Privacy Policy
Last updated 9 November 2026
Panoloom is built to keep your panoramas on your iPhone. This policy explains what the Panoloom app and the panoloom.app website do with data. The short version: there is no account, we don’t track you, and nothing you capture is uploaded unless you choose to share it as a link.
Who we are
Panoloom is made by Sviatoslav Fil (“we”). We are responsible for the data described here. You can reach us through the contact page below.
What stays on your iPhone
Capturing, stitching, editing, repairing and exporting panoramas all happen on your iPhone. Your panoramas, sound recordings, tours, postcards and edits are stored in the app’s storage on your device and are not sent to us.
If you allow location access, the app saves where a panorama was taken with that panorama, on your device. To show a place name, your iPhone asks Apple’s geocoding service for the name of that location; Apple handles that request under its own privacy policy. Location is removed from tour packages the app exports, and you choose whether to keep it in other exports.
Camera, microphone, photo library and motion access are used only for the features that need them, and only after you allow them in iOS.
Purchases
Panoloom Pro is bought through Apple’s App Store; we never see your payment details. To confirm what you have bought, the app uses Apple’s StoreKit and the RevenueCat service, which receives the App Store transaction information and an anonymous app user identifier. It does not receive your name, email address or panoramas.
No tracking or advertising
The app contains no advertising, no third-party analytics and no tracking across apps or websites.
The website
panoloom.app is hosted by Vercel. Like any web server, it processes your IP address and browser details to deliver pages, and may keep them briefly in server logs for security and reliability.
We use Vercel Web Analytics to count page views. It does not use cookies, does not identify individual visitors and reports only aggregate numbers such as page views and countries.
Shared Moments are served with no-index instructions so search engines don’t list them, and the link is not sent to other sites as a referrer. The panoramas on this website were captured by the Panoloom team. Location data was removed from every image before publishing. Sound on the website’s demonstrations is generated in your browser and nothing is recorded.
Sharing a Moment (when you choose to)
Panoloom Moments lets you share a panorama or tour as a link. It arrives in an app update. Nothing is uploaded unless you choose Share and create a link; private Moments never leave your iPhone.
When you create a link, the app uploads the panorama image(s) you chose with location and camera metadata removed, plus only the details you turn on: a title, a place name (never coordinates), the capture date, your name, and any sound or narration you include. We re-encode images when we receive them, which removes any remaining metadata, and delete the uploaded originals. Sound with embedded location data is refused.
Shared copies are stored privately with Vercel (Vercel Blob, in Frankfurt) and a small record with your settings in Upstash Redis (Frankfurt). Files are never publicly addressable: visitors receive short-lived, link-bound addresses, and every request is checked against your settings.
You decide who can open a Moment: anyone with the link (it is not listed anywhere, but links can be forwarded), or only people with a passcode. Passcodes are stored only as a one-way scrypt hash. You can set the link to end after 1 hour, 24 hours, 7 days, 30 days or a date you choose; turn it off at any time; or delete the shared copy.
Deleting a shared copy removes its files immediately. Files of a link that ended are deleted 7 days later; files of a link you turned off are deleted after 30 days unless you create a new link. A short record that the link existed (no content) is kept for 180 days so the link can say it was removed. There are no separate backups of shared files, so deleted Moments cannot be restored.
Managing your Moments needs no account: your iPhone holds a private key for each link (we store only its fingerprint). If you lose it, the link still ends on its end date.
For people who open a Moment we count page views per Moment and per day, without recording who viewed it. If someone reports a Moment, we keep the report and a one-way fingerprint of the reporter’s connection to spot abuse.
Children
Panoloom is not directed at children under 13 and we don’t knowingly collect personal data from them.
Your rights
Because we don’t hold your panoramas or an account for you, deleting the app deletes your data from your device. For questions about purchase records or any other data request, including access or deletion under laws such as the GDPR, contact us and we will respond within 30 days.
Changes
If we change this policy we will update this page and the date above. Material changes will be announced in the app’s release notes.
Contact
Questions about privacy: contact us.