Privacy Policy

Last updated: October 2026

FLIM is a disposable-camera app for sharing photos with friends, in private rolls and on a following-based feed. This policy explains what we collect, why, and the control you have. We keep it short because we collect very little.

What we collect

• Email address, used only to sign you in and gate invite access. We do not email you marketing.
• If you ask to join (the waitlist in the app or the request form on this site), the email address and, from the app, the first name you give us, so we can let you in and write to tell you. Your request is not shared with anyone. Your internet address is used for a short while to stop the same request being sent over and over, and is not kept with your request. Ask us to remove a request at any time.
• Who invited you, meaning which member's code, roll code, or public code let you in. It is what makes you follow that person from the start and what Find friends uses to suggest the people they brought in. Anyone you invite is recorded against you the same way.
• Profile, meaning the username, display name, bio, accent colour, and profile/cover photos you choose, plus your signup number and any badges you have earned. These are shown to other users, except the colour, which is only yours.
• Photos you take, stored so they can develop and appear in your Darkroom, in rolls you share them to, and on your feed if you publish them. Each photo also carries a few numbers worked out on your phone at the moment you shoot: a sharpness and quality score, a small numeric fingerprint used to group near-identical shots, and whether the frame came out black or blurred. Nothing about a photo is analysed anywhere but on your phone, and the numbers say nothing about what is in the picture.
• Social activity, meaning the posts you publish, comments and emoji reactions you make, who you follow, the rolls you create or join, which reveals you have watched, and invitations to follow-up rolls that you accept or dismiss.
• Which posts you have reached in your feed, so a reinstall or a new phone does not show you the same photos as new. Only you can read this record; the person who posted never learns whether you saw it, and nothing counts it.
• Safety data, meaning users you block and any content or accounts you report, so we can review them.
• A device push token (only if you enable notifications), used to tell you when your roll develops, when friends react to or comment on your posts, when someone follows you or starts another roll with your group, and once a day to round up what your friends posted. Occasionally we may also send a nudge about your own account, like frames still waiting in your darkroom, or a note from us to everyone or to a group, such as a thank-you. Never marketing.
• What you write when you send feedback, along with your app version, build number, iOS version and device model, so we can reproduce what you are describing.
• Crash and diagnostic reports, meaning the technical record iOS produces if FLIM crashes or hangs on your device (where in the code it failed, your app version and device model), and, while we are chasing a specific bug, a short trail of which steps of one screen ran and how much memory was free at each. These never include your photos or anything you wrote, and the trails are removed once the bug is found.
• A short list of firsts, meaning the first time you launch the app, finish onboarding, allow camera access, reach a working camera, press the shutter, take a shot, create or join a roll, send or redeem an invite, share a post, watch a reveal, and whether you allowed or declined notifications when asked. One record per person per event, tied to your account, kept in our own database. It exists so we can tell which parts of FLIM people actually reach, rather than guessing.
• Your app version and your phone's time zone setting, updated each time you open FLIM, so we know which versions are still in use and roughly which parts of the world FLIM is used in. This is the time zone your phone is set to, the same one it uses for its clock. It is not your location: FLIM does not use location services or GPS, and does not look up where you are from your internet connection.
• Day counts of a few actions, meaning that on a given day you opened the app, took some number of photos, or shared some number of posts. A count per day, nothing more: never the time of day, never which photos, and never what was in them. Together with the firsts above, this is the whole of our analytics. No analytics company is involved and nothing is shared with one.

In the app we do not collect your contacts, your location (from location services, GPS or your internet connection), or advertising identifiers, and we do not sell your data or use third-party ad tracking. This website is measured separately and is described below.

This website

Everything above is about the FLIM app. The site you are reading is measured much more thinly, with Vercel Web Analytics, run by the company that hosts the site for us.

• No cookies and no identifiers. Nothing is stored on your device, and you are not followed from one visit to the next, or from this site to any other.
• What is recorded for a page view: which page, the site that linked you here, any campaign tag in the link, your country, whether you are on a phone, tablet or desktop, and your browser and operating system.
• Country is the most precise location we ever see. It is worked out at our host's edge network. We are never shown your city, your region, or your IP address.
• Invite codes are removed before anything is sent. If you arrived on a personal or roll invite link, we record that an invite link was opened, never which one.
• None of it is joined to your account. Site measurement and app data are kept apart, and we cannot tell that a visitor here and a user in the app are the same person.

Where your data lives

Your account data and photos are stored on Supabase (our backend and storage provider) on your behalf. Photos are kept in a private storage bucket, access-controlled by row-level security, and served via time-limited signed links.

How your data is used

Only to run the app: authenticate you, develop and display your photos, deliver them to the rolls and followers you choose, power reactions and comments, send notifications you've enabled, and keep the community safe.

Sharing and visibility

• Personal photos in your Darkroom are visible only to you.
• Photos in a shared roll are visible to that roll's members (a roll holds up to 50 people).
• Photos you publish are visible to the people who follow you: in their feed, and on your page. Following is one tap and needs no approval, so anyone on FLIM can choose to follow you and then see your photographs; until they do, they see your name, avatar, bio and badges and nothing else. Someone you tag in a photo can see that photo. Anyone you block, and anyone who blocks you, sees nothing of yours.
• What can be exported out of FLIM: your own photographs, and every photograph in a roll you belong to, from that roll. A roll is a camera its members share, and its photographs are theirs to keep. A friend's feed post or chapter can be reacted to and commented on, but not saved or shared out from your phone.
• Find friends suggests people from signals already listed here: who follows you, who shares a roll with you, who invited you and who they invited, and who your friends follow. Nothing is read from your contacts.
• Your page shows a chapter for each month you posted. A chapter is built only from what you already shared, and the monthly numbers it ends on are shown to other people only if you choose to show them. Badges you have earned also show on your page.

We don't share your data with anyone else except our infrastructure providers, Supabase (backend and storage), Apple Push Notification service (notifications, only if enabled), and Vercel (website hosting and the site measurement described above, which never touches your account or your photos), as needed to operate the app.

Your controls

• Delete a photo at any time from the full-screen view; delete a post to remove it from your feed. Deleting removes the record first and the image files right after; a file that fails to delete is swept up automatically.
• Photos that have not finished uploading exist only on your phone until they do. FLIM keeps them and retries on its own; deleting the app before then deletes them too.
• Block or report a user or a photo; leave a roll, or (as its creator) remove a member. An invitation to a follow-up roll can be dismissed, and dismissing it is invisible to everyone else.
• Turn notifications on or off from your Profile, or in iOS Settings.
• Delete your account from Profile → Delete Account. This permanently removes your account, photos, posts, rolls, and reports, and cannot be undone.

Children

FLIM is not directed to children under 13, and we don't knowingly collect their data.

Changes

We'll update this page if our practices change, and revise the date above.

Contact

Questions or requests: support@flim-app.com.