Last updated 29 September 2026

Privacy

This policy covers the Sundry Mill mobile apps, Photo Privacy, Wayvl for Android and Stowbook, and this website, sundrymill.com. Our desktop apps and web tools (Framok, Qulok, novrl, Reyoy, Puplr and Wayvl on the web) each have their own policy on their own site.

Who we are

Sundry Mill is a small software studio. We publish the mobile apps Photo Privacy (iPhone and Android), Wayvl for Android and Stowbook (iPhone and Android), and we make Framok, Qulok, novrl, Reyoy, Wayvl and Puplr. In this policy, "we" and "us" mean Sundry Mill. You can reach us at support@sundrymill.com.

What the apps never collect

None of our mobile apps has an account, so we never ask for your name, email address or phone number. We do not collect, receive or store:

• your photos, screenshots, recordings, audio or video files, or anything you make from them;
• the details inside your files, such as the place a photo was taken;
• your home inventory: items, photos, receipts, manuals, prices, serial numbers or notes;
• your location, contacts or browsing history;
• your phone's advertising identifier.

We have not added analytics, advertising, crash reporting or tracking tools to the apps, and they show no ads.

What happens on your phone

Each app processes your files on your phone, inside the app. What you open, record or add is kept in the app's own private storage, which your phone keeps apart from other apps, or in temporary files the app clears. A file leaves the app only when you save it to your gallery or files, or choose to share it. Once you share or save a file to another app or service, that app or service's own terms apply.

The sections below say what each app does and keeps.

Photo Privacy

Photo Privacy removes hidden details from photos, such as location, device, date and edit history, and covers private parts of screenshots before you share them. It is available for iPhone and Android.

On your phone

• The app opens only the photos you pick, or the photo you send to it from another app's share button. It reads the details inside them, shows you what it found, and saves or shares a cleaned copy.
• Auto detect finds names, email addresses, phone numbers, card numbers, other text and faces, so you can cover them. It runs on the phone: on iPhone with Apple's Vision framework, and on Android with Google ML Kit models built into the app. Your photos, and the text and faces the app finds in them, are never sent anywhere.
• Photos are handled in the app's memory and in temporary files that are deleted after you save or share. The app keeps no history of the photos you cleaned.

What it keeps

• Settings, such as your default box style and HEIC output, and the dates the app last asked you for a rating, in the app's own storage.
• My details, the words you want found in screenshots (for example your name, street or workplace), in the phone's secure storage (the Keychain on iPhone, Keystore protected storage on Android). You can edit the list or remove every entry in Settings.

Deleting it

Deleting the app deletes its settings. On iPhone, items in the Keychain can outlive the app, so clear My details in Settings first if you want that list gone too. The app opts out of Android's app backup. On iPhone, your own iCloud or computer backup may include the app's settings. Photo Privacy never asks for access to your whole photo library, so it cannot delete your original photo; it shows you how to delete it yourself in your photos app.

Wayvl for Android

Wayvl for Android turns audio into a waveform video on your phone. The Wayvl website at wayvl.com has its own policy.

On your phone

• Recordings you make in the app, and audio or video files you open or share into it, are decoded, analysed and turned into a video on the phone.
• Cover art, images, logos and fonts you add are used on the phone.
• A finished video goes to your gallery (Movies, Wayvl) only when you tap Save, and to another app only when you tap Share and pick one.

What it keeps

• Your last look and settings, your saved brand kits (Pro), a list of your last five exports with a small preview, and whether Pro is unlocked, in the app's own storage.
• Files being imported or exported sit in the app's cache while it works on them.

Deleting it

Uninstalling the app removes what it keeps from the phone. Videos you saved stay in your gallery until you delete them. Wayvl allows Android's own backup, so if backup is on for your Google account, the settings, brand kits and recent list above can be included in it and come back after a reinstall. The cache is never included.

Stowbook

Stowbook is a private record of the things in your home, with warranty reminders and an insurance ready PDF. It is available for iPhone and Android.

On your phone

• Your homes, rooms and items, with their names, brands, models, serial numbers, barcodes, prices, values, dates, warranty details and notes, are kept in a database in the app's private storage.
• The photos, receipts and manuals you add are copied into the same private storage. Photos taken in the app stay in the app, and are added to your photo library only if you export them.
• Barcodes are read on the phone and are never looked up online.
• Warranty reminders (Pro) are local notifications that your phone schedules itself. Nothing is sent to a server, and the app does not register for push notifications.
• App Lock is optional. When it is on, your phone checks your face or fingerprint, and the app only learns whether the check passed. It never receives your face or fingerprint data.
• The insurance PDF is made on the phone and goes somewhere else only if you share, save or print it.

Backups you make

You can export a CSV file or a full backup as a zip file, and you choose where it goes, for example the Files app, Google Drive or email. Stowbook never uploads them on its own, and we never receive them. Backup files are not encrypted and they contain your photos, receipts and item details, so keep them somewhere you trust.

Deleting it

You can edit or delete any item at any time; deleting an item deletes its files and cancels its reminders. Deleting the app deletes everything in it, so make a backup first if you want to keep your inventory. The app opts out of Android's app backup, because that backup is too small to hold photos and manuals. On iPhone, your own iCloud or computer backup may include the app's data. Backup files you saved elsewhere stay there until you delete them.

Purchases and RevenueCat

Each app is free to download, with an optional Pro upgrade bought once through the Apple App Store or Google Play. Wayvl for Android is sold through Google Play only.

• Payment. Apple or Google takes the payment and handles your store account under its own privacy policy. We never receive your card details, name or email address from them.
• The purchase check. To unlock Pro and restore it on another phone, the apps use RevenueCat, Inc., which checks purchases with Apple and Google for us. RevenueCat creates a random, anonymous app user ID for your copy of the app. It is not linked to your name, email address or any other account.
• What RevenueCat receives. When the app starts, when you buy Pro and when you tap Restore Purchases, the app sends RevenueCat that anonymous ID and the purchase records for the app from the store, such as the product, the transaction or order number, the store receipt or purchase token, the price and currency, and the date. Like any internet request, this also carries basic technical details, such as your IP address, the app version and your phone's operating system.
• What we use it for. Only to unlock and restore Pro and to answer purchase questions you send us. In RevenueCat we see anonymous IDs and the purchases made under them, never who you are. The check travels over an encrypted connection (HTTPS).
• How long it is kept. Purchase records are kept while they are needed to provide and restore Pro, or until you ask us to delete them.

Their policies: RevenueCat, Apple and Google.

Permissions

Each app asks for a permission only at the moment it first needs it, says why in one sentence, and keeps working if you say no. You can change any answer later in your phone's settings.

Photo Privacy

• Choosing photos: the system photo picker, which needs no permission. The app receives only the photos you pick and never browses your library.
• Saving photos: on iPhone, add only access, asked the first time you save. The app can then add new photos but cannot see or change the ones you have. On Android 10 and later, saving needs no permission. If you decline, you can still share the cleaned copy.
• Not used: camera, microphone, location and contacts.

Wayvl for Android

• Microphone: asked when you first tap Record, and used only while you record. Without it, you can still open files.
• Files: the system file picker and the share button of other apps, which need no permission. The app receives only the files you choose.
• Saving videos: added to Movies, Wayvl, which needs no storage permission on Android 10 and later.
• Internet: used for the purchase check only.

Stowbook

• Camera: asked the first time you open the camera in the app, to photograph your belongings and receipts and to read barcodes. Without it, you can add photos from the picker, or none.
• Photos and documents: the system pickers, which need no permission. The app receives only the files you choose.
• Notifications: asked when you turn on warranty reminders (Pro), or save your first warranty date with reminders on. Without them, your warranty dates still show in the app.
• Face ID or fingerprint: used only if you turn on App Lock.

Your requests

There is no account, and we hold none of your files, so there is little for us to show you or delete. Your data in each app is yours to edit or delete on the phone, as described above. To ask about, or delete, the RevenueCat record of a purchase, email support@sundrymill.com with the order number from your store receipt (Apple's receipt email shows it; Google Play order numbers start with GPA.), since the ID is anonymous and that is how we find it. Your purchase stays with your Apple ID or Google account, so you can still restore Pro later.

This website

This part covers sundrymill.com and its forms.

What we collect

Only what you type into a form, plus the minimum needed to keep spam out.

• Build enquiries: your idea, what it should do, your budget band and timeline, your name and email, and that you agreed to us keeping them to reply.
• Support messages: the app, whether it is an issue, a question or a suggestion, the app version if you gave it, your message, and your email if you gave it.
• Mac waitlist: your email, the app and platform you asked about, whether you said yes to news from Sundry Mill, and which site you signed up on. The same list is used by framok.com and qulok.com.
• A spam check: with each form we store a salted, one way hash of your IP address so we can limit how often one place can send. We cannot turn the hash back into the address, and we never store the address itself.
• Page views: we use Vercel Web Analytics, which counts visits without cookies and without identifying you.

There are no advertising or tracking cookies on this site. If you switch between the light and dark look, that choice is kept in your own browser and never sent to us.

Why we use it

• To reply to your enquiry or support message, and to fix and improve the apps.
• To email you once when a Mac version you asked about is ready.
• To send news about new Sundry Mill apps, only if you ticked that box. Every such email has an unsubscribe link.

We do not sell your details, and we do not share them with anyone except the services below that run this site for us.

Who handles it for us

• Vercel hosts the site and runs the forms.
• Supabase stores what the forms send.
• Resend delivers our emails, including the copy of your message we send back to you.
• Pinterest receives the pins we publish to our own accounts (see Pinterest below).

Pinterest

Sundry Mill Publisher is our own tool for scheduling pins to our own Pinterest accounts, Puplr and Sundry Mill, through the Pinterest API. Only Sundry Mill uses it; it is not offered to anyone else, and it never reads or changes anyone else's Pinterest account.

• What it keeps: when we connect one of our accounts, Pinterest gives us access tokens. We store them encrypted in Supabase, with the account's username and when they expire, and use them only to read our own boards and to create boards and pins on our own accounts. For each pin we keep whether it was approved, when it was posted and its Pinterest pin id.
• What it does not collect: nothing about the people who see, save or click our pins. Links from our pins carry a campaign tag so our own analytics can count visits from Pinterest, without identifying anyone.
• Removing it: the access can be revoked at any time in Pinterest's settings, and we delete the stored tokens when an account is disconnected or when asked through the support page.

How long we keep it

Support messages and enquiries are kept while they are useful for helping you, then deleted. A waitlist entry is deleted after we have told you the Mac version is out, unless you asked for news, in which case you stay on the news list until you unsubscribe.

Your choices

Email support@sundrymill.com, or use the support page (any app, then Ask a question), to see what we hold about you, to correct it, or to have it deleted. We will do it and confirm by email. Replying to any email we sent you works too.

Children

The apps and this website are for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, email support@sundrymill.com and we will delete it.

Changes

If this policy changes, the new version goes on this page with a new date at the top. If a change affects what leaves your phone, we will also say so in the app's release notes.

Contact

Sundry Mill · support@sundrymill.com · sundrymill.com