Picture Sense privacy policy

Who we are and what this covers

Picture Sense is a mobile app by Home Field, published by Farmen Capital LLC, United States ("we," "us"). This policy covers the Picture Sense app for iPhone and Android, the Picture Sense pages on homefield.tv, and Sense Cloud, the Home Field service that runs the analysis and the image generation behind the app.

Our other products have their own policies. Screenshot Sense for Windows is covered by the Screenshot Sense privacy policy, and the Home Field camera app is covered by its own policy. We keep them separate on purpose: one shared document would overstate what each app collects.

Picture Sense has four modes, always in the same order: Educate Me, Decorate Me, Style Me, and Shop Me. What is sent depends on the mode you use and on the permissions you have given.

What stays on your phone

These run on the device and need no network connection. We cannot see any of them.

• The camera and your photo library. The app opens the camera only when you start a capture, and reads a photo from your library only when you pick one. It does not scan your library.
• Text and barcodes. Educate Me reads text and decodes barcodes and QR codes on the device.
• Face and body detection. The app checks a picture for a face or a body on the device, so it knows whether to ask you for the photos-of-people permission. That check is detection, not recognition. No face data is stored or sent.
• Sensitive content checks. The app looks for things like payment cards, identity documents, and credentials before anything is uploaded. A picture that looks sensitive is never uploaded automatically. The card shows the buttons and says why.
• Your settings, your consent record, and your recent captures are stored on the device.
• Your location, when you allow it, is converted to a postal code on the device. See Location and local shopping.

Local Only mode

Settings has a privacy mode with three choices: Local Only, Balanced (the default), and Best quality.

In Local Only, nothing leaves the device. Educate Me reads text and barcodes on the phone; Decorate Me, Style Me, and Shop Me are switched off rather than failing. The app refuses a Local Only request before it makes any network call, so there is no request, no name lookup, and no token refresh. The service itself refuses a Local Only request as invalid, so the guarantee holds on both ends.

What you are asked before anything is uploaded

There are four permissions. Each is asked once, before the first time it is needed, and each can be withdrawn in Settings. Withdrawing one does not withdraw the others. If we change the wording of a permission, we ask again rather than relying on the old answer.

A picture the app has flagged as sensitive, including one with a person in it, is never uploaded automatically, whatever permissions you have given. The app asks first, every time, before that picture is sent anywhere.

What is uploaded, and to whom

Sense Cloud is operated by Farmen Capital LLC. It runs on Vercel and stores everything in a Supabase project in the United States (region us-east-1). Background work such as generation, try-on, product enrichment, and deletion runs as durable jobs on Inngest. Sense Cloud calls the providers below on your behalf, so no provider key is ever in the app.

Some of these providers are not switched on yet. Where a line says when enabled, that provider is part of the design and is not called today. We will update this page before any of them starts receiving your pictures.

Each provider handles what it receives under its own privacy policy. The links are in Third-party services.

To show product pictures on a shopping card, the app loads them from the sites that host them. Like any web image, each request tells that site your IP address.

What Sense Cloud stores

Cloud storage starts only after you sign in and give the permissions above. Every stored file sits under your own account's folder in a private storage bucket. There is no public bucket anywhere in the service, and the app never receives a bucket address. Every time you view an image, the service mints a link that works for one hour and then stops working. A link we give a provider so it can fetch an input image lasts 15 minutes.

How long things are kept

You set this in Settings, separately for each class, and lowering a setting applies to what is already stored, not only to new pictures. The sweep that removes expired content runs at least once an hour, which is what makes a one-day setting honest.

Masks are deleted with the pictures they came from. Embeddings, prompts, detected products, and shopping matches are deleted with the picture they belong to.

Cost records are kept after your content is deleted, with the account identifier removed. They hold no picture, no prompt, and no text from your pictures. We keep them because we have to be able to account for what our providers charged us.

Cloud history has an allowance that depends on your plan. If you reach it, new uploads stop and the app says so. We never delete something you chose to keep in order to make room.

Deleting your pictures and your account

You can delete a single picture, a single generation, or your whole account.

• In the app. Delete a picture or a result from the item itself, or open Settings and choose Delete account.
• From the web. Use homefield.tv/picture-sense/delete-account. You do not need the app installed.

A deletion is a job with a fixed order, so a half-finished deletion fails closed rather than leaving something behind. First the content is marked deleted, which makes it unreachable immediately. Then the masks, the generated images, and the originals are deleted from storage. Then the embeddings, the shopping matches, the detected products, and the job records are deleted from the database. Where a provider supports deletion of what we sent it, we ask for that too. Finally the service re-checks every folder that should now be empty; a file that survived fails the run and it is retried.

Deleting your account also deletes your sign-in record and disconnects any storage service you connected. It never deletes files you already own in your own Google Drive, OneDrive, Dropbox, or Box.

What survives a deletion: the cost records described above, with the account identifier cleared and no content in them; and a deletion receipt recording what was deleted and when, which holds counts and identifiers, never content.

Photos of people

Style Me is the only mode that processes a photo of a person, and it has extra rules.

• It requires you to be signed in, and it requires the photos-of-people permission described above.
• The subject must be you or someone who has agreed to it. Pictures of children are not permitted, and the app refuses a picture that appears to be of a minor before any photo is sent to any provider.
• Before a photo of a person is uploaded, the app removes the metadata embedded in it, including location.
• Photos of people and try-on results are kept for 1 day unless you choose otherwise. That is the shortest retention the app offers and it is the default for this class only; changing it does not change how long your room photos are kept.
• Analysis results the service caches for a photo of a person, such as an identification answer, are kept no longer than one day, matching that photo's own retention, and are removed when you delete your account.
• Every output carries a visible AI-generated label and the line AI visualization; not a guarantee of physical fit. on the image itself.

What the app never does

These are not settings and no permission unlocks them. There is no field in the system to put them in.

• No scoring or ranking of people: no attractiveness, beauty, or body desirability.
• No body measurements, clothing size, or weight guessed from a photo.
• No guesses about race, ethnicity, religion, health, pregnancy, disability, sexual orientation, or gender identity.
• No identifying an unknown private person.
• No medical or body diagnosis.
• No changes to hairstyle, hair color, makeup, or the face, and no reshaping, slimming, muscle, or height change to a body. If you ask for one of these in a refinement, the app says plainly that it does not do it, and it costs you nothing. Fit is changed by changing the garment, never by changing the body.
• No purchase and no message sent on your behalf without you confirming it.

Location and local shopping

Location is requested for one thing: finding used and local listings in Shop Me. It is never requested for anything else and it is never on by default.

When you allow it, the app turns your location into a postal code on the device and sends only the postal code. A precise coordinate never leaves your phone, and the service stores a postal code, never a coordinate, and never attaches a location to one of your pictures. You can type a ZIP code instead and skip location entirely; the same sheet that asks for the permission offers that option.

Sharing, metadata, and labels

Share links are planned but not built. There is no way today to share a picture or a result outside the app, and Sense Cloud does not create, store, or serve a shared copy of anything. We will update this page before a share feature ships.

Location data is removed from every photo before it is uploaded, not only from a photo you intend to share. The app strips it on the device, re-encodes the photo, and checks the result for any metadata segment that survived, including EXIF, XMP, IPTC, GPS coordinates, camera serial numbers, maker notes, and embedded thumbnails; a photo that still carries one is not uploaded. That check is how the app verifies the strip worked, rather than trusting a single pass.

Every generated image carries a visible AI-generated label. Images from Google models also carry Google's own invisible watermark; our visible label is required regardless. Shopping results carry the provider, the match label, and the time the price was read.

Training

We do not use your pictures, your generated images, your masks, your embeddings, or your prompts to train or fine-tune any Farmen Capital model. The only exception is a separate, explicit setting in the app that is off by default. It is not bundled with analytics and it is not bundled with the cloud permissions, and you can turn it off again at any time.

Whether a provider may train on what we send it is a term of our account with that provider, not a setting in the app. Where a provider offers a control to refuse training on submitted content, we set it to refuse. A provider that cannot be configured to refuse training is not used for photos of people.

Your account and your purchases

You can use Picture Sense signed out, and that is how it starts. An account is needed for anything that runs on our servers: cloud identification, generation, try-on, cloud shopping, and cloud history.

A Home Field account is created with an email one-time code, Sign in with Apple, or Google. There is no password, so there is no password to leak and no reset path. We store your email address, your sign-in identifiers, your entitlements, and your credit balance.

Subscriptions and credit packs are bought through the App Store or Google Play. Apple and Google process the payment and we never receive your card number. We receive the transaction identifier we need to confirm what you bought and to answer a refund question. If you subscribe on Windows instead, Stripe processes that payment on the same terms.

Store links and commissions

Some store links earn Farmen Capital LLC a commission. The card says so when a link earns one, and results are not ordered to favor links that do. When you open a store link, the store receives your visit under its own privacy policy.

Analytics, crash reports, and ads

The app sends no analytics, no usage statistics, no crash reports, and no advertising identifiers, and it shows no ads. If we add usage statistics, they will be behind a switch that is off by default, they will never include your pictures or text from them, and we will update this page before that happens.

When you contact us

If you email us, or join the launch list on this site, we receive your name, email address, and message. We use them only to answer you or to tell you when the app ships. The form on this site is delivered to our inbox by Twilio SendGrid. We do not sell or share your information.

Children

Picture Sense is not directed at children under 13, and we do not knowingly collect personal information from them. Style Me refuses a photo that appears to be of a minor before the photo is sent anywhere. If you believe a child has sent us personal information, email us and we will delete it.

Security and logging

Traffic between the app and Sense Cloud uses encrypted HTTPS connections. Storage buckets are private and every file sits under its owner's folder, enforced by the database rather than by application code. Provider keys live only in our server secrets. No app, on any platform, ever receives one.

Our logs are built so that your content cannot reach them. Image data, prompts, recognized or extracted text, detected brand and product names, file names, viewing links, storage paths, and postal codes are excluded by construction: the logging code takes structured fields, not free-form text. What we do log is the job identifier, the provider and model, the status, how long it took, what it cost, and the error code when something fails.

Text inside a picture is treated as data, never as an instruction. If a picture contains words telling the app to do something, the app does not follow them.

No method of storage or transmission is perfectly secure. Keep the phone and the account you sign in with protected.

Third-party services

These services receive data only in the cases described above. Each handles it under its own policy.

Your choices and rights

• Send nothing. Use Local Only mode, or decline any of the four permissions. Declining is never the destructive option and the app keeps working.
• Change your mind. Every permission is revocable in Settings, and every retention setting can be shortened, which applies to what is already stored.
• Delete. Delete any picture, any result, or your whole account, from the app or from homefield.tv/picture-sense/delete-account.
• Ask us. For a copy of what we hold, a correction, or a deletion, email support@homefield.tv. Depending on where you live you may have further rights under local law, and we honor requests we receive.

Changes to this policy

If we change what the app collects, stores, or sends, we update this page and the effective date at the top before the change ships, and we update the data safety and privacy answers on the App Store and Google Play to match. Where a change affects something you already agreed to, the app asks you again rather than relying on your earlier answer.

Contact

Farmen Capital LLC
United States
support@homefield.tv