Effective 5 September 2026
fatto. is made by ClearVista, a small software studio in California. The app is built to keep your photographs on your device. That choice makes this page short: in almost every case we cannot see your information, because it never reaches us.
Photographs are made in the app and kept on the device. There are no accounts, no servers of ours, and no analytics or advertising code in the app.
Backing up to iCloud is on by default. It writes to the private database of your own iCloud account, which we have no access to. Turning the switch off stops new copies going up. What has already reached your iCloud stays there, in your own account, until you remove it.
If you allow location, it is read only while the camera is open, and it is written into the photograph's own metadata the way any camera records it. Declining changes nothing else about how the app works.
Nothing is written to your photo library unless you ask for it, either by saving a single photograph or by turning on the switch that keeps originals in Photos.
The app's own network activity is two things, both Apple's. CloudKit carries your moments to the private database of your iCloud account and back. StoreKit asks the App Store, at each launch, for the prices and for whether a subscription is active on this device, and carries a purchase when you make one. There is nothing else, and no server of ours anywhere in it.
A purchase is handled by Apple end to end. We receive no card number and no identity from it, only the fact that a subscription is active on the device.
Face ID, where the lock or a private moment uses it, is the device's own authentication. The app asks iPhone whether it was you and receives yes or no. No biometric data reaches the app, and none reaches us.
A reminder is a local notification. It is scheduled on the device, it arrives from the device, and it never travels.
A private moment is hidden on the device by blur and Face ID. It is not encrypted differently from any other moment, and it is backed up like any other.
Downloads and subscriptions run through Apple, under Apple's own privacy policy. Apple shows us aggregate numbers about our apps. It does not show us who you are.
If you write to us at [email protected], we receive your address and whatever you send, and we use them to reply. We do not keep mailing lists.
When this page changes, the date at the top changes with it.