Privacy Policy
For the Fotufilm app (com.muastudio.fotufilm) on iOS and macOS.
Effective 27 July 2026 · Last updated 27 July 2026
Fotufilm collects nothing. It has no accounts, no analytics, no advertising and no server. Your photos and video are processed entirely on your device and are never uploaded anywhere.
The short version
Fotufilm is a film simulation app. It reads an image you choose, runs it through a physical model of photographic film, and gives you the result. All of that computation happens on your device, using its own processor and GPU.
The app contains no networking code at all — it makes no requests to us or to anyone else, so there is no channel through which your images or your usage could reach us even in principle. You do not have to take our word for this: Fotufilm is open source under the AGPL, and you can read every line of it.
What the app accesses on your device
iOS and macOS will ask your permission before Fotufilm can touch any of the following. You can grant or revoke each one at any time in your system Settings, and the app keeps working with reduced functionality if you decline.
Camera
Used only to show and develop the live viewfinder while you have the camera open. Frames are processed in memory and discarded. Nothing is recorded unless you deliberately take a photo.
Photo library
Used only to let you pick a photo or video to develop, and to save a developed result back to your library when you ask. The app reads the item you select; it does not scan, catalogue, index or upload your library.
Files you open
Images and video you open stay on your device. Intermediate files the app writes while developing are temporary and are removed by the system.
What we collect
Nothing. For clarity, here is the same statement against the data categories Apple asks developers to declare on the App Store.
| Data category | Collected? |
|---|---|
| Contact info (name, email, phone, address) | Not collected |
| Health & fitness | Not collected |
| Financial info | Not collected |
| Location | Not collected |
| Sensitive info | Not collected |
| Contacts | Not collected |
| User content (photos, video, other files) | Not collected |
| Search & browsing history | Not collected |
| Identifiers (user ID, device ID) | Not collected |
| Purchases | Not collected |
| Usage data, diagnostics, analytics | Not collected |
| Other data | Not collected |
There is no tracking as the App Store defines it: Fotufilm does not link any data to your identity, does not share data with data brokers, and does not use data for advertising. It does not use the Advertising Identifier and never presents the App Tracking Transparency prompt, because it has nothing to ask for.
Third parties
Fotufilm bundles no third-party analytics, advertising, attribution or crash-reporting SDKs. The open-source components it does build on are image-processing and numerical libraries that run locally; they are listed with their licences in THIRD_PARTY_NOTICES.md. None of them transmit anything.
Information Apple may collect
Downloading and running an App Store app involves Apple, not just us. Apple operates the App Store and may collect data about downloads, purchases and app usage under Apple's own privacy policy, which we do not control.
- If you have turned on Share With App Developers in Settings › Privacy & Security › Analytics & Improvements, Apple may give us aggregated, anonymised crash and usage reports. These come from Apple, contain no information identifying you, and are used only to fix crashes. You can switch this off at any time.
- If you install a pre-release build through TestFlight, Apple shares your feedback, along with crash logs and basic device information, with us. This applies only to testers who choose to join.
Retention and deletion
Because we hold no data about you, there is nothing for us to retain, export or delete, and no deletion request to make. Everything Fotufilm creates lives on your device: deleting the app removes its settings and any temporary files, and photos you chose to save remain in your photo library under your control.
Children
Fotufilm is not directed at children, but it is safe for them in the sense that matters here: it collects no personal information from anyone, of any age, and has no social features, messaging, external links to user content or advertising.
Your rights
Privacy laws such as the GDPR, the UK GDPR, the CCPA and India's DPDP Act give you rights of access, correction, deletion, portability and objection over personal data a company holds about you. We hold none, so there is nothing to access or erase — and we do not sell or share personal information, because we have none to sell.
The web darkroom
The project's browser-based darkroom in web/ is a development
tool you run yourself, on your own machine. It is not a hosted service, we do
not operate a server for it, and images you develop with it never leave your
computer. This site itself is a set of static pages served by GitHub Pages,
which sets no cookies and runs no analytics; GitHub records standard server
logs as described in
GitHub's privacy statement.
Changes to this policy
If Fotufilm ever gains a feature that changes any of this, we will update this page and move the effective date above before that version ships. Because the policy is versioned in the project's public git repository, you can see exactly what changed and when.
Contact
Questions about this policy, or about privacy in the app, are best raised in the open on the project's issue tracker, where the answer is visible to everyone: github.com/DhaliwalX/fotufilm/issues.