Last updated: August 31, 2026
The short version: we collect nothing, transmit nothing, and see nothing.
All AI enhancement runs entirely on your device using Apple's Core ML. ZoomFix makes no network connections. Photos you capture or pick are processed on your phone and written to storage only when you tap Save — to your photo library, or to your Private Library if you have turned that on. They are never uploaded, analyzed remotely, or shared.
If you turn on ProRAW capture, ZoomFix records Apple ProRAW sensor data instead of a finished photo and develops it on your device with Core Image before enhancing it. This changes only how the picture is processed, not where: the RAW data is held in memory, never written to a shared location, and never leaves your phone.
An enhanced photo keeps the original's details — the date and time it was taken, the camera and lens, and the location, if your original had one. This is so a rescued photo files itself next to the day it belongs to instead of appearing as though you took it today.
Worth knowing: it means an enhanced photo carries the same location information the original did. ZoomFix never reads, collects or transmits that data — it is copied from your file to your file, on your device — but if you share the photo, you share its details too, exactly as you would when sharing the original. iOS lets you strip location as you share, from the Options row at the top of the share sheet.
Nothing. No accounts, no analytics, no advertising, no tracking, no third-party SDKs.
Camera access is used only to take the pictures you ask for. ZoomFix never browses your photo library on its own, and it never asks for full library access.
Photo library access is add-only — enough to save an image when you tap Save or Export, and nothing more. When you pick a photo to fix, or import photos into your Private Library, iOS shows you its own picker, which runs outside ZoomFix; the app receives only the specific images you chose and no permission prompt is needed. Importing copies those photos into the Private Library: your originals stay in Apple Photos, and ZoomFix never deletes, moves, or modifies anything in your library.
With “Save photos privately” turned on, photos and videos you save are written inside ZoomFix’s own app container instead of your system photo library. Files there are encrypted at rest by iOS Data Protection, which ties the encryption key to your device passcode. Because they are never added to Apple Photos, they are not indexed by Photos, not available to Apple Intelligence or Visual Look Up, and not readable by any other app on your device. The before/after card for a saved photo is kept there alongside it, so “Share Comparison” still works later; it is deleted with the photo.
Two limits we want to be plain about. First, Data Protection is only as strong as your device passcode — if no passcode is set, iOS cannot meaningfully encrypt the files. Second, this library lives inside the app: deleting ZoomFix deletes it too. You can copy any item out at any time with Export to Photos or Share, and you can choose whether the library is included in your iCloud device backup (it is excluded by default, so no copy leaves your phone).
You can optionally require Face ID, Touch ID, or your passcode before the Private tab will open. ZoomFix never receives your biometric data; iOS only tells the app whether authentication succeeded.
If you write to us from Settings, the message is pre-filled with your ZoomFix version, iOS version, and device model so we can reproduce bugs. No photos, identifiers, or personal data are attached, and nothing is sent until you tap Send in your own mail app.
ZoomFix Pro is a one-time purchase handled entirely by Apple. We receive no personal information from the transaction.
If you record a video, the microphone's audio goes into that video and nowhere else. The video is saved to your photo library only when recording finishes, and it never leaves your device through ZoomFix.