Last updated September 29, 2026
BleepFace, from Tamed Malice LLC, does not collect any data from the app. Your videos and face data are processed on your iPhone and are never uploaded.
In short: no accounts, no analytics, no ads and no tracking. Purchases go through Apple. We only receive something when you choose to send it, like a support email or the diagnostics log.
Nothing, unless you choose to send it. The app has no accounts, no sign in, no analytics, and no advertising, and it sends us nothing on its own. Purchase handling, the diagnostics log you can choose to share, and support emails are described below.
Face detection, tracking, blurring, editing, and the check before saving run locally. BleepFace does not send your videos, frames, or face data to a processing server. If you share a saved video through another app, that service handles the shared copy. Your photo library may sync through iCloud Photos or another service you enable; that is separate from BleepFace processing.
You choose videos with the system video picker, which gives BleepFace only the items you select and needs no permission. BleepFace asks for add only permission to save finished videos back to your library. It never asks to browse your whole library and never changes your original videos.
Shoot uses the camera and microphone to record video with faces covered live. The app records locally and saves covered takes to Photos when you choose Save, send a take to the editor, or leave the camera with a pending take, when Photos permission allows. Local recording files are used for editing and the final sweep. While a take's card is open, BleepFace keeps an unblurred working copy inside the app so Send to editor can offer editable blurs; it never goes to Photos and is deleted when you close the card. BleepFace does not stream the camera to a server.
Only enroll people who agree to it. If you enroll a person to keep their face clear, BleepFace stores the name you enter and numerical features derived from face images locally. These features help compare faces during recording; they are not sent to us. The stored feature archive is marked to be excluded from device backups. You can remove a person from the camera’s People kept clear list, or delete all face data at any time in Tools, Delete face data, with or without Pro. Deleting the app also removes it. Face data is never shared with anyone and never used for advertising.
Secure send creates a watermarked video copy in your photo library. The recipient name or handle you enter and a unique copy identifier are used for that copy. A local history stores recipient names, copy identifiers, and creation dates. This history is included in device backups when backups are enabled. You choose how to deliver the saved copy; BleepFace does not operate a delivery server.
BleepFace Pro is sold through Apple's App Store. Apple handles payment, and the app uses StoreKit transaction information to confirm access on your device. Apple also provides developer sales and financial reporting. Apple’s privacy policy applies to Apple’s handling of this information.
BleepFace keeps a size limited local log of app events and errors. Tools → Diagnostics opens the system share sheet so you can choose to send it for troubleshooting. The logger redacts file URLs and common local file paths. It does not include video frames or stored face feature prints. Review the log before sharing; nothing is sent automatically.
If you email support, we receive your email address, message, and any attachments you choose to send. We use them to respond and troubleshoot. Please do not send sensitive footage unless it is needed and you choose to share it. Email is handled by the email services used by you and by us.
Working video copies are held locally while needed by an app workflow; the app cleans up completed or abandoned temporary files. A failed save may leave a covered take available for retry. Local diagnostics rotate as the log grows. Saved videos remain in Photos until you delete them there, including from Recently Deleted if you want to remove them permanently.
Enrolled face features remain until you remove the person. Secure send history remains in app storage. Deleting the app, rather than offloading it, removes its local app data; it does not delete saved Photos videos or copies in backups. Manage those separately in Photos and your backup settings. You can revoke camera, microphone, and photo saving permissions in iPhone Settings.
We retain support correspondence only as needed to handle the request and related follow up, or where retention is legally required. To request deletion of information you sent us or ask about withdrawing consent, email the privacy contact below. We cannot delete copies you have shared with another service or recipient.
BleepFace uses no third party analytics, advertising, or tracking, and includes no third party SDKs that collect data.
bleepface.xyz sets no cookies and runs no analytics or tracking scripts. Cloudflare, which hosts the site, processes standard request data such as IP addresses to deliver and protect it.
BleepFace is a general utility and is not directed at children.
If this policy changes, the updated version will be posted here with a new date.
Questions about privacy: support@bleepface.xyz