Privacy Policy - Filmly

Filmly is a retro film camera that runs entirely on your device. This Privacy Policy explains exactly what the app does and does not do with your information.

The short version: your photos never leave your phone. There is no Filmly account, no Filmly server, and no way for us to see, receive or store any image you shoot or import.

Every part of the imaging pipeline — the live viewfinder filter, the film stock recipes, the develop step, the date stamp and the final export — runs on your device. No photo, frame, thumbnail or preview is ever transmitted anywhere. The application contains no image upload capability of any kind.

Photos you shoot are stored in Filmly's private storage on your device, alongside the untouched originals ("the negatives") so that any frame can be developed again later. Photos you save are written to your device's own photo library and belong to you; Filmly does not track or delete them.

Camera. Filmly requests camera access because it is a camera — the app opens directly into a live viewfinder. If you decline, the app still opens and you can import and develop existing photos; only shooting new frames is unavailable.

Saving photos. On Android, Filmly writes finished photos through MediaStore, which requires no storage permission. On iOS it uses the add-only photo library permission, which allows the app to add photos but never to read your library.

Importing photos. Import uses your system's own photo picker. This requires no photo-library permission at all — you hand Filmly exactly the files you selected and nothing else.

Filmly requests no location permission and never accesses your location. Exported photos are encoded from raw pixel data, which means they carry no EXIF metadata whatsoever — no GPS coordinates, no camera information, no timestamps beyond the date stamp you chose to print on the image itself. The date stamp is ink on the photo; it never rewrites any metadata.

Filmly displays advertisements supplied by Google AdMob, shown only in the Rolls and Me sections of the app. Ads never appear in the viewfinder, the editor, the develop reveal, or on the path that saves your photo.

To serve ads, Google may collect and process your device's advertising identifier, approximate location derived from IP address, and general device information. Google's handling of that data is described in the Google Privacy Policy. You can reset or limit your advertising identifier in your device's settings at any time.

The advertising SDK never receives your images, your file names, or any information about the content of your photos.

Filmly may collect anonymous crash and performance diagnostics so that faults can be identified and fixed. These reports contain technical information such as the device model, operating system version and the location in the code where a fault occurred. They never contain image data, file names or photo metadata.

Filmly does not collect your name, email address, phone number, contacts, calendar, microphone input, precise location, health data, or any account credentials. There is no sign-up, no login and no user account.

Filmly is suitable for general audiences and does not knowingly collect personal information from children. Because the app collects no personal information from anyone, it holds none belonging to a child.

All of Filmly's data lives on your device. Uninstalling the app removes its rolls, negatives and settings permanently. Photos you have already saved to your device's photo library are yours and are not removed — you can delete those from your photo library at any time.

Questions about this policy can be sent to gsantoso.app@gmail.com.