---
title: "Privacy Policy · Unseen: Hidden Camera Detector · theworkers.co"
description: "How Unseen handles information. There is no account, and your scans stay on your iPhone or iPad."
url: https://theworkers.co/unseen/privacy/
lang: en
---

# Privacy Policy for Unseen: Hidden Camera Detector

Last updated: October 26, 2026This page describes Unseen version 1.0.0 for iPhone and iPad.[Türkçe](https://theworkers.co/unseen/privacy/tr/)

* * *

## The short version

Unseen checks a room with the sensors your iPhone or iPad already has. Below, "your device" means the iPhone or iPad Unseen is installed on. The checking happens on your device. What the camera sees is deleted once it has been checked; only small pictures of lens markers from a Full Scan are kept, with the scan. The scans you run, where each one happened and the name of the Wi-Fi you were on are saved on your device. If your device is backed up to iCloud or to a computer, the backup includes them (see Backups in section 2). Unseen does not save them anywhere else.

Four things do leave your device, and each only when it happens:

1.  **Counts of how the app is used**, sent to PostHog (servers in the European Union). You can turn this off in Profile.
2.  **A check on whether you have Premium**, and your purchases, through RevenueCat and the App Store.
3.  **An ad, if you tap to watch one for an extra scan**, through Google.
4.  **Where a scan happened**, sent to Apple when you open its report or when a screen shows its address, so Apple can draw the map and look up the address.

Every one of them carries your device's IP address, as every request on the internet does.

There is no account. There is no Unseen server that holds your scans. The list of devices a scan sees is not sent to us, to the ad service or to the counts.

This page says what **this version** does. It is not a promise about every future version. When what the app does changes, this page changes with it, and the date above changes too.

* * *

## 1\. Who we are

Unseen is made by theworkers.co, Istanbul, Türkiye. "We" and "us" mean theworkers.co. "Unseen" means the app.

Contact: [support@theworkers.co](mailto:support@theworkers.co)

* * *

## 2\. What stays on your device

A scan runs on your device. Nothing in this section is sent to us.

**Camera.** When a check uses the camera, Unseen looks at the picture the camera produces and looks for the kind of reflection a lens gives back. During a Full Scan the camera also follows how you move around the room. During a Full Scan, Unseen keeps one small picture of each lens marker the saved report lists, at most 12 a scan. Each picture is a square cut from the camera image around the marker, 320 pixels on each side, saved as a JPEG with all metadata removed: no EXIF data, no GPS position, no device details. The pictures are kept only on your device, with the scan, and Unseen does not upload them or send them anywhere. Each one is shown only on its marker's page in the app, and they are deleted when the scan is deleted. Apart from these pictures, a camera frame is held in memory only while it is being analysed and is not written to storage. A report contains no other photos of the room. Unseen does not record video or sound, and does not ask for the microphone.

**Wi-Fi and the local network.** Unseen asks the Wi-Fi network you have joined which devices announce themselves, using a fixed list of service types written into the app. Each device answers with the name it announces and the type of service it offers. Unseen does not work out a brand or make: one shows only if the device's own name contains it. The same short browse, about 1.5 seconds, also runs when you allow the local network permission, not only during a scan. This traffic stays on that network.

**Bluetooth.** Unseen listens for nearby devices that are broadcasting and reads what they broadcast: a name if they have one, the services they offer, a maker code and signal strength. It only listens. It does not connect to anything or pair with anything.

**Magnetic field.** Where your device has the sensor, Unseen reads the magnetic field. It is weak evidence on its own, and it never decides a result alone.

**Location.** Unseen asks for your location **only while you are using the app**. It uses it for two things: to save where each scan happened, and to read the name of the Wi-Fi network you are on (the system reveals that name only to an app that has location permission). It takes one position at the start of a scan. It does not follow you, and it does not use location in the background.

**Some of what a scan sees belongs to other people.** The names, addresses and services a scan reads from other devices on a network or over Bluetooth belong to those devices. Unseen shows them to you as evidence and keeps them on your device with the scan.

### What is saved on your device

-   every scan you ran: when it started and ended, the mode, what each check saw, the result, and what you answered about lens markers during a Full Scan;
-   during a Full Scan, a small picture of each lens marker the report lists (see Camera above);
-   for a Quick or Quiet scan too, your own answers on the spots you checked by eye, Looks fine or Suspicious;
-   **where the scan happened**, as coordinates;
-   the kind of place you started the scan from, such as a hotel or a fitting room, if you chose one;
-   **the name of the Wi-Fi network** your device was on, or a note that it was not on Wi-Fi or that the name could not be read;
-   the network range, such as `192.168.1.x`, and the names and details of nearby devices the scan saw;
-   your settings, how many free scans you have left this month, and what your device turned out to be able to do.

A Full Scan also keeps a top-down map of the areas the camera covered, on your device only. It is deleted when you delete the scan.

**How long, and how to delete.** Scans stay on your device until you delete them. You can delete one scan, or clear all history, from the Scans tab. Deleting a scan removes it, with its location, Wi-Fi name and the small pictures of its lens markers, from the device's storage, and the data is overwritten rather than just marked as free. Deleting the app removes everything Unseen stored on the device.

**Backups.** If your device is backed up to iCloud or to a computer, the backup includes your scan history, with the small pictures of lens markers. Unseen does not upload it, but your backup may hold a copy. A backup made before you deleted a scan keeps its copy until that backup is replaced.

**Switching apps.** When you leave Unseen, the app switcher shows a plain dark cover instead of the screen, so a report is not left visible there.

We cannot reach any of this. We cannot look at it, retrieve it or delete it for you.

* * *

## 3\. What leaves your device

### 3.1 Counts of how the app is used (PostHog)

**When.** While you use the app: when you open a screen or tap a button, run a scan, answer a permission prompt, or go through the Premium screen. If your device has no connection, the counts wait on it and are sent later.

**Who gets it.** PostHog, the service that holds these counts for us. We use its European Union servers. The counts are kept for up to one year.

**What it contains.**

-   How the app is used: which screens you open and which buttons you tap, from a fixed list; when a scan starts, finishes or stops; after a Full Scan, how many lens markers you called Suspicious, how many you called Not a lens and how many you left unanswered; your answers to permission prompts; your steps on the Premium screen and the plan you chose.
-   For each scan, which of its checks ran, and whether each one ran, gave an unclear result or could not run. For the network check, an unclear result means no device answered, so this shows whether at least one device answered. No count, name or address is sent.
-   Purchases: that one happened, and which plan.
-   This device and this app: the device model, the iOS or iPadOS version, the app version and build, the screen size, the language the app is set to, whether you have Premium, which of two Home screen titles the app shows, and whether it is a test build or runs on a real device.
-   Identifiers: a random identifier for this installed copy of Unseen, and one for each visit. They belong to the copy of the app. There is no name behind them, and we do not create a profile of you.
-   Technical failures: a reason from a fixed list, such as the store not answering.
-   **Your IP address.** Every request carries it, and PostHog keeps it with the counts. An IP address can show roughly where you are, for example the town of the network you are using. Unseen asks PostHog not to work out a location from it. We cannot promise more than that.

**What it never contains.** Anything else a scan saw: not its overall result, not the devices on a network or their names, not how many devices it saw. Not the Wi-Fi name. Not where a scan happened. Not the kind of place you started a scan from. Not the price you paid. Not your country or time zone. Not your name or email address. Nothing you type.

**Turning it off.** Profile has a switch for these counts. The counts are sent unless you turn it off. When you turn it off, Unseen stops sending them, deletes the counts still waiting on your device and deletes the random identifier of this installed copy. Counts already sent are not recalled; they stay with PostHog until the period above ends.

### 3.2 Your purchases (RevenueCat and the App Store)

**When.** When Unseen checks whether you have Premium, and when you buy or restore a plan.

**Who gets it.** RevenueCat, which tells the app whether Premium is active, and Apple, which sells and bills the plans.

**What it contains.** Whether this copy of Unseen has an active Premium plan, the store's purchase identifiers, and a random identifier RevenueCat gives this installed copy (it is not an account). Like most apps that use RevenueCat, the app also sends technical facts when it contacts it: your IP address, the country of your App Store, your language, your device model and the vendor identifier iOS and iPadOS give every app from the same developer on your device.

**What it never contains.** Scan results, the devices a scan sees, anything about the room, your name or your email address. Your card details go to Apple. We and RevenueCat do not see them.

RevenueCat's privacy policy is at [https://www.revenuecat.com/privacy](https://www.revenuecat.com/privacy).

### 3.3 An ad, if you tap to watch one (Google)

**When.** From the moment you tap to watch an ad for an extra scan. Only the free plan offers this. Unseen first asks Google's consent service whether your region needs a choice about ads, and shows Google's form if it does. Then it asks Google for the ad. Contact with Google also happens when you open Ad settings in Profile, if your region needs a choice about ads and you have tapped to watch one before. Unseen is built not to contact Google before you tap.

**Who gets it.** Google's ad service (AdMob).

**What it contains.** A device identifier, your device's IP address, and technical data about the ad and the request: whether the ad loaded, whether you watched it, and technical facts about the device and app that Google's advertising software collects. The device identifier is not the advertising identifier: Unseen does not use that one, and without the tracking request it is all zeros. Google can use the IP address to estimate roughly what city you are in. Google's advertising software also stores its own identifiers in the app, among them a cookie kept for up to two years, which let Google recognise this installed copy across ad requests, to limit how often an ad is shown and for ad reporting. Deleting the app deletes them.

**What it never contains.** Scan results, the devices a scan sees, anything about the room.

**How ads are chosen.** Unseen asks for ads that are not based on anything you did before, in every region. Google chooses them using this app and the rough location it works out from the IP address. Where local rules require a choice, Google's consent form appears the first time you tap to watch one. You can change your answer in Profile, under Ad settings.

**Reporting an ad.** If an ad is inappropriate, Profile, under More, has Report an ad. It opens an email to [support@theworkers.co](mailto:support@theworkers.co).

**Unseen never asks to track you across other apps and websites.** On iPhone and iPad this means Unseen never shows Apple's App Tracking Transparency request, for any feature. Unseen does not use the advertising identifier.

Google handles what it receives under its own terms: [https://policies.google.com/privacy](https://policies.google.com/privacy).

### 3.4 The map and address in a report (Apple)

**When.** When you open the report of a scan that saved where it happened; while such a scan is on screen in the Scans tab; and when the Home screen shows your last scan, which looks up that scan's place name when Home opens. The Scans tab and Home ask for the address only, one scan at a time. The street map and address are not saved, so Unseen asks again later. With no connection, nothing is sent and the place reads "Unspecified place".

**Who gets it.** Apple, which draws the map and looks up the address.

**What it contains.** Where that scan happened, as coordinates, and your IP address.

**What it never contains.** Anything the scan saw, its result, or the Wi-Fi name.

### 3.5 If you write to us

If you email [support@theworkers.co](mailto:support@theworkers.co), we receive your email address and what you write, including attachments. We use it to answer you and to fix what you reported. The mailbox is hosted by Google Workspace. Messages are kept for two years, then deleted. The "Write to us" link in the app opens a message to this address, and so does Report an ad in Profile. We count that the "Write to us" link was tapped, not what you write.

### 3.6 The IP address, once

Every request that leaves your device for the internet carries its IP address to whoever receives it. That is true of 3.1 to 3.4, and of the store's own traffic, which we do not control.

* * *

## 4\. What this version does not do

-   **No account.** There is no sign-in and no user record. Unseen does not know who you are.
-   **No upload of scans.** Unseen does not upload your scans, locations or Wi-Fi names (see Backups in section 2).
-   **No recording of the screen.** Unseen does not record the screen and takes no screenshots.
-   **No crash reporting from our own code.** Nothing we wrote in Unseen sends a crash report. If your device shares crash reports with developers, it sends them to Apple, and we see what Apple shows us. Google's ad software sends diagnostic data about itself when you use an ad, as described in 3.3.
-   **No online lookup of a device.** Unseen shows what a device announces about itself and works out nothing more. It asks the internet nothing about what a scan saw.
-   **No background location and no tracking.** Location is used only while the app is open.
-   **No microphone.**
-   **We do not sell your personal information.**

* * *

## 5\. The permissions this version asks for

| Permission | What it is used for |
| --- | --- |
| Camera | Looking for lens-like reflections, and following your walk around the room. During a Full Scan, keeping a small picture of each lens marker with the scan (see Camera in section 2). |
| Local network | Seeing which devices announce themselves on the Wi-Fi you are on. |
| Bluetooth | Listening for nearby devices that are broadcasting. |
| Location, while using the app | Saving where each scan happened and the name of the Wi-Fi network you are on. |

Unseen asks for notifications only at the moment you turn on a feature that uses them. Saying no to a permission does not close the app: Unseen says which checks it could still run and which did not run. You can change any permission in your device's settings.

* * *

## 6\. Children

Unseen is not made for children. There is no account, so we do not know anyone's age and we do not ask. We do not knowingly collect information from children. If you think a child has written to us, email [support@theworkers.co](mailto:support@theworkers.co) and we will delete the message.

* * *

## 7\. Where the data goes

We are in Türkiye. The services in section 3 handle data in other countries, including the United States. This section says which service receives what, where it is, and the terms it handles the data under. Each service handles the data under its own published terms and data protection commitments, linked below.

**Services that handle data for us**

-   **PostHog** (usage counts, 3.1): PostHog, Inc., United States. Unseen uses PostHog's EU servers, in Frankfurt, Germany. PostHog's own documents say some processing can take place outside the EU, including in the United States, and PostHog states that it takes part in the EU-U.S. Data Privacy Framework. [https://posthog.com/privacy](https://posthog.com/privacy)
-   **RevenueCat** (purchases, 3.2): RevenueCat, Inc., United States. Data is handled in the United States. RevenueCat's data processing addendum is part of its terms and uses the EU Standard Contractual Clauses, with the UK Addendum for the UK. [https://www.revenuecat.com/dpa](https://www.revenuecat.com/dpa)
-   **Google Workspace** (email you send us, 3.5): Google's data processing terms for Workspace rely on the EU-U.S. Data Privacy Framework and its UK Extension, and on the EU Standard Contractual Clauses where those apply. [https://cloud.google.com/terms/data-processing-addendum](https://cloud.google.com/terms/data-processing-addendum)

**Services that receive data under their own terms**

-   **Google's ad service and consent form** (the ad, 3.3): for ad data, Google is a separate controller under its own terms, not acting for us. For people in the EEA the data goes to Google Ireland Limited. Google's transfers on to the United States rely on the EU-U.S. Data Privacy Framework, with the EU Standard Contractual Clauses as a fallback. For the UK, Google relies on the UK Extension to the Framework and the UK Addendum. [https://business.safety.google/controllerterms/](https://business.safety.google/controllerterms/)
-   **Apple** (the map and address, 3.4): Apple handles what it receives under its own privacy policy. For people in the EEA, the UK and Switzerland, Apple Distribution International Limited in Ireland is responsible, and Apple's policy says transfers from there use Standard Contractual Clauses. [https://www.apple.com/legal/privacy/](https://www.apple.com/legal/privacy/)

If you are in Türkiye, the data in section 3 goes abroad to these services, in the countries named above.

* * *

## 8\. Why we are allowed to use data this way (EEA and UK)

| What | Basis |
| --- | --- |
| Running scans and keeping them on your device | It is what you asked the app to do. |
| Purchase check | Needed to give you what you paid for. |
| Counts of how the app is used | Our legitimate interest in understanding and improving the app. We do not ask for consent before they start, and you can turn them off at any time in Profile; see 3.1. |
| The ad request | Our legitimate interest in funding a free tier. Where local rules require consent for ads, Google's consent form asks for it and you can change your answer in Ad settings. |
| Map and address for a report | It is what you asked for by opening the report. |

* * *

## 9\. Your rights

**Everyone.** You can delete your scans in the app, delete the app to remove everything it stored, turn off the usage counts in Profile, change your ad choice in Profile under Ad settings, and ask us questions at [support@theworkers.co](mailto:support@theworkers.co).

**An honest limit.** We have no account, so we cannot find "your" data by your name. The counts and purchase records are tied to a random identifier on your device, which you cannot read and we cannot match to you. If you write to us, we will tell you what we can and cannot do for your request. What we hold about you for sure is an email you sent us.

**If you are in the EEA or the UK.** You can ask for access, correction, deletion, restriction, portability, and you can object to how data is used or withdraw a consent you gave. You can complain to your data protection authority. We answer within one month.

**If you are in Türkiye.** Under Article 11 of Law No. 6698 (KVKK) you can ask whether your personal data is processed, what for and who receives it, ask for correction or deletion, object to a result against you, and claim compensation. The data controller is theworkers.co, Istanbul, Türkiye. Write to [support@theworkers.co](mailto:support@theworkers.co).

**If you are in California or another US state with a privacy law.** You can ask what personal information is collected about you and ask for it to be deleted or corrected, and you will not be treated worse for asking. We do not sell personal information. The categories involved are identifiers (IP address, the random identifiers and the vendor identifier), commercial information (purchases), internet or network activity (how the app is used, interaction with an ad), and approximate location (an IP address can estimate a city). We use them only for the purposes in section 3.

* * *

## 10\. Keeping it safe

Your scans, and the small pictures of lens markers kept with them, sit in the app's own storage on your device. The history file uses the data protection of iOS and iPadOS, so it is locked while the device is locked, except while the app has it open. A passcode, Face ID or Touch ID is the main protection, and it is worth having. Requests to PostHog, RevenueCat, Google and Apple are encrypted in transit. No storage or connection is perfectly safe, and we do not claim otherwise.

* * *

## 11\. Changes to this page

When what the app does changes, we change this page and the date above. This page names the version it describes. The app carries the same facts in Profile, under "How your privacy is protected", which also names the version.

* * *

## 12\. How to reach us

theworkers.co, Istanbul, Türkiye  
[support@theworkers.co](mailto:support@theworkers.co), also for data protection requests.