Flashback / Pocket Camera Lab

Privacy Policy

Last updated: September 8, 2026

Flashback processes photos locally. You can explore the app as a guest; account-linked Plus access and protected save or share actions require Sign in with Apple or Google.

What Flashback accesses

What stays on your device

Photos, videos, edits, album entries, camera preferences, and the optional local profile photo are stored on your device. Flashback processes photo looks locally. We do not upload your photos or videos to an analytics service, and we do not use advertising trackers.

First-party usage analytics

Flashback creates a guest Firebase identifier and links or switches it to your verified account when you sign in. Usage records contain this identifier, so signed-in activity is linked to your account. We count new and returning use, onboarding step reach, paywall views, and purchase or restore outcomes. We also record app version, device platform, app locale, and an approximate country supplied by Cloudflare when the app contacts byflashback.com. We do not include your name, email, photo library, or camera images in usage events. The same verified account identifier is used for billing verification.

These records are used only to understand whether Flashback works and where people leave the product flow. The three geography sources—app locale, verified storefront country when available, and Cloudflare country—remain separately labeled and are not combined into a precise location. Flashback does not use this data for advertising or cross-app tracking.

Sharing and third-party services

Firebase Authentication verifies Apple or Google credentials and stores the account identifier and provider information, including a name or email when provided. RevenueCat receives the verified account identifier and purchase information to check Plus access. Apple processes App Store payments. Cloudflare hosts our account endpoints and first-party analytics. Sign-in credentials are used for authentication; Apple authorization codes and revocation tokens are processed transiently on our server for account deletion and are not stored in analytics.

When you choose iOS Share or save to Photos, the destination is controlled by you and the receiving service’s own privacy policy applies. The web preview may load a demonstration image from Unsplash; this preview behavior is separate from the native camera workflow.

Retention and deletion

In Profile, choose Delete account or Delete guest data to remove the current Firebase identity, its associated raw usage records, and its Flashback billing customer profile. Signed-in users confirm their identity with Apple or Google; Apple access is revoked where linked. A short-lived hashed identifier prevents delayed usage events from recreating deleted records: the replay barrier expires after 24 hours and is removed by daily cleanup, normally within 48 hours. Previously aggregated statistics that do not identify individual users may remain. If deletion cannot be completed, the app reports an error so you can retry or contact support. Records shared with another app are not automatically erased by Flashback; contact support if this prevents deletion.

Account deletion does not cancel an App Store subscription or erase records Apple must retain. Manage or cancel subscriptions in iOS Settings under Apple Account → Subscriptions. Photos remain on your device: remove album items in the app or remove the app to erase its local storage. Photos exported to Apple Photos or another service must be deleted there. Uninstalling alone does not delete server records. For help, email us with your Flashback support identifier, if available.

Children

Flashback is not directed to children under 13, and we do not knowingly collect personal information from children.

Changes

We may update this policy when the app or its data practices change. The date above identifies the latest version.

Contact

Privacy questions can be sent to long131005@outlook.com.