Last updated: November 1, 2026

Ni'mah is a gratitude journal: you capture memories and, if you want, turn a photo into a faceless drawing. Your memories belong to you, so as much as possible stays on your device. This policy explains which data is processed where.

1. Data processed only on your device

• Memories: photos, drawings, texts, categories, dates, favorites, albums, card settings and “Daily Gratitude” entries are stored locally on your device.
• Love Notes: cards you design in the Love Box are stored locally on your device (and in your iCloud if enabled). If you share a card via the share menu, you decide who receives it; we do not receive it. For sending through the Love Box, see section 3.
• Skin tone measurement: so the drawing matches your skin tone, the app measures it on the device (Apple Vision). No face recognition or identification takes place; only simple color values are sent to the drawing service.
• Face ID / passcode lock: if you turn on the app lock, iOS checks your Face ID or device passcode. We never receive biometric data.
• Widgets: the app stores a small preview of your memories in a protected area on your device for the widgets. If you allow it, this includes the text or handwriting of a Love Note you received. Anyone who sees your Home Screen can see widgets. While the app lock is on, widgets show no content unless you allow it under “More → Widgets”.
• Reminders: daily reminders and the monthly note about your new free image are local notifications on your device. No advertising push service is used.

2. iCloud sync (optional)

If you turn on iCloud sync under “More”, your memories including photos and drawings are stored in your private iCloud database at Apple and synced between your devices signed in with the same Apple Account. This data lives in your iCloud account; we cannot access it. Apple's privacy policy applies.

3. Data sent to our services

• Account: on first launch the app receives a random identifier (no name, email or phone number). It is used to link your subscription, your monthly illustrations and purchased images.
• Sign in with Apple (optional): if you sign in with Apple, your account is linked to an identifier provided by Apple so your subscription, image credits, monthly free image, Love Box contacts and Ni'mah Together stay with you on a new iPhone. Signing in is required for the free image and for contacts. We do not request your name or email address.
• Image packs: if you buy additional images, we store the product, the store transaction identifier, the time and the use of your credits with your account.
• Creating drawings: only if you explicitly agree to illustration, the selected photo (downscaled) is sent with the chosen style and skin tone values to our server and forwarded to our AI image service. The finished drawing is returned to the app. We do not store the photo or the drawing on our servers. The image service is called so that the request is not kept in its history. You can withdraw your consent at any time under “More → Privacy”.
• Usage counter: for your monthly free image, your subscription quota, redraws and our cost statistics we store, per drawing: your account identifier, time, style, an identifier of the memory and of the request, whether it was a redraw and what the drawing cost – no images, no texts. The cost statistics show us how many images are created per account on average so we can plan prices and quotas (legitimate interest, Art. 6(1)(f) GDPR).
• Subscription check: to verify an active subscription, our server asks our subscription provider.
• Technical connection data: for security and to prevent abuse, our server provider briefly logs technical data such as IP address and time of access. These logs are deleted automatically after a short time.
• Crash reports: if the app crashes or freezes, a technical report is sent to our service provider Sentry: the error location in the program code (stack trace), device model, iOS version and app version. It contains no name, no account identifier, no photos, drawings or texts and no screenshots, and it is not used for tracking or advertising. We use it solely to find and fix errors (legitimate interest, Art. 6(1)(f) GDPR). Reports are deleted automatically after 90 days at the latest.