A fog-of-war world map, revealed by the photos you already took.
Effective 17 September 2026 · Last updated 17 September 2026
Your photos and places never leave your device. Fogged has no server and no account. Your photos, their locations, your trips and your map are read, processed and stored on your iPhone or iPad. We — the developer — never receive them. The only things that go over the network are anonymous usage statistics, purchase records, and map tiles, described below.
Fogged is an iOS app developed by Artem Aleksandrov ("we", "us"). This policy explains what the app accesses on your device, what it stores, and exactly what is sent anywhere, to whom, and why.
| Data | Why | Leaves the device? |
|---|---|---|
| Photo location (GPS), creation date and favourite flag from your photo library metadata | To work out where and when you travelled, and reveal those places on the map | No |
| Photo thumbnails | Shown on the map, in your timeline, and in share cards you create | No |
| Place names (country, city) | Worked out on your device from a map database built into the app | No |
| Purchase and subscription status | To unlock Fogged Pro | Yes — Apple and RevenueCat (see below) |
| Anonymous usage events | To understand which features work and where the app fails | Yes — TelemetryDeck (see below) |
Fogged asks for photo library access during onboarding and explains why before the system dialog appears. You can grant full access, limited access to photos you select, or refuse. Fogged requests read and write access: read to scan location metadata, and write only to save a share card you create to your library when you ask it to. Fogged never modifies or deletes your existing photos.
If you later limit or revoke access in iOS Settings, what Fogged already built stays on your device; it simply cannot add new photos until access is granted again.
Everything Fogged builds — processed photo records, trips, revealed map areas, your home area, and statistics — is stored in the app's private sandbox, in a local database protected by iOS data protection. It is not placed in iCloud and not shared with other apps. Deleting the app deletes all of it, and you can clear it at any time from Settings inside the app.
The map itself is Apple Maps, drawn with MapKit. To show the map, your device downloads map tiles for the area on screen from Apple, as any app with a map does. Apple handles those requests under Apple's privacy policy. Your photos and their locations are not part of those requests.
Fogged uses TelemetryDeck, a privacy-focused analytics service, to learn how the app is used and where it breaks. It receives:
It never receives a photo, a location, a place name, a trip, a date you travelled, or anything you typed. TelemetryDeck does not use IP addresses or advertising identifiers; the anonymous identifier it uses is derived on your device and hashed twice, so it cannot be traced back to you. No consent prompt is needed because no personal data is processed.
Fogged Pro is sold through the App Store. Payment is handled entirely by Apple; we never see your payment details. To keep track of which plan you own across renewals, restores and devices, Fogged uses RevenueCat. RevenueCat receives the App Store transaction records for Fogged purchases and an anonymous identifier it generates, along with basic technical context such as app version, device model and country. It does not receive your name, email, photos or locations. We see the resulting anonymous purchase records (for example "a yearly plan was bought in Germany") in RevenueCat's and Apple's reports.
Fogged is not directed at children under 13 and does not knowingly collect personal data from anyone.
If this policy changes materially, the updated version will be published here with a new "Last updated" date before the app version it describes is released.
Questions about privacy in Fogged: support@fogged.app