Privacy Policy

Last updated: August 2026

FLIM is a disposable-camera app for sharing photos with friends, in private rolls and on a following-based feed. This policy explains what we collect, why, and the control you have. We keep it short because we collect very little.

What we collect

• Email address, used only to sign you in and gate invite access. We do not email you marketing.
• Profile, meaning the username, display name, bio, and profile/cover photos you choose. These are shown to other users.
• Photos you take, stored so they can develop and appear in your Darkroom, in rolls you share them to, and on your feed if you publish them.
• Social activity, meaning the posts you publish, comments and emoji reactions you make, who you follow, and the rolls you create or join.
• Safety data, meaning users you block and any content or accounts you report, so we can review them.
• A device push token (only if you enable notifications), used to tell you when your roll develops and when friends react to or comment on your posts. Very occasionally we may also send a nudge about your own account, like frames still waiting in your darkroom. Never marketing, and never about anyone else's activity beyond what is listed here.
• What you write when you send feedback, along with your app version, build number, iOS version and device model, so we can reproduce what you are describing.
• Crash reports, meaning the technical record iOS produces if FLIM crashes on your device (where in the code it failed, your app version and device model), so we can fix it. These never include your photos or anything you wrote.
• A short list of firsts, meaning the first time you launch the app, finish onboarding, allow camera access, reach a working camera, press the shutter, take a shot, create or join a roll, send or redeem an invite, share a post, watch a reveal, and whether you allowed or declined notifications when asked. One record per person per event, tied to your account, kept in our own database. It exists so we can tell which parts of FLIM people actually reach, rather than guessing.
• Day counts of a few actions, meaning that on a given day you opened the app, took some number of photos, or shared some number of posts. A count per day, nothing more: never the time of day, never which photos, and never what was in them. Together with the firsts above, this is the whole of our analytics. No analytics company is involved and nothing is shared with one.

In the app we do not collect your contacts, location, or advertising identifiers, and we do not sell your data or use third-party ad tracking. This website is measured separately and is described below.

This website

Everything above is about the FLIM app. The site you are reading is measured much more thinly, with Vercel Web Analytics, run by the company that hosts the site for us.

• No cookies and no identifiers. Nothing is stored on your device, and you are not followed from one visit to the next, or from this site to any other.
• What is recorded for a page view: which page, the site that linked you here, any campaign tag in the link, your country, whether you are on a phone, tablet or desktop, and your browser and operating system.
• Country is the most precise location we ever see. It is worked out at our host's edge network. We are never shown your city, your region, or your IP address.
• Invite codes are removed before anything is sent. If you arrived on a personal invite link, we record that an invite link was opened, never which one.
• None of it is joined to your account. Site measurement and app data are kept apart, and we cannot tell that a visitor here and a user in the app are the same person.

Where your data lives

Your account data and photos are stored on Supabase (our backend and storage provider) on your behalf. Photos are kept in a private storage bucket, access-controlled by row-level security, and served via time-limited signed links.

How your data is used

Only to run the app: authenticate you, develop and display your photos, deliver them to the rolls and followers you choose, power reactions and comments, send notifications you've enabled, and keep the community safe.

Sharing and visibility

• Personal photos in your Darkroom are visible only to you.
• Photos in a shared roll are visible to that roll's members (a roll holds up to 50 people).
• Photos you publish to your feed are visible to your followers.

We don't share your data with anyone else except our infrastructure providers, Supabase (backend and storage), Apple Push Notification service (notifications, only if enabled), and Vercel (website hosting and the site measurement described above, which never touches your account or your photos), as needed to operate the app.

Your controls

• Delete a photo at any time from the full-screen view; delete a post to remove it from your feed.
• Block or report a user or a photo; leave a roll, or (as its creator) remove a member.
• Turn notifications on or off from your Profile, or in iOS Settings.
• Delete your account from Profile → Delete Account. This permanently removes your account, photos, posts, rolls, and reports, and cannot be undone.

Children

FLIM is not directed to children under 13, and we don't knowingly collect their data.

Changes

We'll update this page if our practices change, and revise the date above.

Contact

Questions or requests: support@flim-app.com.