Privacy Policy

Effective 27 August 2026. Cendra is published by Sansa Group AB (Sansavision), Gothenburg, Sweden.

What we collect

On-device: your active season result, saved item checks, and subscription status. These stay on the iPhone unless you create an optional account and confirm sync.

During analysis: a short burst of selfie frames is uploaded to protected object storage for processing, then deleted. We do not run face recognition, store a reusable identity embedding, or use your face as an account.

Retention

Source images are deleted after processing by default, with a 24-hour failure backstop. Job metadata without the raw image may be kept for a short operational period.

Purchases

Subscriptions are processed by Apple. We verify entitlement with App Store Server APIs. Purchase works without creating an account.

Optional account

If you sign in, we store email, session, and any structured profile you choose to sync. Magic links are redeemed only by the iPhone app.

Analytics

Analytics do not include source images, email, raw face landmarks, tokens, receipts, or support-message content.

Contact

Questions: support@sansavision.com.