Privacy Policy

When you sign in with Apple or Google, we receive your email address and a unique user ID from the provider. We use this information to create and manage your account.

You can set a display name and an avatar. Both are optional and exist so the people you share films with can recognize you.

We do not collect your contacts, your location, your browsing history, or anything from other apps. There are no ads in Souvenir, and we never sell data.

We use account information to operate shared films, identify the participants in a roll, attribute frames, and control access to developed photos. We use your email address for sign-in and may use it to contact you about your account.

Photos you shoot on a personal film stay on your device. They are never uploaded anywhere.

Photos you shoot on a shared film are uploaded so the other participants can see them once the film develops. They are stored in private storage buckets, and access is restricted at the database level to the participants of that specific film. Other Souvenir users cannot access them.

Avatar images are stored in a publicly readable bucket so they can be displayed to film participants. You should not use an image as your avatar if you do not want it to be publicly accessible.

The camera permission is used only to take photos inside the app. Photo library access is add-only. Souvenir can save developed photos to your library but cannot read photos already stored there.

Accounts, shared-film data, and uploaded photos are hosted on Supabase, which provides our authentication, database, and file storage. Data is transmitted over HTTPS and stored under row-level security rules that scope every read and write to your own account and the films you participate in.

We use PostHog to understand how the app is used. This includes events such as “film created” or “develop completed,” associated with your random user ID.

Before anything is sent, the app strips event data of emails, names, avatar references, URLs, file paths, coordinates, photo and film identifiers, invite codes, and tokens. Session recording, screen tracking, and automatic interaction capture are all turned off. Your photos are never part of analytics.

We do not track you across other apps or websites, and we do not use your data for advertising.

If you allow notifications, Souvenir schedules reminders on your device, such as when a film has finished developing or a roll is waiting. Notifications are optional and can be disabled at any time in iOS Settings.

We keep your data while your account exists. You can delete your account from the app's settings. This removes your profile, your participation records, and the films you own, including their photos. Photos you contributed to films owned by others stay in those films so your friends keep their developed rolls, but your name is permanently removed from them. You can also email hello@usesouvenir.app and we will process the deletion request.

Photos on personal films remain on your device. Deleting the app deletes those photos.

Souvenir is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

If we make a material change to this policy, we will update this page and the effective date above. Where required, we will provide additional notice of material changes.

Questions, requests, or complaints about this policy can be sent to hello@usesouvenir.app.