Privacy Policy

Last updated: 24 October 2026

OPCam stores and processes your photos on your device. Some features contact OPCam’s service or Apple, as explained below. You do not need to register an account.

No account, no tracking

OPCam does not require an account, does not contain third-party analytics or advertising SDKs, and does not track you across apps or websites.

Your photos

Photos you capture — including the watermark and any records — are stored on your device and, with your permission, saved to your system photo library. OPCam never uploads your photos to any server. When you share a proof package or back up your log, those files go only where you send them.

Location

If you grant location access, OPCam uses your GPS position to write coordinates and a reverse-geocoded address into the photo watermark, and to place records on the in-app map. To produce the address, OPCam passes your location to Apple’s system reverse-geocoder, which may send it to Apple’s geocoding service. Coordinates and addresses are not included in OPCam’s anchoring request. They can be included in photos and proof files you choose to share.

Account identifier (for credits)

On first launch OPCam creates a random UUID and stores it in your device's Keychain. It is not derived from your device identifier or Apple ID. This token is sent to our service when you anchor a photo or sync anchoring credits, including credit sync at launch. It identifies your credit ledger without requiring a registered account. Welcome-credit setup may also send Apple App Attest key identifiers, attestation objects and assertions to our service; Apple participates in generating the attestation. The service retains key, receipt and account-token associations to validate grants and prevent reuse. The token is pseudonymous, not a guarantee of anonymity.

On-chain proof (optional)

The "On-chain proof" feature is on by default for new installs. You can turn it off in Settings. When you anchor a photo, OPCam sends only:

• the photo’s SHA-256 fingerprint (a one-way hash, not the image),
• a record number,
• the capture timestamp, and
• your account identifier (above),

to OPCam's notarization service, which records the fingerprint on the Optimism blockchain. The anchoring request does not include the photo, GPS coordinates, address or a hardware device identifier. The account token described above is included. An anchored fingerprint and its block time are public and cannot be deleted. A fingerprint does not reconstruct a photo, but someone with a matching file can link it to the public anchor. Confirmation shows that the fingerprint existed by the block time; it does not establish the actual capture time or location.

Purchases

On-chain anchoring credits are sold as an in-app purchase processed by Apple. OPCam does not receive or store your payment information; Apple handles the transaction. When you buy credits, the signed App Store transaction is sent to our server (and may be retried) so your credit balance can be recorded against your account identifier. Your displayed balance is a cache refreshed from the server.

Device clock check

OPCam requests the current time from our service, with an HTTPS response-date check as a fallback. The check sends only a network request, with normal connection information; it does not send your device clock reading, photo, location or account token. It compares the reference with the device clock locally. This is a clock check, not a trusted capture timestamp.

Your logo

Your selected logo is stored and added to new photos on your device. OPCam does not upload the logo to its service. It is visible in photos and reports you choose to share.

Web verification

The verifier hashes the photo locally in your browser and does not upload the photo or sidecar. Only the fingerprint goes to the lookup service. A fingerprint link keeps the hash in the URL fragment, which is not sent with the page request; the page reads it and automatically sends the fingerprint to the lookup service.

Data we collect

Our service receives the anchoring, credit and purchase data described above. Network services also receive normal connection information, such as your IP address. Launch credit sync and time checks can contact the service even when you are not anchoring or buying credits.

Children

OPCam is not directed to children. The data flows described in this policy apply to use of the app.

Contact

Questions about this policy? Email hi@ms.co.th.