Last updated: September 1, 2026
Your collection stays on your iPhone. The photos of your medals, and your race names, times, dates, places and notes, are never uploaded — the 3D models are generated entirely on the device. The app works without an account and without a login.
Since version 1.1, Medalheiro sends two kinds of anonymous technical data: crash reports, and — where the law requires your permission, only once you have given it — counts of how the app is used. Neither ever contains anything from your collection. Sections 1 and 10 say exactly what is sent and how to switch it off.
Medalheiro asks for no account, no login, no email address and no age. It never collects your name, your contacts, your location, or any other information that identifies you.
Nothing from your collection is ever sent: no photo, no race name, no time, no date, no place, no note and no rating.
What the app does send is technical, anonymous, and limited to two things.
Crash reports. When the app stops unexpectedly, a report is sent so the fault can be found and fixed. It contains the state of the program at the moment it stopped, the device model, the iOS version, the app version, and a trail of the technical steps the app had taken beforehand. It contains nothing you typed and nothing you photographed.
Usage counts. Anonymous counts of what happens in the app: how often a scan succeeds or fails, which frames and finishes get used, which games get played, and how long those take. Every value is a number or a fixed word from a short list — for example depth: ai, frame: laurel, game: snake. The size of your collection is reported as a range, such as 6-20, and never as an exact number.
No advertising identifier. Medalheiro does not use the IDFA, never asks for App Tracking Transparency permission, and does not track you across other apps or websites. Every advertising feature of the services described in section 9 is switched off in the app's own code, in every country, whatever your settings say.
Medalheiro builds 3D models from two photos of each medal — the front and the back. Those photos can come from your device's camera or from your photo library, whichever you choose.
Photos are saved on your device only and are never uploaded anywhere. The developer has no access to them.
About photos imported from your library:
Medalheiro never writes photos to your photo library.
To turn two photos into a 3D model, Medalheiro uses machine learning and computer vision that run entirely on your iPhone:
There is no cloud AI and no image is sent anywhere for remote processing. No photo is used to train any model, ours or anyone else's.
As a result, the app generates medals normally in airplane mode, with no data connection.
Everything you create in Medalheiro is stored locally on your device using Apple's native SwiftData framework. That includes:
We have no access to any of this data. It belongs to you alone.
Medalheiro requests only two permissions, both at the moment they are needed and both optional:
You can grant or revoke these permissions at any time in iOS Settings > Medalheiro. The app requests no access to location, contacts, microphone, health, notifications or any other device data.
In this version, Medalheiro does not sync data between devices and does not use iCloud, CloudKit or any other remote storage service. Your collection exists only on the device where it was created.
If you back up your iPhone through iCloud or your computer, Medalheiro's data will be included in that backup, which is managed and protected by Apple. See Apple's Privacy Policy for how those backups are handled.
Should syncing be added in the future, this policy will be updated before the feature goes live.
Medalheiro is free and has no subscriptions or in-app purchases. No financial data — card numbers, bank details or billing information — is collected, processed or stored.
Medalheiro is a collection app for road runners. It is not directed at children and is not published in the App Store's Kids category.
No personal information is collected from anyone, minors included: the app asks for no name, no email address, no age and no location, and nothing it sends can identify a person. On that basis it is consistent with COPPA (Children's Online Privacy Protection Act) and equivalent regulations.
Medalheiro uses two services from Google, both part of Firebase, and no others:
We do not use advertising networks, social media SDKs, cloud AI services, or any other analytics or tracking tool.
Google processes this data on our behalf and may store it on servers outside your country, including in the United States, under the safeguards set out in its own terms. See Google's Privacy Policy and Firebase's privacy documentation.
Everything else in the app is Apple's own frameworks — SwiftData, Vision, Core ML, SceneKit and AVFoundation — all executed locally on the device.
In the European Economic Area, the United Kingdom and Switzerland, usage counts are switched off when you install the app. The first time you open it, Medalheiro asks whether you want to share them. Nothing is sent before you answer, and answering "No thanks" means nothing is ever sent.
Wherever you are, if the setting is there you can change your mind at any time: Settings > Share usage data, inside the app.
Everywhere else, usage counts are on by default and the same setting switches them off.
Crash reports are always on, in every country. They carry no personal data, and they are what makes it possible to fix a fault that is affecting you.
Legal bases, for readers in the EEA, the UK and Switzerland: usage counts rest on your consent, GDPR Article 6(1)(a), where consent is required, and on our legitimate interest in improving the app elsewhere; crash reports rest on our legitimate interest in the app working correctly, Article 6(1)(f).
Retention. Crash reports are kept for 90 days. Usage data is kept for the shortest period Firebase offers, configured in the Google console.
Your collection is stored on your device only, so you have full control over it. You can:
There is no need to request deletion of your collection from the developer, because none of it is in our possession.
The technical data in section 1 is a different case, and we would rather be plain about it than promise something we cannot do: it carries no identifier that we can connect to you, so there is nothing in it that says which entries are yours, and we cannot look them up, export them or delete them individually. What you can do is stop it — turn off Share usage data and nothing further is sent.
If you are in the EEA, the UK or Switzerland, you also have the right to lodge a complaint with your national data protection authority.
If this Privacy Policy is updated, the new version will be published on this same page with a revised update date. We recommend checking this page periodically.
If there are significant changes to how we handle data — for example, if we begin collecting any information or syncing your collection — we will notify users through the app itself before the change takes effect.
If you have questions about this Privacy Policy, get in touch:
Email: medalheiro.support@gmail.com