Last updated 15 August 2026. Applies to the Brutal Blurring
mobile app (Android package cloud.frontier.brutalblurring) and to
its iOS build.
Brutal Blurring collects no user data. It has no accounts, no analytics, no advertising, and the Android release does not even hold the permission that would let it open a network connection. Everything below is a more precise statement of that.
Brutal Blurring is developed and published by Frontier Cloud, the same entity named as the developer on the app's Google Play listing. Frontier Cloud is the data controller for anything described on this page.
Privacy enquiries, including any request about the handling of your data, should go to [email protected]. That address is monitored by the people who build the app, and it is also linked from the app's own Settings screen alongside a link to this page.
Some of what the app touches is personal and sensitive user data in Google Play's sense of the term — the camera, the microphone, and your photos and videos. The app accesses it in order to do the job you opened it for. It is processed in memory and in the app's own storage on your device, and it is not collected: none of it is sent to Frontier Cloud or to anyone else.
| What | Why | Leaves the device? |
|---|---|---|
| Photos and videos you pick | To blur regions you paint, strip metadata, and save the result. Only the files you select in the system picker are opened. | No |
| Camera | Only while the Camera screen is open, to take a photo or video that you then edit. | No |
| Microphone | Only while you are recording a video with sound in the app's own camera. Never at any other time, and never in the background. | No |
| A folder you nominate | Bulk metadata removal writes its output where you tell it to. The app keeps your choice so it need not ask again, and can write only there. | No |
| Your settings | Crop ratio, output size, JPEG quality and similar preferences, stored in the app's private storage. | No |
Access to the camera, the microphone and your media is requested through the standard Android and iOS permission prompts, at the moment the feature that needs it is used, and the app works without the ones you decline — a declined microphone permission costs you audio in videos, nothing else. Nothing is accessed while the app is in the background.
There is no data collection to disclose, because there is no mechanism for it. Specifically, the app contains no advertising software, no analytics or attribution software development kit, no crash or telemetry reporting, no fingerprinting, and no social or federated login. It does not read your contacts, your location, your calendar, your call or message history, your health data or your list of installed apps. It does not scan or index your photo library; it sees only the files you hand it.
On Android this is verifiable rather than merely asserted. The released app requests exactly these permissions and no others:
CAMERA, RECORD_AUDIOREAD_MEDIA_IMAGES, READ_MEDIA_VIDEO,
READ_MEDIA_VISUAL_USER_SELECTED,
READ_EXTERNAL_STORAGE, WRITE_EXTERNAL_STORAGEVIBRATE, and one app-private permission Android itself
requires for internal broadcastsINTERNET is not among them, and neither are the network-state
permissions that normally accompany it. Without INTERNET the
operating system will not let the app open a connection to anywhere, whatever it
might claim on this page. Google Play shows the full permission list on the app's
store page before you install, and anyone who downloads the APK can check it for
themselves.
The Tip the Developer button is the only thing in the app that leads anywhere else. Tipping is voluntary, unlocks nothing, and is not required to use any feature.
Choosing it hands a web address to your browser and closes the matter as far as the app is concerned — the app itself sends nothing and receives nothing. The page that opens is hosted by Stripe, which processes the payment under Stripe's privacy policy. What you type there is between you and Stripe: Frontier Cloud never sees your card details. Because your browser makes that connection, your browser and Stripe will see your IP address, as they would for any other page you visit.
That Stripe page also offers an optional feedback box. Filling it in is entirely up to you — the tip goes through just the same if you leave it empty. If you do write something, it reaches Frontier Cloud along with the record of the payment, so please don't put anything sensitive in it. Apart from that message, all Frontier Cloud receives is the payment record Stripe shows to the recipient. Nothing is promised in return for a tip, and it unlocks no features.
The security story is mostly a story about not moving data around.
One consequence deserves stating plainly: because the app is the only thing that ever holds your files, the security of your device is the security of your files. A lock screen and full-disk encryption, both standard on modern phones, are what stand between someone holding your unlocked phone and the pictures in it.
Frontier Cloud retains nothing, for any period, because it receives nothing. There is no copy of your data on any system of ours to request, correct or erase.
On your own device:
Uninstalling Brutal Blurring, or clearing its data from Android's app settings, removes everything the app ever wrote apart from the finished files you deliberately saved elsewhere.
Accounts. The app does not offer account creation, and Frontier Cloud holds no account for you, so there is no account to delete and no data tied to one. If you would like written confirmation of that for your own records, write to [email protected] and you will get it.
Blurring in this app is destructive on purpose. The pixels under the area you paint are replaced, and the original detail is not retained anywhere in the exported file — no hidden layer, no second copy, nothing recoverable by a filter. That is the point of the app, and it cuts both ways: neither Frontier Cloud nor anyone else can restore an original from an export. Keep your own copy of the untouched photo if you may need it.
Google and Apple collect their own information about downloads, purchases and crashes, under their own policies and independently of anything the app does. Frontier Cloud sees only the aggregate reports those stores provide, which do not identify individual users. If you install the app from frontier.cloud instead, the web server records the ordinary request log a web server keeps — the time, the file requested, an IP address and a user agent — which is used to serve the download and to keep the site running, and nothing else.
Brutal Blurring is not directed to children. It is rated for users aged 13 and over and is not part of Google Play's Families programme. Frontier Cloud does not knowingly collect information from anyone of any age, children included, because it does not collect information at all.
Data protection law — the GDPR and UK GDPR, the California Consumer Privacy Act, and similar regimes elsewhere — gives you the right to know about, obtain a copy of, correct, port and delete the personal information a company holds about you, and to object to its processing. Frontier Cloud holds no personal information from this app, so there is nothing to disclose, export, correct or erase, and no processing to object to. You are welcome to send such a request anyway, to [email protected]; the answer will be that record, in writing.
Frontier Cloud does not sell personal information and has never done so. It transfers no data internationally from this app, because it transfers no data.
Frontier Cloud — [email protected] — frontier.cloud