Privacy
Privacy Policy
Image generation runs on your device. This policy explains what stays local, what limited information passes through network services, and the choices available to you.
Effective and last updated: September 30, 2026
At a glance
Waitlist sign-ups on this website
If you enter your email address in the launch-notification form on this website, we store it.
- What is stored. Your email address and the date you submitted it. We do not store a name, IP address, analytics identifier, or the page you signed up from.
- What it is used for. A single email telling you the app is available. It is not a newsletter, it is not shared or sold, and it is not used to advertise to you anywhere else.
- How long it is kept. Until the launch email is sent or you ask for it to be removed, whichever comes first.
- Removing it. Email support@arkaledge.com and your address is deleted. No account or verification needed.
The waitlist form stores the fields listed above. Website hosting may also process technical request data to serve and protect the site. The app has no account, but uses the analytics and purchase services described below. It does not upload prompts or photos for generation.
Website analytics
This website uses Cloudflare Web Analytics, provided by our host, Cloudflare, to count page views, referring sites and page-load performance in aggregate. It sets no cookies, uses no local storage, and does not identify individual visitors or follow them across sites. Cloudflare operates it under its own privacy policy. We run no other analytics on this website.
1. Scope
This policy applies to the Onhand iPhone and iPad app, this website, its model-download service, and support communications related to the app. It does not control Apple’s App Store, external model or license websites, or other third-party services that have their own privacy policies.
2. Information processed on your device
Your prompts, selected source photos, masks, generated images, installed models, generation settings, and local gallery are processed and stored on your device. Onhand does not upload prompts, source photos, masks, or generated images to our servers for image generation.
Generated images remain in the app until you delete them. A copy is added to Apple Photos only when you choose to save it. Models remain in the app’s storage until you remove them or delete the app.
3. Model downloads and technical network data
The app retrieves a model catalog from our host. Release builds obtain model packages through Apple-hosted downloads. The recommended free Turbo pack downloads automatically; additional packs are optional. These requests do not contain prompts, photos, or generated images.
Hosting and content-delivery providers may process limited technical information needed to deliver and secure a request, such as an IP address, request time, requested file, basic request headers, transfer size, and security or diagnostic events. This information may be used only to deliver downloads, prevent abuse, investigate failures, and maintain service reliability. It is not used for advertising, cross-app tracking, or building a creative profile.
App analytics and purchases
We use PostHog for limited product and reliability analytics: app opens, selected tabs, paywall views, purchase and restore outcomes, rating-prompt requests, and model-download retries or failures. Event properties include source or tab names, product and model-pack identifiers, counts, result flags, and technical error domains and codes. PostHog uses an anonymous installation identifier. Automatic screen and tap capture, session replay, person profiles, and advertising identifiers are disabled.
Apple processes purchases. RevenueCat supplies the paywall and records purchase and entitlement information so the app can unlock Pro and restore purchases. Prices and paywall variants may differ between customers. RevenueCat receives the anonymous PostHog identifier to associate purchase events with the same installation. Our analytics events exclude prompts, source photos, generated images, seeds, and image-generation performance traces.
These services receive network requests and associated technical information under their own policies. They are separate from the on-device image-generation pipeline and are not used for cross-app advertising tracking.
4. Photos access
Onhand uses Apple’s system photo picker when you select an input image, allowing you to choose what the app can access. The app requests permission to add an image to Photos only when you use the save action. Your photo library is not scanned for advertising or analytics. Images saved to Photos may sync through iCloud Photos if you enabled it. Sharing an image sends it to the app or recipient you choose. System backups and those destinations follow your settings and their own policies.
5. Support messages
If you email support, we receive the email address and information you choose to include. We use it to answer the request, investigate the issue, prevent abuse, and comply with legal obligations. Do not send a prompt or image unless you want support to review it. Support messages are kept only as long as reasonably necessary for those purposes.
6. Third parties
- Apple distributes the app, processes purchases, and may provide App Store diagnostics under Apple’s policies.
- RevenueCat provides purchase, entitlement, restore, and paywall services.
- PostHog receives the limited analytics and diagnostic events described above.
- Hosting and content-delivery providers deliver the model catalog and model files and may process the limited technical data described above.
- Model and software publishers provide license and documentation pages that open outside the app when you choose them.
We do not integrate advertising networks, data brokers, or cross-app tracking SDKs.
7. Retention and deletion
You control app content stored on your device. Delete generated images from Gallery, remove model packages from Models, or delete the app to remove its local container. Copies you saved to Photos must be deleted separately in Photos. Because Onhand has no user account or cloud gallery, there is no account archive for us to export or erase. Deleting the app does not itself delete purchase or analytics records already held by service providers. Contact us with questions about those records; an anonymous installation may be difficult to identify from an email address alone.
Operational download and security logs, if retained by our infrastructure, are kept only for the period reasonably necessary for service delivery, security, abuse prevention, and troubleshooting.
8. Children
Onhand is not directed to children under 13. We do not knowingly create accounts for or collect personal information from children. If you believe a child has sent personal information through support, contact us so it can be reviewed and deleted where appropriate.
9. International use
Onhand may be used worldwide. Model-delivery and support providers, including our US-hosted analytics service, may process limited technical or support information in countries other than your own, subject to their safeguards and applicable law. The app minimizes transfers by performing image generation locally.
10. Your choices
- Choose whether to select or save a photo.
- Choose which model packages to download and remove.
- Delete generated images or the entire app at any time.
- Avoid sending optional personal information in a support message.
- Contact us to ask about a support message you previously sent.
11. Changes to this policy
We may update this policy when the app, its infrastructure, or legal requirements change. The current version and effective date will remain available on this page. Material changes will be communicated through the app or App Store listing when appropriate.
12. Contact
Privacy questions and requests can be sent to support@arkaledge.com with “Onhand Privacy” in the subject line.