Privacy Policy

What the app collects

Nothing. Brizmo does not have a backend, an account system, or an analytics SDK. No usage data, crash telemetry, identifiers or personal information is transmitted from the app to us or to any third party.

The app and this website are two separate things, described separately; the website is covered in the next section. Paid features go through Apple, described under “Purchases”.

This website

brizmo.app uses Google Analytics to record anonymous visit statistics: how many people arrive, which link or search they came from, which pages they read, what device they use, and roughly which country they are in. The purpose is simple — to know whether these explanations are clear, and whether anyone is looking for an app like this.

These statistics do not identify you, and we cannot see individual visitors, only aggregate numbers. Google Analytics stores a cookie in your browser; you can refuse it through your browser's cookie settings or a tracking blocker, and the site will work exactly the same.

If you are in the European Economic Area, the United Kingdom or Switzerland, we do not set that cookie at all — the tracking code denies storage by default for those regions, leaving only aggregate counts that cannot identify anyone. That is also why this site shows you no consent banner: there is nothing here for you to consent to.

All advertising uses are switched off: this data is not used for ad personalisation and is not shared with any advertising platform. That is not merely a promise — the tracking code itself denies advertising storage outright.

All of the above happens on this website only. We see nothing of what you do inside the app.

What stays on your device

Photographs and previews received from your camera, the thumbnails generated from them, and the HDR merges and DNG files Brizmo produces are stored in the app's own storage on your iPad.

Depending on your choices in the Receive & auto-send panel, RAW originals are received from the camera into the app's storage as working copies for use on site (HDR, Lightroom handoff and sharing), or removed from the iPad once delivered to the folder you chose. Working copies are not a backup; deleting the session, or clearing RAW in the Session manager, removes them.

Your editorial decisions — star ratings, selections, edit recipes, send and export state — are stored alongside them.

After you delete a photo or a session, the app keeps a deletion record — the file name, its location on the memory card and its file size — so it can recognise that photo when receiving files. It contains no image data and is removed when you delete the app.

To recover photos you take while the camera’s Wi-Fi is briefly disconnected, the app keeps one memory-card listing snapshot for the current session: folder and file names, file sizes, the camera’s body identifier and timestamps — never the images themselves. It is deleted when you switch or delete the session; if that deletion fails, the next save overwrites it.

If you set a destination folder for “Auto-send”, the app keeps a system bookmark to that folder so it can write newly received files there; choosing a different folder or turning auto-send off retires the old bookmark.

A local diagnostic log records connection events and errors so that a problem can be investigated after the fact. It is a plain text file on your iPad.

Network access

Brizmo talks to your camera directly over your local network, using the PTP/IP connection that Canon cameras offer as [Connect to EOS Utility]. That connection exists only between the camera and the iPad and passes through no server.

Beyond that, the only external service the app contacts is Apple's App Store, for in-app purchases and for confirming purchase status (see “Purchases”).

Your photographs are not uploaded anywhere. There is no cloud sync, no remote backup, no analytics endpoint, and no Brizmo server.

Purchases

Brizmo's paid features are offered through Apple's in-app purchase, as a subscription or a one-time purchase. Payment, receipts, trials, renewals and refunds are all handled by Apple; we never receive your payment details, Apple Account or name.

The app only asks Apple whether a valid entitlement currently exists, to decide whether paid features are available. “Restore purchases” is likewise a request to Apple, not to us. To manage or cancel a subscription, use Subscriptions under your Apple Account in the iPad's Settings.

When something does leave your iPad

Only when you choose to send it. The features that move files out of the app are the following — each one is started by you, and you choose the destination:

“Auto-send” writes newly captured files, in the formats you chose (JPG and/or RAW), into the folder you selected. That folder can be on the iPad itself, in iCloud Drive, or in any location you have connected in the Files app (a shared folder on a computer or NAS, for example); once a file is written there, that location's own rules apply.

The share sheet, which hands a photograph, RAW or DNG file to another app (such as Lightroom), AirDrop, Mail, or Save to Files.

Session export, which writes your session and its ratings to a single JSON file; “Report a problem”, which bundles the diagnostic log and device details into one text file; and connection log export.

In every case the file goes to the standard iOS share sheet or to the folder you chose, and ends up wherever you send it. Brizmo does not transmit any of them on its own.

If you email a problem report to us, it will contain: the app and iPadOS versions, the iPad model, the network state at the time, the local IP addresses of this iPad and the camera, the name and identifier the camera announces on the local network, the current session's name and photo count, and the recent connection log (requests, file names, timestamps, error messages). If a crash or hang occurred earlier, it also includes the system's diagnostic for it (crash type, termination reason, call stack). It does not contain your photographs, account details or location.

Children

Brizmo is a professional photography tool and is not directed at children. It collects no data from anyone, of any age.

Deleting your data

Delete a session inside the app to remove its photographs, RAW working copies and decisions, leaving only the deletion record described above; or delete the app to remove everything at once. Because nothing is stored off the device, there is no account to close and nothing for us to delete on your behalf.

Files already auto-sent or shared outside the app are not affected; delete them at their destination. Purchase records are kept by Apple under your Apple Account.

Changes

If this policy changes, the effective date above changes with it. Material changes will be noted on this page.

25 October 2026: for the app’s new reconnect recovery, added a memory-card listing snapshot kept for the current session only (folder and file names, file sizes, body identifier, timestamps), deleted when you switch or delete the session. The app still never sends any data on its own.

22 October 2026: updated for the app's new way of receiving files — RAW files can stay on the iPad as working copies or be removed once delivered, a deletion record (file name, card location, file size) kept after deleting photos is now described, and “Auto-send” now sends the formats you choose. The app still transmits nothing on its own.

11 September 2026: the policy was brought up to date with the current product — the connection is now described as the camera's [Connect to EOS Utility] (PTP/IP), a “Purchases” section covers Apple in-app purchase, the destinations of “Auto-send” and the share sheet are spelled out, and the problem report's contents now list the camera's name and identifier and crash diagnostics. The app still transmits nothing on its own.

17 August 2026: this website began using Google Analytics to record anonymous visit statistics, and a "This website" section was added to describe it. Nothing changed in the app, which still collects nothing at all.

Contact

Questions about this policy can be sent to the address below.