Your photos. Your choices.

Privacy policy

Effective October 11, 2026. This policy describes the website and current development builds. We will update it before enabling cloud Group Trips.

Who operates Ghosted

Ghosted is operated by Cody Tuma Enterprises LLC. Contact us at [email protected] for privacy questions or requests. This policy covers the Ghosted iPhone app and ghostedphotos.com.

Photos and on-device processing

With your permission, Ghosted accesses the photos and videos you allow through iOS. It uses thumbnails, dates, existing photo locations, and other library metadata to organize your library, suggest trips, find similar items, and show cleanup tools. Your keep and ghost decisions, game progress, preferences, and local trip demonstrations are stored on your device.

The current Group Trips experience is a local demonstration. It does not upload trip photos to a Ghosted server. Photo uploads, guest accounts, and cross-phone voting will be covered in an updated policy before those services become available.

Faces and the Ghost Vault

Ghosted can count faces in small photo thumbnails on your device to prioritize photos with people. It does not identify people by their faces or create face-recognition templates. People tags are entered by users.

The Ghost Vault keeps copied media and its metadata inside the app’s storage, using iOS file protection and device authentication. Face ID, Touch ID, or passcode verification is handled by iOS; Ghosted does not receive your biometric template or passcode. Device backups may retain app data according to your Apple settings. Restore or export vault items before deleting the app if you want to keep them.

Apple services and social features

When Pals synchronizes through iCloud, it stores your invite code, display name, ghost outfit, level, stage, weekly XP, streak, friend codes, and recent Boos with timestamps in Apple CloudKit’s public database. Treat those social fields as public app data, even where the interface displays them only to friends.

Game Center receives scores and achievement-related activity used for leaderboards. Apple handles App Store purchases; Ghosted uses transaction and entitlement information to unlock purchases and does not receive your payment-card details.

To label a trip or memory with a place name, the app can send coordinates from existing photo metadata to Apple Maps for reverse geocoding. It does not need continuous device-location tracking for that feature.

Sharing and nearby discovery

When you choose to share a card, memory, invite, or challenge, the destination app and recipients receive what you share. Invite links can contain your code, display name, outfit, and challenge data. Anyone holding a link can read those details, and websites or browsers may record URLs. Nearby discovery exchanges ghost-profile information with participating devices. Recipients can keep copies of shared material.

Invite links

When someone opens an invite link, we count the visit using a one-way hash of the IP address that changes daily. No cookies, no tracking across sites, and no raw IP addresses are stored. Along with the visit we record the link’s code, its share and campaign tags, and which app it was opened in (for example TikTok or Instagram), so the person who shared it can see how many people opened it and joined.

The leaderboard shows your ghost name and how many friends joined, and you can turn it off in the app.

App usage check-ins

When a build connects to Ghosted’s online services, the app sends usage check-ins to our Supabase-hosted backend when you open or return to the app and when it moves to the background. These check-ins are linked to your Ghosted account ID, including an automatically created anonymous account, so they are not anonymous aggregate data.

Check-ins include activity dates and session counts; totals for photos reviewed, kept, or ghosted and space freed; your streak, level, number of Pals, and plan tier; and your app version, iOS version, device model, and region setting. The region comes from your device settings, not GPS. Check-ins do not include photos, videos, photo metadata, individual photo decisions, names, or precise location.

We use these records to understand app activity, retention, feature use, and plan adoption and to improve Ghosted. They are available through a restricted administration dashboard and are not used for advertising or tracking across other companies’ apps or websites. Supabase processes this information to provide our backend services. We retain account-linked usage records while needed for these purposes and handle access or deletion requests through the contact details below. Deleting the app or resetting local progress does not itself delete these server records.

Website and service information

Our website is hosted by Cloudflare and contains no advertising or analytics scripts. Cloudflare may process IP addresses, requested URLs, and technical information to deliver and protect the site. Its handling is described in Cloudflare’s privacy policy. If you email support, Google processes your message through Gmail and we use its contents to respond to and resolve your request. Please do not email passwords or sensitive photos. We keep support correspondence as needed to handle requests, maintain service records, and meet applicable legal obligations.

Your controls and retention

You can change Photos, Camera, Local Network, and Notifications permissions in iOS Settings. Local app data stays until removed by the app, reset where supported, or deleted with the app; backups and exported copies may remain. Resetting game progress or deleting the app does not necessarily erase CloudKit social records, Game Center activity, or Apple purchase records.

You can request access, correction, or deletion of information we control by emailing [email protected]. Include your Ghosted invite code if the request concerns a social profile. We may ask for information needed to verify the request. Applicable law may provide additional rights, and certain records may be retained where required by law or necessary to resolve disputes. Apple controls its own account, purchase, and Game Center records. An in-app cloud-account deletion feature is not yet available in development builds.

Changes

We will update this policy when Ghosted’s data practices change and provide additional notice where required. The effective date above identifies the current version.