Your photos are the point. Your data is not.

When you sign in with Apple or Google, we receive your email address and a unique user ID from the provider. That is the whole account.

You can set a display name and an avatar. Both are optional and exist so the people you share films with can recognize you.

We do not collect your contacts, your location, your browsing history, or anything from other apps. There are no ads in Fini, and we never sell data.

Your account exists so shared films work: so a roll knows who its participants are, who shot which frame, and who is allowed to see the developed photos. Your email is used for sign-in and, rarely, to contact you about your account. Nothing else.

Photos you shoot on a personal film stay on your device. They are never uploaded anywhere.

Photos you shoot on a shared film are uploaded so the other participants can see them once the film develops. They are stored in private storage buckets, and access is restricted at the database level to the participants of that specific film. Nobody else — including other Fini users — can read them.

Avatar images are the one exception: they live in a publicly readable bucket so they can load quickly for film participants. Don't use an avatar you wouldn't want visible.

The camera permission is used only to take photos inside the app. The photo library permission is add-only — Fini can save developed photos to your library but cannot read what's already there.

Accounts, shared-film data, and uploaded photos are hosted on Supabase, which provides our authentication, database, and file storage. Data is transmitted over HTTPS and stored under row-level security rules that scope every read and write to your own account and the films you participate in.

We use PostHog to understand which parts of the app get used — events like “film created” or “develop completed,” tied to your random user ID.

Before anything is sent, the app strips event data of emails, names, avatar references, URLs, file paths, coordinates, photo and film identifiers, invite codes, and tokens. Session recording, screen tracking, and automatic interaction capture are all turned off. Your photos are never part of analytics.

We do not track you across other apps or websites, and we do not use your data for advertising.

If you allow notifications, Fini schedules quiet reminders — a film finished developing, a roll is waiting — locally on your device. Notification permissions are optional and can be revoked anytime in iOS Settings.

We keep your data while your account exists. You can delete your account from the app's settings. This removes your profile, your participation records, and the films you own — including their photos. Photos you contributed to films owned by others stay in those films so your friends keep their developed rolls, but your name is permanently removed from them. You can also email hello@shootfini.app and we'll handle the deletion for you.

Photos on personal films are yours and on your device — deleting the app deletes them.

Fini is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we'll remove it.

If this policy changes in a way that matters, we'll update this page and the effective date above. We won't quietly start collecting more than what's described here.

Fini is built by a solo developer. Questions about your data go straight to the person who wrote the code: hello@shootfini.app.