Privacy Policy for IC Photo Singapore

Effective date: 6 October 2026

IC Photo Singapore ("IC Photo") is a camera utility for making Singapore IC and passport-style photos. This policy explains what happens to information when you use the app or visit its website.

Who is responsible

IC Photo is provided by Tinkertanker Pte. Ltd. (UEN 201200143H), 59 Jalan Pemimpin, #04-01 L&Y Building, Singapore 577218 ("Tinkertanker", "we", "us").

For privacy questions or requests, email hello@tk.sg.

Your photos stay on your device

IC Photo processes camera frames, captured photos, face and composition measurements, background adjustments, crops and photo metadata on your device. The app does not upload or send any of them to Tinkertanker, Google AdMob or an advertising partner.

The app asks for:

Working images remain in the app only as long as needed for the current photo flow. Tinkertanker does not receive or keep a cloud copy. If you save, share or email an image, iOS sends it to the library, person, app or service you choose. That destination handles the image under its own privacy terms. If you deliberately attach a photo to a support email, we will receive that attachment; IC Photo never adds one to an advertising report automatically.

Information stored locally

IC Photo stores small preferences on your device, such as whether onboarding is complete and your capture-timer choice. It has no user accounts or cloud photo storage. Tinkertanker does not receive these local preferences. You can remove them by deleting the app; iOS may handle device backups according to your Apple settings.

Advertising

IC Photo may display one clearly labelled, fixed-size banner supplied by Google AdMob after a photo has finished processing on the Review Photo screen. The same loaded banner may move to the successful-save confirmation. The app does not show an ad during onboarding, permission requests, capture, processing or errors, does not refresh the banner automatically, and makes at most one banner load attempt in an app process. If advertising is disabled, unavailable or not permitted by your privacy choice, the app works normally without the banner.

IC Photo sends ad requests directly to Google AdMob. We do not use an ad request for advertising profiles or general app analytics.

IC Photo asks Google to treat every ad request as non-personalised and turns off Google's publisher first-party identifier. We do not provide Google with demographic or behavioural categories, precise location, a publisher user ID, or information about your photo, face, camera activity or activity in other apps. We ask for advertising rated by Google for general audiences.

Non-personalised does not mean that no information is processed. Google says that non-personalised ads are not chosen using a person's past behaviour, but may use current context and coarse location, such as city-level location estimated from an IP address. Where allowed by your consent and the law, mobile or app-scoped identifiers may still be used for purposes such as frequency capping and aggregated ad reporting.

IC Photo does not request App Tracking Transparency permission, so it does not receive permission to access the Identifier for Advertisers (IDFA) for tracking. Google states that its Mobile Ads SDK may nevertheless collect or process some of the following, depending on the device, region, consent choices, SDK configuration and ad that is served:

Google and eligible ad partners may use this information to deliver the banner, apply your privacy choices, limit repeated ads, measure and report advertising, detect and prevent fraud or abuse, maintain security, and operate and improve their services. IC Photo's non-personalised instruction tells Google not to use the request to personalise ads or update an advertising-personalisation profile. It does not prevent processing needed for the other purposes just listed.

The exact partners and purposes available in Europe are shown in Google's consent form before you make a choice. For more detail, read:

Consent and privacy choices

In the European Economic Area, United Kingdom and Switzerland, IC Photo uses Google's User Messaging Platform (UMP), a Google-certified consent management platform, when required. The form identifies the ad partners and explains the purposes for which they ask to use or store information. You can Consent, Do not consent, or Manage options. The core photo features do not depend on your choice.

If you do not consent, IC Photo does not ask Google to load an ad. Although Google supports other restricted ad-serving modes in some circumstances, IC Photo does not rely on them after a decline.

You can revisit an applicable choice from Ad choices in the app and then Privacy choices. IC Photo asks UMP whether this entry point is required for your current region and status. UMP presents the current form when it is required. A changed choice is checked before any later eligible request; because IC Photo permits only one load attempt in a process, the practical effect will usually be visible in the next app session. You may also use Google's My Ad Center for choices that apply to your Google account and Google ads generally.

Where consent is legally required, our basis for the relevant advertising or local-storage processing is that consent. You may withdraw it without affecting processing that was lawful before withdrawal. Where local law allows this limited, non-personalised processing without consent, we rely on our legitimate interest in funding the app and in securing and measuring its single ad placement, subject to your rights and Google's separate legal bases described in its privacy information.

Reporting an inappropriate ad and contacting support

The app lets you prepare an email to hello@tk.sg about an inappropriate or age-inappropriate ad. The prepared report includes only:

The app never adds your photo or an advertising identifier to this report. Your email provider processes the message in order to deliver it. We use the report to investigate, respond, block or escalate the ad, and keep the app safe. We use other support correspondence to answer your request and maintain the service.

We delete support and inappropriate-ad emails, including response IDs and any attachments you deliberately add, within 12 months after the case is closed. We may retain a particular record longer only while reasonably needed for an unresolved dispute, abuse or security investigation, or a legal obligation.

Website and service providers

Cloudflare delivers the IC Photo website and privacy page and protects them from abuse. Cloudflare may process ordinary web request information, such as IP address, browser and device headers, requested URL, and date and time, to deliver and secure its service. The website contains no analytics, advertising, external fonts or consent-requiring scripts added by Tinkertanker, and it has no custom request logging or user database.

We require providers that receive data through the app or this site to protect it consistently with their terms, our agreements and applicable law. Their own notices give further details:

International processing

Tinkertanker is in Singapore. Google, Cloudflare and the ad partners listed in the European consent form operate internationally, so technical, consent, support or advertising information may be processed outside your country. The destination's laws may differ from yours. The relevant provider is responsible for the safeguards that apply to its processing. Google describes its transfer mechanisms, including adequacy decisions, data privacy frameworks and standard contractual clauses, in its data-transfer information.

Google may act as a separate controller for parts of its advertising processing under its terms; it is not accurate to describe every Google activity as being performed only on Tinkertanker's instructions. The European consent form and Google's privacy information identify its purposes and controls.

Children

IC Photo is a general-audience utility. It is not designed primarily for children and is not offered in the App Store's Kids Category. The app does not ask for a person's name, date of birth or age. We request only non-personalised, general-audience-rated ads and do not send a child-directed treatment signal merely to obtain different advertising.

If you are a parent or guardian and believe a child has deliberately sent personal information to our support address, contact us so that we can delete it where appropriate.

Your rights

Depending on where you live, you may have rights to ask for access, correction, deletion, restriction or portability of personal information, to object to certain processing, to withdraw consent, and to complain to your local data protection authority.

Email hello@tk.sg to exercise a right concerning information held by Tinkertanker. There is normally no Tinkertanker copy of your photo or local preferences for us to retrieve or delete. You can delete local preferences by deleting the app, remove exported photos through Photos, change app permissions in iOS Settings, revisit UMP choices as described above, and ask us to delete support correspondence subject to any necessary legal hold. For information controlled by Google, use the controls and contact routes in Google's Privacy Policy.

Changes to this policy

We may update this policy when the app, providers, law or our practices change. We will publish the revised policy at this URL and change the effective date. If a change materially affects a choice that law requires us to obtain again, we will provide a new notice or consent request before relying on that choice.

Contact

Tinkertanker Pte. Ltd.
UEN 201200143H
59 Jalan Pemimpin, #04-01 L&Y Building
Singapore 577218
hello@tk.sg