Perfo Privacy Policy

App Store name: Perfo: Photo Stamp Maker · Version v1.3.7 · Last updated: 2026-10-23

Operator: Cui Feng, an individual, Dalian, China.
Address: No. 61 Gaoneng Street, Ganjingzi District, Dalian, Liaoning 116085, China
Phone: +86 13840806560
Email: cuifengwl@gmail.com

Perfo makes decorative stamps from your photos. There is no account. The app is not directed to children under 13, or under 14 in Korea. We do not sell personal information. Perfo has no ads and no ad tracking.

Stays on this iPhone

Photos, the stamps you make, captions, places you type, and dates. Perfo does not upload them. The camera is used when you take a photo. The photo library is used when you pick a photo and when you save a stamp. Perfo does not request photo location.

Files are stored in the app's local storage. iOS may include that storage in an iPhone backup you control with Apple. Perfo does not sync through iCloud.

Deleting a stamp removes it from your album right away; its image files are queued and cleaned up in the background shortly afterwards, not instantly. Deleting a month in Settings deletes those files on the device. Deleting the app deletes the on-device album and the free month-export flag. If iCloud Backup is on, an earlier iOS backup may still contain deleted images until it is replaced by a newer backup; that backup is controlled by Apple and you.

Leaves the device

Perfo contacts two processors when you open the app and when you bring it back to the foreground. You can make stamps without buying anything and without redeeming a code. The contacts below still happen.

• RevenueCat, Inc. (United States). Purpose: verify a one-time purchase and restore it for the same Apple ID. Items: the app user ID RevenueCat generates, purchase status, and technical data the SDK sends with the request, including the connection IP address. Perfo does not send your name, email, or photos. Retention: RevenueCat keeps purchase records so restore can work. Their notice: https://www.revenuecat.com/privacy
• Perfo invite service, hosted by Cloudflare, Inc. (United States). Purpose: give this install an invite code, accept one code, and credit a time-limited Pro trial (up to 14 days; does not unlock theme packs). Items: a random install ID created on this iPhone; an invite code; if you redeem a code, that code; and, only when you redeem a code, a SHA-256 hash of the UTC date and the connection IP. The hash has no added secret, so it can be matched back to an IP. It is deleted automatically after 48 hours. The raw IP is not written to Perfo's database. Cloudflare can see the IP while carrying the request. Opening the app to sync invite status, and confirming a friend's first stamp, do not write that hash. The install record holds the install ID, codes, timestamps, and install IDs of confirmed invites. It does not hold photos, your name, or your email. The random install ID can be linked to these invite records; it is not unlinkable anonymity. Retention: until we delete the record after a verifiable email request we can match, or until the invite feature ends. Uninstalling the app does not delete this server record. Rate-limit hashes auto-delete after 48 hours.

Purchases are sold by Apple. Perfo Pro and the seven theme packs are one-time unlocks for that Apple ID, not subscriptions, and not a promise that the app will remain available for any set number of years. Each theme pack is sold separately and is not included with Pro. Invite Pro trials are not a purchase, are not restored with your Apple ID or Restore Purchases, and do not unlock theme packs. Refunds: https://reportaproblem.apple.com

Your requests

You may ask what install record we hold, and you may ask us to correct or delete it. Email cuifengwl@gmail.com with the subject "Privacy request". Include the invite code shown in the app so we can try to find the matching record. If you also have the install ID, include that too; the app does not currently show the install ID in Settings, and there is no Settings control that deletes invite-server records. We reply within 30 days when we can match the request. We will respond within a reasonable time and within any period required where you live, including Japan's Act on the Protection of Personal Information, Korea's Personal Information Protection Act, Taiwan's Personal Data Protection Act, and Hong Kong's Personal Data (Privacy) Ordinance.

Providing the install record is how the invite feature works. You do not have to redeem a code. If we learn that a record belongs to a child under 13, or under 14 in Korea, we will delete it.