cuadrito.

Privacy

Your photos never leave your phone. Cuadrito reads them, arranges them and writes the finished slides back to your photo library, all on the device. There is no server to send them to, no account to make, and no upload step anywhere in the app.

What Cuadrito sends

Six things leave the device, and none of them is a photo or anything read out of one.

When something breaks
A stack trace goes to Sentry, our error reporting, so a failure can be found and fixed. It names the code that failed. It carries no photo, no filename and nothing read from a photo.
When you send a report
The bug report form sends what you typed, your email if you chose to leave one, and the shape of the project you were working on as plain numbers: how many slides, how many frames, how many of them hold a photo, and whether you were making a story or a carousel. That is enough to rebuild the layout from an empty canvas. It is not enough to know anything about your photos.
Which parts of the app get used
Cuadrito counts presses: the name of an action from a fixed list, and at most one short word saying which variant, like "story" or "warm". Three counts are sizes only: photos in a grab, slides in a share, frames placed. The code refuses to send anything else, so a filename cannot slip through.
That the page was visited
Vercel Web Analytics counts visits to cuadrito.app in aggregate. It sets no cookies, fingerprints nobody and keeps no personal data.
When you buy Pro on the web
Paying happens on Stripe's page, not ours. You give Stripe an email address and a card. We never see the card number, and no part of the payment passes through Cuadrito. Stripe keeps a customer record for you, and two small things of ours sit on it: a random id for each browser you use Pro in, up to three at a time, and a one-time code while you are putting Pro back on another device, stored scrambled and deleted as soon as it is used. Neither of them names you. Ask us to delete the record and it goes, and Pro goes with it. Buying through the App Store instead means Apple takes the payment and none of this happens.
When you put Pro back on another device
You type the email address you paid with. It goes to Stripe, to find the subscription it belongs to, and to Resend, our mail service, which sends you a link that works once and expires in fifteen minutes. That address is the only thing anyone types into Cuadrito, and we keep no copy of our own. It lives on Stripe's record of your payment and in that one email.

About the id these carry

Error reports and press counts carry a random id so one sitting's events can be read together, which is how a report about a layout lands next to the failure that caused it. The id is made fresh every time the app opens and is never stored. Close the app and it is gone, so nothing joins your visits together and nothing names you.

How Pro is remembered

Buying Pro on the web leaves a signed pass on the device, kept there the way a saved project is. It says which Stripe customer it belongs to, which of the three device slots it holds and when it runs out. It is not a login, and there is nothing in it about you or your photos. While you use the app it is quietly traded for a fresh one, which is how cancelling a subscription or refunding it takes effect.

What Cuadrito never does

Saved projects

A project you leave open is kept on the device so you can come back to it, in storage that belongs to Cuadrito alone. Deleting the project, or the app, takes it with them.

Children

Cuadrito is not built for children and asks for nothing that would identify anyone, of any age.

Changes

If what the app sends ever changes, this page changes with it, in the same release.

Getting in touch

Use the report link on the app's front page. It reaches the same place as everything above, and you can leave an email if you want an answer back.

Last updated 12 September 2026.