miraisoft · privacy policy

june 2, 2026

this policy covers every app published by miraisoft:

• ongi, film simulation darkroom for macOS
• loupa, photo culling and catalog app for macOS
• tenmei, spot meter for iOS

future miraisoft apps follow the same policy unless their listing says otherwise.

miraisoft apps do not collect, transmit, or share personal data. there are no analytics SDKs, no advertising SDKs, no telemetry, no crash reporting upload, no account systems.

none. miraisoft apps do not track users across other apps or websites. Apple's NSPrivacyTracking manifest key is set to false.

ongi makes no outbound network calls. you choose what files the app can read or write through the standard open and save dialogs.

the following lives on your mac and never leaves it:

• edit sidecars: a json file written next to the photo you open, recording your edit. the original file is never modified
• app preferences: HUD window positions, recent documents, view options (macOS UserDefaults)
• document recall: file references stored locally so the app can reopen recent documents

removing the app and its data removes all of the above. ongi does not request the camera, microphone, or location services.

for the canonical app-specific policy, see ongi · privacy policy.

loupa scores and groups your photos — sharpness, aesthetics, bursts — using models that run entirely on your mac. your photos are never sent anywhere to be analyzed.

loupa runs inside Apple's App Sandbox. it reads the folder or memory card you open through the standard dialog, and remembers the folder you pick so it can reopen it. it writes the metadata you edit — ratings, keywords, captions — to the photo's EXIF or to an .xmp sidecar beside it, plus small analysis caches next to your photos. when you ingest from a card, it copies files to the destination you choose; the originals on the card are never modified.

loupa sends nothing to miraisoft. it includes an optional upload feature: when you start an upload, loupa sends the photos you selected to the destination you configured — your own server or storage, not miraisoft. nothing is uploaded unless you initiate it.

the following lives on your mac and never leaves it: catalog ratings and tags, on-device analysis caches, app preferences (macOS UserDefaults), and a bookmark to the folder you last opened. removing the app and its data removes all of the above. loupa does not request the camera, microphone, or location services.

tenmei uses the camera for the live viewfinder and to calculate exposure values. frames are processed on the device.

tenmei optionally uses the microphone (for voice memos) and location services (for GPS on journal entries). both are off until you grant permission, and you can revoke either in iOS Settings at any time.

the following lives on your phone and never leaves it:

• journal entries: exposure readings, film stock, settings, GPS, notes, voice memos
• app preferences: calibration offset, spot size, night mode, film slot assignments
• custom film stocks: user-created film profiles

under Apple's privacy manifest rules, miraisoft apps declare these API categories with the following reason codes:

• UserDefaults, reason CA92.1 (app-internal preferences and window state)
• File timestamp, reason C617.1 (files you open through the document dialog)

these declarations describe internal use of system APIs. nothing is transmitted off-device.

any in-app purchases or subscriptions are managed by Apple through the App Store or Mac App Store. miraisoft does not see, process, or store payment information.

none. no cloud sync, no external APIs, no SDKs that phone home.

miraisoft apps do not knowingly collect information from children under 13.

updates to this policy will be posted at this URL with a revised date.

questions? reach me at hello@miraisoft.io.