NovaSpiegel

Progress photos with a ghost overlay — entirely on your device

Privacy policy

Last updated: 5 September 2026

NovaSpiegel records change as photo series: when you take a shot, the previous one is shown as a semi-transparent ghost image over the viewfinder, so posture, distance and framing stay the same every time. The app has no server. There is no user account, no login, no automated image analysis and no transmission of your photos — they live solely in a protected folder on your device.

1. Data controller

We have not appointed a data protection officer or an EU representative because we do not reach the relevant thresholds. Please address all requests to the contact above.

2. What data we process

What we explicitly do not collect

• No transmission of photos or videos — the app has no function for sending images anywhere
• No account, no name, no e-mail address, no password
• No automated image analysis and no artificial intelligence — neither on the device nor anywhere else
• No advertising, no analytics services, no trackers, no location, no address book
• No health or fitness data from Apple Health — the app neither reads nor writes there

3. Permissions on your device

The app requests only the following permissions. Each of them can be revoked at any time in your device settings; the app remains usable afterwards, with reduced functionality.

• Camera — Capturing the progress photos with the ghost overlay. The image is stored directly in the app folder and does not leave the device.
• Photos: add — Only when you explicitly save a picture or a time-lapse video to your library. The app does not request read access to your library: if you add an existing picture to a series you choose it in Apple’s system picker, and only that single picture is handed to the app.
• Notifications — Reminding you about the next shot. Only requested when you switch a reminder on; without permission the app remains fully usable.

4. Legal bases

We process personal data under the Swiss Federal Act on Data Protection (revFADP). Where the GDPR applies, we rely on:

• Performance of a contract (Art. 6(1)(b) GDPR) — everything needed for the app to deliver the function you requested.
• Legitimate interests (Art. 6(1)(f) GDPR) — secure and stable operation, abuse prevention, troubleshooting.
• Consent (Art. 6(1)(a) GDPR) — for anything you actively enable in this app: the camera, notifications for the reminders and saving a picture or video to your photo library. Consent can be withdrawn at any time with effect for the future by revoking the permission in your system settings.
• Legal obligation (Art. 6(1)(c) GDPR) — in particular commercial and tax retention duties for payments.

5. Recipients and third parties

We do not sell data and do not disclose it for advertising purposes. Data is disclosed only to the following parties, and only where required for operation:

Authorities and courts receive data only where we are legally obliged to provide it.

Transfers abroad

Some of the recipients listed above process data outside Switzerland and the EEA, in particular in the United States. We base such transfers on the European Commission’s Standard Contractual Clauses with the Swiss adaptations recognised by the FDPIC and, where applicable, on the EU-US Data Privacy Framework. We will provide information on the safeguards in place on request.

6. Retention and deletion

We retain nothing because we receive nothing. Your images and the accompanying file live in the app’s protected folder; that folder is excluded from the iCloud backup so progress photos do not end up in a backup unnoticed. If you remove the app, images, series and reminders disappear completely and irretrievably.

Step-by-step instructions are available at Delete data.

7. Children and young people

This app is not directed at children. We do not knowingly collect personal data from children under 16. If we learn that such data has been submitted without parental consent, we delete it without delay.

8. Data security

Wherever the app transmits data at all, connections are encrypted via HTTPS/TLS. On the server side we use access restrictions, tenant separation and regular backups. Nobody can, however, guarantee absolute security for data transmission over the internet.

The images live in the app’s protected folder, which other apps cannot access, and are covered by iOS device encryption — so protect your device with a passcode, Face ID or Touch ID. The image folder is explicitly excluded from the iCloud backup. A time-lapse video only becomes visible to other apps once you share or save it yourself.

9. Your rights

• Access to the personal data we process
• Rectification of inaccurate data
• Erasure or destruction of your data
• Restriction of and objection to processing
• Receiving or porting your data in a common format
• Withdrawal of consent with effect for the future

An informal message to info@babala.ch or a call to 076 792 63 50. We normally respond within 30 days. To verify your identity we may request suitable proof. You may also lodge a complaint with a supervisory authority (Switzerland: FDPIC; EU: your competent authority).

10. Changes to this policy

We may adapt this policy when the app or the legal framework changes. The version published on this page, with the date shown above, is the applicable one. We announce material changes inside the app.