Your photography is never sent to Nesia.

Obtura is an iOS light meter for manual and film cameras, by Nesia, and it has no account, no analytics and no advertising identifiers. Obtura never sends us your photographs, camera profiles, light readings, journal entries or coaching reports. Apple may include that app data in your encrypted device backup so it can be restored on a new or reinstalled iPhone. The only data sent to our purchase provider is an anonymous record of your purchase.

What Obtura collects
Account or sign-in	none
Analytics or advertising identifiers	none
Photographs, readings or journal data sent to Nesia	none
Microphone audio saved or sent	none
Third parties that receive anything	Apple, RevenueCat
What they receive	a purchase receipt

Photos you take and export: When you save a photograph taken in Obtura, its original file and capture details stay in the app’s private storage. Obtura does not upload them to Nesia. Save to Photos is optional and requests add-only permission; the app does not need access to browse your photo library. The exported copy is managed by Photos and may sync to iCloud according to your settings. Deleting the original in Obtura does not delete an exported copy. Private originals may be included in Apple-managed device backups.
What stays on your device: Your photographs, camera and lens profiles, meter calibration, light readings, solved settings, journal entries and coaching reports live in Obtura's own storage on your phone. Obtura never uploads any of it to Nesia, and it is not readable by us. Like ordinary app data, Apple may include it in an encrypted iPhone backup under your Apple Account so your profiles and journal can be restored when you reinstall the app or replace your phone. Apple handles that backup; Nesia cannot access it. A reference frame is written only when you deliberately log a shot to the journal.
Microphone and the words you use: Obtura listens only while you hold the speak bar. Speech is transcribed on this iPhone by Apple's own speech frameworks; the raw audio is never written to disk and never transmitted. The words themselves are not kept simply because you asked for coaching. They are stored locally in two cases, both of which you start: when you log that shot to the journal, where your own wording is kept verbatim, and when you record a coaching report because a card was wrong. You can type instead of speaking, and refusing the microphone leaves everything else working.
Camera: Obtura needs the camera because that is the light meter, and the previsualisation is rendered from the same live frames. Images are metered as they arrive and are not written down. Refuse the permission and the app tells you it cannot meter rather than failing quietly.
Location: Optional, and only if you allow it. When you log a shot, Obtura accepts only a recent location whose reported uncertainty is no more than 250 metres, then rounds latitude and longitude to three decimal places — roughly a hundred-metre area — before storing them with the journal entry. An old or less accurate cached fix is rejected and Obtura asks iOS for a fresh one. It stores no town, country or place name and performs no place lookup. Obtura never sends the location to Nesia; Apple may include the journal entry in your encrypted device backup. Refusing location never stops you metering or logging.
Coaching reports: When a coaching card is wrong, you can record what the app understood. A report holds the intent text or the preset you chose, the EV, the metering mode, the settings the app solved, the coaching lines, whether they came from the model or the curated library, plus the device, app version and language. It holds no photograph, no reference frame and no coordinates — that absence is tested against the encoded file rather than promised. Reports stay on the phone until you export them yourself through the iOS share sheet.
Purchases: When you buy Obtura Pro, Apple processes the payment. Apple and RevenueCat, our purchase infrastructure provider, handle the receipt and your entitlement status: whether Pro is active, and the purchase and restore flows. That is what the App Store privacy label declares Purchase History for — app functionality. The record carries no name, no email address, no photograph and no reading, and it cannot identify you. Apple and RevenueCat are the only third parties in Obtura at all: there is no analytics SDK in the app and no advertising tracking of any kind.
Diagnostics and support: Apple may provide diagnostics according to your settings and its terms. If you contact support, we receive the contact details, comments or attachments you choose to share so we can answer your request. Photos and screenshots are optional.
Apple Intelligence: In English, on an iPhone that supports Apple Intelligence and has it switched on, coaching lines are written by Apple's on-device model. Everything else about the exposure is arithmetic. In French the app ships the curated coaching library instead, because the checks that catch a bad line are written against English prose and would pass French text without reading it. Either way the work happens on the phone and nothing is sent to a server.
This website: nesia.studio sets no cookies, runs no analytics and collects nothing. There is no consent banner because there is nothing to consent to. The site is static pages hosted on GitHub Pages, and the host may keep standard server request logs the way any web host does.
Deleting your data: Deleting the app deletes everything, because everything is in the app. There is no server-side copy to ask us about. Records of what you bought persist with Apple, under your Apple Account, as they do for anything bought from the App Store.
Your rights: Ask us anything about your data at the address below and you will get a straight answer. In practice there is essentially nothing to hand over, correct or delete, which is the point of building it this way.
Changes & contact: Privacy questions go to support@nesia.studio. This policy is version 3, effective 26 August 2026. Every change to it is committed to this site's public repository, so the full history of what we have promised is readable by anyone — for a studio making this particular claim, that is a feature rather than an accident.