client ID, and sends this data to Google, whose handling is governed by Google's privacy policy. We do not link it to your name or any account, and we do not use it to build advertising profiles of you.

3. Meta Pixel — ad measurement

The Meta (Facebook) Pixel lets us measure whether visits to this site came from our Meta ad campaigns. It records a pageview event and may set Meta cookies; the data it sends is governed by Meta's privacy policy and may be used by Meta for ad measurement and targeting. This is a marketing/advertising pixel — we use it solely to understand campaign performance, not to identify individual visitors ourselves.

Your choices

If you're visiting from the EEA or the UK, a consent banner appears on your first visit — and none of the analytics or ad-measurement tools above load before you press Accept. Press Decline and nothing loads at all. You can change your mind at any time via the "Privacy choices" link in the footer of every page, which clears your saved choice and shows the banner again. We continue to honor the Do Not Track (DNT) browser signal for PostHog, and any ad/tracker content blocker still works (most block Google Analytics, Meta Pixel, and PostHog by default). You can also block the hosts directly: us.i.posthog.com, www.googletagmanager.com / www.google-analytics.com, and connect.facebook.net. Blocking any or all of them has no effect on the site's functionality.

Third parties.

The app embeds one third-party SDK: Google Firebase Analytics (Firebase privacy documentation), scoped as described in "In-app analytics" above. The website embeds three, all described in "Website analytics & measurement" above: PostHog (posthog.com/privacy), Google Analytics (Google's privacy policy), and the Meta Pixel (Meta's privacy policy).

If we add an optional Google Drive storage destination in the future, signing into Google Drive would trigger Google's SignIn SDK, and your interaction with Google would be governed by Google's privacy policy. We would only receive an OAuth token, stored in your iPad's Keychain, to write recordings into your own Drive folder.

Children's privacy.

Standby Booth is appropriate for users of any age, but the app itself does not knowingly collect any personal information from anyone — including children under 13. If you believe a child has shared information through the app, please contact us at support@standbybooth.com. We will respond promptly.

Your rights.

Because we do not collect personal data, there is nothing in our possession to disclose, correct, port, or delete. If you have used the app to record guests at an event, those recordings are on your iPad — you control them entirely. You can delete them from the Photos library or the Files app on your iPad at any time.

Residents of jurisdictions with specific data-protection rights (GDPR, CCPA, others) — your rights are preserved by the fact that we hold no data about you. If you have questions, email us.

Changes to this policy.

If we update this policy, the effective date at the top will change. Material changes — for example, if we ever add a server-side component — will be announced in the app and on the Standby Booth home page before they take effect.

Contact.

Questions, concerns, or requests: support@standbybooth.com. We read every reply.