Last updated: October 7, 2026
Dreadcam ("the App", "we") turns a photo you choose into an image that looks like security-camera footage with a blurred figure far behind you. This policy says what leaves your device, who receives it and why.
Key points: the full photo you choose is sent to our server and on to fal.ai, an AI service provider, to check it is safe and to find where the people in it are; in some pictures a second copy of your room, with the people and faces painted over in one flat colour, may be sent to an AI image model (also run through fal.ai), which returns a picture with a figure in it; when that happens, our own code takes only the figure from that picture, blurs and dims it, and places it on your own photo, so the model's picture as a whole is never shown to you, only the added figure from it, and your own photo is otherwise unchanged; we do not use your photos to train anything; there are no accounts; every result is labelled "AI-generated image".
The App is for people aged 18 and over. Do not upload photos of children. We do not knowingly collect information about anyone under 18.
For each picture we make, our server stores the finished result files (a preview, a still image and a short GIF). They are made from your photo, so they show what is in it. They are kept in Google Cloud Storage and can be opened only through time-limited private links. Result files are deleted automatically 30 days after they are created. The storage service's soft-delete protection is on, so a deleted file may stay recoverable by us for a limited time before it is permanently removed. The job record described in section 4 and any report (section 5) are not deleted automatically; we delete them on request. You can ask us to delete your files and records sooner at any time by e-mail (section 8).
There are no accounts. To enforce one free picture per device and to stop abuse, the App sends a device identifier to our server. The server stores it only as a salted, one-way hash, not in readable form. The purchase identifier described in section 6, which is used to count paid single pictures, is stored the same way. Along with it we keep counts such as how many free pictures were used, and a record of each job (type of figure, time, cost, technical checks and the number of faces your phone found in the photo, as a count only).
You can report an image inside the App. A report stores the picture's job ID, the type of figure and the random seed of that picture, the reason you choose, an optional note (up to 500 characters), the hashed device identifier and the time, so we can review it.
Paid options are sold through the App Store (iOS) and Google Play (Android): a single picture and weekly unlimited on both, and, on Android only, unlimited until 31 October (the October pass is not offered on iOS). The App Store or Google Play, depending on your phone, processes the payment and we never see your payment card. RevenueCat manages purchase status and receives a purchase identifier and your purchase information; it does not receive the device identifier itself. The purchase identifier is made from your device identifier by a one-way hash, so RevenueCat cannot read the device identifier from it. Because the same phone always produces the same identifier, it is a stable, device-linked identifier (not an advertising ID, and not used for ads or tracking across apps), and an unused single picture stays with the phone it was bought on, including after a reinstall. Weekly purchases are restored through your Apple ID (iOS) or Google Play account (Android), and the Android-only until-31-October pass through your Google Play account. See revenuecat.com/privacy. Our server asks RevenueCat whether a purchase exists so it can unlock your picture.
The App uses Google Firebase Analytics and Crashlytics. They record events such as first open, a picture being made, a paywall being shown, a purchase, plus technical device and app information and crash traces. They use a random app-instance identifier and not your name or e-mail, and Firebase derives an approximate location (country or region) from your IP address. See firebase.google.com/support/privacy. We do not use advertising SDKs. Separately, our server counts how many times shared links are opened per day, as a number only, with nothing about the visitor.
To have your result files and related records deleted, e-mail support@neron.app (see Delete your data) and include the share link of the picture, or the job ID, if you have it; without it we usually cannot find results by device, because the stored identifier is hashed and the App does not show it to you. Depending on where you live (EEA/UK GDPR, California CCPA, Turkish KVKK No. 6698 or other laws) you may also ask about, correct or delete information we hold, and you may complain to your local data protection authority. Uninstalling the App does not delete result files on our server.
Files are private and reachable only through time-limited links. The server key for the AI provider is never in the App. No system is perfectly secure.
We may update this policy; the date above shows the latest version. Material changes will be shown in the App or on this page.