Privacy Policy

App: IKICAM Controller: Vestai Tech Ltd Registered office: Office 408, Screenworks, 22 Highbury Grove, London, United Kingdom, N5 2ER
Contact: s@vestai.tech

Effective date:03.06.2026 Last updated: 03.06.2026

DUOCAM is built to keep your photos and videos on your phone.

• We do not ask you to create an account.

• We do not upload your photos, videos, or audio to our servers.

• We do not track you across apps or websites.

• We do not sell or share your data.

The camera, microphone, and photo library permissions you grant are used only on your device, only while you're using the app, and only to make the camera work.

If that ever changes, we'll update this policy and tell you in-app before the change takes effect.

2. Who we are

Vestai Tech Ltd ("we", "us", "our") is a private limited company registered in England and Wales, with its registered office at Office 408, Screenworks,
22 Highbury Grove, London, N5 2ER. For the purposes of UK GDPR and the Data Protection Act 2018, we are the data controller for any limited personal
data processed in connection with the IKItCAM mobile application (the "App").

3. What data the App processes

3.1 Media you capture

Photos, videos, and audio captured by the App are processed locally on your device. They are never transmitted to Vestai Tech Ltd or any third party
unless you choose to share them (for example, by saving to your Photos library and then sending the file yourself through another app).

3.2 Device permissions

The App requests the following permissions from iOS. Each is used only for the purpose described below:

PermissionWhat it's forWhere it's processedCameraCapturing front and back camera streams for DUAL, PIP, and DUOFIE modesOn your device only
MicrophoneRecording audio with your videosOn your device onlyPhoto Library (optional)Saving captures to your Photos and importing existing media
On your device only

You can revoke any of these permissions at any time in Settings → Privacy & Security on your device.

3.3 Crash and diagnostic data

If you opt in to sharing diagnostics with Apple at the iOS level, Apple may share anonymised crash reports with developers, including us. These reports
do not contain your photos, videos, or personal identifiers. We use them solely to fix bugs. You can turn this off in
Settings → Privacy & Security → Analytics & Improvements.

3.4 App Store data

Apple processes your purchase, download, and review activity on the App Store. That activity is governed by Apple's Privacy Policy, not ours.

3.5 What we do NOT process

We do not collect: your name, email, phone number, location, contacts, advertising identifiers, IP address, browsing history, or any biometric data.
We have no servers that store your media.

4. Lawful basis (UK GDPR Article 6)

To the limited extent any personal data is processed by us (e.g. via anonymised crash reports from Apple), the lawful basis is our legitimate interest
(Article 6(1)(f)) in maintaining and improving the App. This interest is balanced against your privacy rights and the very limited scope of the data involved.

5. Your rights

Under UK GDPR you have the right to:

• Access any personal data we hold about you

• Rectify inaccurate data

• Erase your data ("right to be forgotten")

• Restrict processing

• Object to processing based on legitimate interests

• Data portability in a machine-readable format

• Withdraw consent where processing is based on consent

• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email s@vestai.tech. Because we store almost no personal data, most requests will be answered by confirming we hold nothing.

6. International transfers

We do not transfer personal data outside the UK. If, in future, we use a sub-processor located outside the UK, we will rely on UK-approved transfer mechanisms
(e.g. the International Data Transfer Agreement or UK Addendum to the EU SCCs) and update this policy.

7. Retention

Because the App processes media on-device, you control retention. Captures live in your phone's storage and Photos library until you delete them.
We hold no copy.

Anonymised crash reports received via Apple are retained for up to 12 months, then deleted.

8. Children

DUOCAM is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided
us with personal data, contact us and we will delete it.

9. Security

The strongest privacy protection is not collecting data in the first place. Beyond that, the App relies on iOS sandboxing and standard Apple security
frameworks to protect your captures while they're on your device. Any future server-side processing would use TLS in transit and AES-256 at rest.

10. Changes to this policy

If we materially change how we process your data, we will:

1. Update the "Last updated" date at the top.

2. Notify you in-app at next launch.

3. Where required, ask for your renewed consent before the change takes effect.

11. Contact

Vestai Tech Ltd Office 408, Screenworks 22 Highbury Grove London, N5 2ER United Kingdom

Email: s@vestai.tech ICO Complaints: ico.org.uk