This policy explains how Torvmark Labs (Torvi Studio) handles information in connection with One More.
This page describes One More 1.0.1 (159), available on the App Store for iPhone, iPad and Apple TV, with Watch remote control.
One More is our photo booth for iPhone, iPad and Apple TV.
On this page
1. Who is responsible
For the processing for which we are responsible, the controller is Torvmark Labs, a sole proprietorship with organisation number 938 284 792, Hovsveien 27D, 1769 Halden, Norway. Torvi Studio is our brand. Contact: hello@torvistudio.com.
We are responsible for personal information we handle to provide and support One More, including support correspondence. You choose the content photographed, imported, stored and shared with the app. We do not receive a central, administrable copy of your photo library. Apple handles its own account, payment and platform services under its policies.
For processing for which we are responsible, we use contract performance (GDPR Article 6(1)(b)) for requested app functionality and contractual support; legitimate interests (Article 6(1)(f)) for necessary troubleshooting, security and general enquiries, balanced against your rights; and legal obligation (Article 6(1)(c)) where applicable. A device permission is a technical choice, not a blanket legal basis or consent from everyone pictured. Hosts must inform guests and establish any basis or permission required for their photography and sharing.
2. Information we and our partners handle
One More stores event names and dates, captions, templates, imported backgrounds and logos, settings, completed photos, thumbnails and original images from photo sequences locally. These may include names, faces and other information you choose to record.
On iPhone and iPad, the camera is used for photography and QR scanning when opened. The camera can remain active while the booth waits if the host enables person detection. Optional external camera input depends on a compatible camera, adapter and system support. On Apple TV, a connected iPhone or iPad sends video frames through Continuity Camera for preview and photography. Optional hand-gesture and person detection use local Apple Vision analysis on the device running the booth, including Apple TV. They do not identify people or create identity profiles. Camera images are not sent to an external AI service; saved photos can still sync to iCloud if you enable sync.
On iPhone and iPad, Face ID or the device passcode can protect host access. The app receives an authentication result, not biometric templates or the passcode. On Apple TV, a host PIN protects host settings in the guest photo booth; a hash of this PIN is stored locally. The TV edition does not use Face ID.
On iPhone and iPad, imports use the files you select through Photos or Files. Settings → Save to Photos offers automatic copying, off by default. Enabling it explicitly requests full read/write access to Apple Photos to create and manage the “One More” album and check existing copies for duplicates. The app limits these checks to its own album; it does not scan the rest of your photo library. Denying access does not prevent normal photography or local app storage. The iPhone and iPad editions do not record microphone audio or access contacts or location.
3. Storage, sync and connected services
No separate Torvi Studio account is required. Optional sync uses Apple CloudKit in your private iCloud database under your Apple Account. Events, associated text, custom templates, logos, backgrounds, finished photos and original individual images can transfer between iPhone, iPad and Apple TV using the same account. Date and layout metadata, technical record IDs, account context, change information and file checksums support sync and duplicate detection. Torvi Studio does not receive a central photo library.
The local app library, private iCloud sync and separate Apple Photos copies are distinct. On iPhone and iPad, Save to Photos copies saved finished photos and individual originals using the current export and watermark rules. Keep the app open until copying is confirmed complete. The Photos album preserves those images, not the app’s events, templates or restorable library structure.
On Apple TV, local photos, originals and downloaded templates are temporary cache files. tvOS can remove them to free space. Check that important photos have synced to iCloud or have been exported on another device. Permanent local storage on Apple TV is not promised. Apple TV has no Save to Photos, direct AirPrint, Instax or automatic-printing settings.
Sync runs while the app is active and depends on network access and available iCloud storage. It is not an independent historical backup. Turning sync off does not itself delete local or already synced content; Apple TV cache files remain subject to system removal. Device backups are separate and may contain app data depending on your system settings. Uninstalling the app does not remove backups or content already in iCloud.
The local remote shutter uses encrypted MultipeerConnectivity to exchange pairing IDs or invitation tokens, event name, booth status, countdown, photo number and control commands. It does not send the photo library to the remote controller. The Watch companion exchanges event name, status, countdown and shutter commands through WatchConnectivity. A connected audience screen may show live camera images and saved photos.
4. Purchases and subscriptions
Apple processes payment. StoreKit provides verified purchase entitlements and product/transaction information so the app can activate and restore Basic or Plus. We do not receive your payment-card details. Store purchase history is separate from your photo library.
Basic, Plus and the Basic-to-Plus upgrade are one-time, non-consumable purchases. The iPhone, iPad and Apple TV editions described here have no subscription. See the terms for watermark behaviour, upgrades and restoration.
5. Analytics, advertising and consent
The iPhone, iPad and Apple TV editions described here have no advertising SDK, third-party analytics SDK, advertising tracking or photo upload to a Torvi Studio server. The app uses local OSLog diagnostics, including purchase error codes and sync progress. It does not implement its own external crash-report upload. Apple may process diagnostics and share reports according to your platform choices; TestFlight has separate feedback, crash and usage reporting.
On iPhone and iPad, Settings → Beta is available in ordinary TestFlight and App Store builds. These features are optional and experimental. The hands-free photos main switch is on by default; person detection and the peace-sign shutter have separate controls, so this does not enable every automatic action. External camera, AirPrint, Instax Link and automatic printing are off by default.
Camera, Photos, Bluetooth, local network, iCloud and optional detection controls serve separate functions. Accepting these terms or granting camera access is not consent from photographed guests. Turn off hand gestures or person detection in the app and change system permissions in your device settings.
These One More pages use the site's functional language and theme preferences, shared across Torvi Studio subdomains, with cookies lasting up to one year and local storage as a fallback. Hosting may process IP addresses, request times, browser information and requested URLs for delivery and security. The website privacy overview describes these website services. They are separate from the app.
6. Data sharing
Apple provides iCloud, StoreKit and optional platform diagnostics. See Apple Privacy Policy and the privacy information for the Apple services you enable. Processing locations and international safeguards depend on those services; this policy does not promise a particular server country or end-to-end encryption for every data type.
Sharing, exports to Photos or Files, connected displays and printing happen at your direction, where supported by the device. Photos shown on a TV screen are visible to other people in the room. Receiving apps, storage services, printers and other people may retain copies under their own rules. The iPhone, iPad and Apple TV editions described here have no public web gallery or guest download link. Apple TV features do not involve advertising tracking or photo uploads to Torvi Studio.
On iPhone and iPad, AirPrint uses the system’s printing functions and network connection to send images and necessary print data to your chosen printer. Instax Link sends these directly over Bluetooth, with the relevant system permission, for manual printing to compatible printers. Device/printer names, technical identifiers and connection/printing status are used locally; compatible Instax printers may also provide battery and film status. This is not a photo upload to a Torvi Studio server. Physical Instax/printer support is not fully verified.
Automatic printing uses AirPrint, not Instax. It requires both AirPrint and automatic printing to be enabled, printer setup, a confirmed test print and activation for the individual event. PDF export of print sheets is available independently of the AirPrint switch.
When you contact support, we receive your email address, message, attachments and app/device details you send. Email is handled through Webhuset. Please use redacted or non-personal examples instead of identifiable guest photos. We do not sell your personal information. If you need information about safeguards relevant to data we handle, contact us.
7. Retention and deletion
Photos and events have no app-defined automatic expiry. You control local removal, but local photos, originals and downloaded templates on Apple TV are temporary cache files that tvOS may remove to free space. Deleting an event does not automatically delete its finished photos: memories retain their original names and files and must be managed separately.
With iCloud enabled, Delete from all devices and iCloud removes a memory’s cloud image attachments and originals when sync succeeds and propagates deletion between devices. Deletion metadata is retained to prevent photos returning during later sync. This is not an immediate erasure of every copy or all metadata.
Ordinary local deletion, disabling sync or uninstalling is not cloud deletion. Synced content can download again. One More does not edit or delete existing Apple Photos copies; deleting in the app or iCloud leaves those separate copies in Photos. Exported files, shared copies, printouts, device backups, Apple purchase history and support correspondence are also separate.
Only successfully completed copies outside the app protect those images if the app is uninstalled. Local interruption recovery is not a guarantee against loss. Do not uninstall or delete the library as a first troubleshooting step; first check completed copies and the support guide.
We retain support correspondence for as long as needed to handle the enquiry, relevant follow-up and any applicable legal claims or obligations, then delete it when it is no longer needed. No fixed automatic deletion period is promised for email, provider backups or server logs. Contact us about deletion of information you have sent to support.
8. Your rights and choices
You can edit or remove local content, export finished and individual photos where supported, disable sync, automatic Photos copying or optional detection, and change applicable camera, Photos, Bluetooth and local network permissions in system settings. Export is not a promise of a complete, restorable app backup. Use the support guide for deletion and sync steps.
The Apple TV app also provides an offline-readable privacy notice in Norwegian and English under Settings, with a QR code linking to this same privacy address.
Where applicable, you may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. If processing relies on consent, you can withdraw it without affecting earlier lawful processing. Contact us about data we hold; we may need proportionate identity verification. We cannot centrally retrieve or erase your device library or all copies held by recipients. For Apple's account data use Apple's privacy controls.
You can complain to Datatilsynet or your local data protection authority. We normally respond to rights requests within one month; legally permitted extensions may apply, and we will explain them.
9. Children
One More is a photo booth set up by an event host, not a children's social network. It does not require guest accounts or use advertising profiles. Photos may nevertheless include children. Hosts should provide appropriate information, obtain any required guardian permission and avoid unnecessary public display or sharing. Contact us if a child's personal information has been sent to support and should be removed.
10. Changes to this policy
This policy covers One More 1.0.1 (build 159), including the optional public beta features described above. Party web sharing, public guest galleries and guest download links remain unavailable in public Release and are outside this scope. We will update this policy when relevant functionality or data handling changes. The revision date above identifies this text. Significant changes will be communicated where required.
11. Contact
Provider: Torvmark Labs (Torvi Studio), sole proprietorship, organisation number 938 284 792, Hovsveien 27D, 1769 Halden, Norway. For support, privacy or legal questions: hello@torvistudio.com.
For questions about your library, purchases or privacy, contact us. Send the app version, device and a description of the issue, without passwords, pairing codes or unnecessary personal photos.