Privacy Policy

1. Who is responsible for your data

Film Recipe Gallery is developed and operated by Aldo ("we"/"us"), based in Mexico. For any privacy question or to exercise any of the rights below, contact mahayo2404@outlook.com.

2. Data we collect

Account information. Creating an account is optional and only needed for cloud backup and this website. If you create one, we collect the email address and password you provide — your password is hashed by Supabase Auth and never visible to us in plain text.

Your saved recipes, libraries and categories. If you're signed in, the recipes (Favorites/Want-to-Try), Libraries, and categories you save in the app are synced to our servers so you can view them here with the same account. This data is private to your account — never shown to, or shared with, any other user.

Photos and your recipes. Photos you link to a recipe live in the app's Gallery on your device; they are only uploaded if you back them up (see Gallery backup below).

Gallery backup. Gallery backup is off until you use it: only the photos or albums you choose in the app are backed up, plus your newest photos if you turn on automatic backup (off by default; on Wi-Fi only by default when enabled), and any photos you upload yourself in My Archive on this website. Backed-up photos are uploaded as full-resolution originals to our storage provider, Cloudflare R2, in its EU jurisdiction, up to your account's storage limit: 2 GB for every account, or 5 GB, 100 GB or 200 GB with a Film Recipe Gallery Plus plan. To apply the right limit we store which Plus plan you have (if any), where you got it and when it ends, and whether you bought Plus Lifetime. Originals are stored as-is, together with all their metadata — including EXIF data such as camera model, settings, date and time, and the GPS location where the photo was taken, if your camera or phone recorded one. If you don't want your location stored, turn off location tagging on your camera/phone or remove it before backing up. To show your backup quickly on this website, Cloudflare also makes and stores reduced-size copies (without any metadata) next to each original; they are deleted together with it. To enforce the storage limit we keep a record of each backed-up file's name, size and backup date. The app (or this website, for photos uploaded here) also stores each backed-up photo's capture date, recipe settings, the recipe you linked it to (if any) and whether it's a Canvas edition, and your Gallery albums (their names and which photos are in them) are synced too, so My Archive can show your Gallery the way the app does. The Canvas on this website builds your collage in your browser: photos you pick from your computer aren't uploaded, only an edition you save to Gallery is (downloading an edition uploads nothing). You can stop backing up a photo at any time, which deletes its cloud copies. Deleting a photo in My Archive deletes its cloud copies and removes it from the app's Gallery (files saved on your phone stay there); we keep only its file name for up to a year so your devices learn it was deleted. Backed-up photos are private to your account: you can view and download them in the app and in My Archive on this website, and they are never shown to, or shared with, any other user unless you share an album yourself (see below).

Shared album links. In My Archive you can create a link to one of your Gallery albums. Anyone you give the link to can open it without an account and see the album's name and reduced-size copies of its backed-up photos — never the originals, and the copies carry no metadata (no location, camera details or recipe settings). Photos you add to the album later appear there too. To create a link we store a random code tied to the album; it works until you choose Stop sharing, delete the album, or delete your account, after which the link stops working. Shared pages ask search engines not to index them, but anyone who has the link can pass it on, so only share albums you're happy for others to see.

Contact form. If you write to us through the contact form on this website, we receive your name, email address and message by email, so we can reply. If you're signed in, your account email is filled in for you but you can change it. A bot check (Cloudflare Turnstile) runs before the message is sent. The name and email you type are not verified, so if you are not signed in we can't tell who you are beyond what you write.

Contact form while signed in. If you send the form while signed in, we also receive your account ID and account email with the message, so we can find your account and help with problems, and the message is stored privately as account feedback (see below), the same as a message sent from the app.

Account feedback. Messages sent from Help & feedback in the app, or from the website's contact form while you're signed in, are stored privately in Supabase with your account ID, account email, message, submission date and app version (or the website identifier). We use these to answer questions and follow up on problems. This does not subscribe you to marketing emails.

Screenshots and photos you import. Screenshots are read by text-recognition software on your own device (Google ML Kit in the app; Tesseract running inside your browser on this website) and are not uploaded. Only if that reading has trouble, and you then explicitly choose to improve it with AI, do we send a reduced copy of the screenshot (and, in the app, the caption of a post you shared into it) to Google's Gemini API through our server to read the settings — see our AI content policy. We don't store those screenshots or captions; we only count how many AI readings your account used each day, to enforce a daily limit. "Smart recipe detection" reads the camera's recipe metadata from a photo on your device; the photo is not uploaded.

Links you import. When you import a recipe from a web link, our server (or the app, on your phone) downloads that page to read the recipe. The site you link to sees a request from our server or your device, not your account details. If the page's recipe can't be read that way and you explicitly choose to read it with AI, we send an excerpt of the page's text (at most 6,000 characters, no images) to Google's Gemini API through our server — see our AI content policy. We don't store that text; we only count how many AI readings your account used each day, to enforce a daily limit.

Usage statistics. If you're signed in and have agreed to usage analytics (a one-time prompt in the app, and the "Allow usage analytics" switch under Account > Legal), we record simple counters and feature-usage events (e.g. how many recipes you've saved, collages created) to understand feature usage. Tied to your account, never sold, never used for advertising. Once each time the app is opened while you're signed in with usage analytics on, it also records the app's language setting and your phone's own language and region setting (e.g. "es-MX"), so we can see which languages and countries Film Recipe Gallery is used in — never your GPS or IP-based location. On this website, usage events are sent only after you opt into analytics in Cookie preferences. These events use feature names and outcomes, not search text, recipe contents or messages.

Error diagnostics. When configured, Sentry receives crash reports and reports of unexpected errors to help us fix bugs. In the app this is off until you turn it on (a one-time prompt, and the "Send error reports" switch in Settings). Website diagnostics require a separate opt-in in Cookie preferences. App reports include technical device details: your phone make, brand, model and model/build identifiers, Android version and build, kernel version, CPU architecture, chipset, processor count and speed, screen size, density and resolution, total and free memory, total and free storage, whether the phone is low on memory, battery level, charging state and battery temperature, orientation, whether it is online and the connection type (e.g. Wi-Fi), language, region and time zone, whether the device is rooted or an emulator, when the device was last started, the app's package name, version and build, whether the app was in the foreground, a random identifier generated by the app on your phone (not linked to your account, and reset if you reinstall), and the technical details of the error (stack trace, and for "app not responding" reports what the app was doing). Reports also include a short trail of the app's recent actions before the error: screens opened, buttons tapped, app lifecycle, network and battery changes. They don't include your account, email, photos, recipes, contacts, precise location or advertising ID, and we turn off IP address storage in Sentry so no location is derived from it. Error messages can occasionally contain an account or file identifier from a failed request. Website reports replace error messages with an operation label and omit account details, request data, form contents, photos and breadcrumbs. We do not enable session replay, performance tracing or session tracking. Sentry still receives your IP address in order to deliver the report, but it is not stored with the report.

3. Our legal bases

• Contract — account creation, cloud sync, and this website exist to provide the feature you asked for.
• Legitimate interest — answering contact or account-feedback messages.
• Consent — optional app and website error diagnostics, app usage analytics, website analytics, marketing emails, non-essential cookies and sending a screenshot or web page text for AI reading; withdrawable at any time.

4. How we use your data

• Operate core features (recipe storage, camera writing, collage creation)
• Sync your own saved recipes/libraries/categories so you can view and edit them on this website
• Back up your Gallery photos (2 GB for every account, more with Plus) and show them back to you in the app and on this website
• Show an album's preview copies to the people you send its share link to, while you keep sharing it
• Reply to messages you send us through the contact form or account feedback
• Diagnose crashes and unexpected errors; website reporting is opt-in
• Read recipe settings from screenshots, photos and links you import — on your device, or with AI only when you ask for it
• Send the optional "new recipe drops" email only if you opted in — every send includes an unsubscribe option
• Show anonymized, aggregate usage counters to understand how features are used

We do not sell your data, show ads or run advertising SDKs. Film Recipe Gallery follows a freemium model with optional Plus subscriptions, not an advertising-funded model.

5. USB camera access

The mobile app communicates with your Fujifilm camera over USB-C using your phone's USB host APIs to read/write recipe settings on a preset slot you choose. This happens entirely on your device — camera settings are never sent to our servers unless you separately choose to save that recipe to your account. When you choose to add photos from your camera's memory card to your Gallery (over USB or the camera's Wi-Fi), the app copies them to your phone; they are only uploaded if you back them up (see Gallery backup above). This website itself has no camera access.

6. Cookies

Essential — keeps you signed in (Supabase's session cookie) and remembers your cookie choice. Always on; the site cannot function without these.

Optional analytics and diagnostics — both off by default. You can accept or deny both, or manage them separately in the consent banner. Analytics events go to Supabase only if you opt in; the Sentry browser SDK loads and reports only if you opt into diagnostics. You can change your choices below. There are no advertising scripts or pixels.

Local preferences — your browser also remembers which of your Libraries you expanded in local storage. This preference stays on your device.

7. Third-party services

• Supabase (EU region, Ireland) — authentication and storage for your account, saved recipes, Gallery backup records, account-feedback messages and usage stats. See Supabase's privacy policy.
• Cloudflare — Gallery backup: R2 stores the full-resolution originals you back up, with their metadata/EXIF (including GPS location), and their reduced-size copies, in Cloudflare's EU jurisdiction. A Cloudflare Worker checks your sign-in and makes the reduced-size copies with Cloudflare Images; like all Cloudflare traffic, these requests may be handled in the Cloudflare data center closest to you while in transit, but nothing is stored outside the EU. See Cloudflare's privacy policy.
• Google Gemini API — only when you choose to read a screenshot or a web page with AI: receives that screenshot (and, in the app, a shared post's caption) or an excerpt of the page's text to read the recipe settings, under the Gemini API terms for paid services, which don't allow Google to use it to improve its products.
• Google ML Kit (Android app only) — reads screenshots on your device. Per Google's ML Kit terms it may send Google anonymous performance and usage metrics; it does not upload your images.
• Sentry — error diagnostics for the app and, only with your consent, this website. Reports are configured without account identification, session replay or performance tracing. See Sentry's privacy policy. Reports are stored in Sentry's EU region and kept for 30 days.
• Resend — delivers the emails we send: messages sent through our contact form (your name, email address and message, plus your account ID and email if you're signed in) to our inbox, and account emails such as the sign-up confirmation, password-reset link and password-changed notice (your email address and a one-time link) to you. See Resend's privacy policy.
• Cloudflare Turnstile — the bot check on our sign-in, sign-up, password-reset and contact forms. It checks your browser for signs of automated abuse without tracking you across sites. See Turnstile's privacy addendum.
• Cloudflare hosts this website, handles its DNS and forwards emails sent to our support addresses to our inbox, and may log basic technical access data (e.g. IP address) per its own policies. When you view your Gallery backup here, the photos pass through our website's server on their way from Cloudflare to your browser; they are not stored there.

8. Data retention

If you never create an account, your recipes never leave your device. If you have an account, your data is kept while your account is active. An account whose email address isn't confirmed within 7 days of sign-up is deleted automatically. A Gallery backup original is kept until you stop backing that photo up, delete it in the app, or delete your account (or, for photos over the free 2 GB, until 6 months after your Plus plan ends — see below). Screenshots sent for AI reading are not kept by us after the reading is returned. A shared album link is kept until you stop sharing it, delete the album, or delete your account. Messages you send through the contact form are kept in our email inbox only as long as we need them to answer you and follow up, then deleted. Account-feedback messages (including contact-form messages sent while signed in) remain tied to your account until removed or the account is deleted. Error reports are kept by Sentry for 30 days (the retention of our Sentry plan) and then deleted automatically; if that period changes we will update this page. Withdrawing consent stops future reports but does not itself erase earlier reports, which still expire on that schedule.

When your Plus plan ends, your storage limit goes back to the free 2 GB. If your backup is bigger than that, you can no longer back up new photos, but everything already backed up is kept for 6 months so you can renew Plus or download the photos you want to keep. During that time we remind you every month in the app and in My Archive on this website. After 6 months, your oldest backed-up photos (by the date they were taken) and their reduced-size copies are permanently deleted until your backup fits in 2 GB; the rest of your backup, your account and your recipes are not affected.

When you delete your account (in the app's Account tab, or by emailing us), we delete everything tied to it: your login and profile, saved recipes, Libraries and categories, usage stats and events, account-feedback messages, AI-reading counters, your marketing email choice, and every Gallery backup original and its reduced-size copies. Deleting from the app removes this right away. Some of it can be kept briefly after that: if a deletion step fails (for example, a network error), the leftover photo files stay in storage until our automatic daily clean-up removes them, normally within 24 hours; and copies in our providers' encrypted routine backups and their technical logs (which can include IP addresses) are kept until they expire on their own schedule. Nobody can access this leftover data through Film Recipe Gallery, and in all cases it is gone within 30 days. The only thing we keep is an anonymous count of AI readings made that day, which is not linked to you, to enforce the service-wide daily limit. Data on your phone stays there until you delete it or uninstall the app.

9. International data transfers

Your account, synced data and Gallery backup are stored in the EU: Supabase's EU region (Ireland) and Cloudflare R2's EU jurisdiction. If you use the app/site from outside the EU/EEA, your data is transferred to and stored in the EU for this purpose. Supabase and Cloudflare are US-based companies; their data processing agreements with us include the EU Standard Contractual Clauses for any access from outside the EU. If you choose AI reading, that screenshot or page text is processed by Google, which may process it outside the EU (including in the United States). Messages sent through our contact form, and the account emails we send (such as sign-up confirmation and password reset), are delivered by Resend, a US-based company, and may be processed in the United States. Optional error diagnostics are stored by Sentry in its EU region (Germany); Sentry is a US-based company, so its staff may access them from outside the EU under its data processing terms and the EU Standard Contractual Clauses.

10. Your rights

If you are in the EU/UK (or another jurisdiction granting similar rights), you can:

• Access — request a copy of what we hold about you.
• Rectify — fix anything that's wrong (most of it you can edit yourself in the app).
• Erase — delete your account from the app's Account tab, or by emailing us.
• Port — request your recipes/libraries as machine-readable JSON, and download your Gallery backup originals from My Archive.
• Object — to any processing based on our legitimate interests.
• Restrict — ask us to pause processing while a request is being reviewed.
• Withdraw consent — at any time, for example in Manage cookie preferences; this doesn't affect earlier processing.
• Complain — to your local data protection authority.

California and other US states. You can ask to know, access, correct or delete your personal information, and to limit use of sensitive information. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of, and we do not discriminate against you for using these rights. The categories we collect are described in this policy (account identifiers, content you save, device/technical data and optional usage data). Send requests to the email below; we may need to verify the request from your account address.

Email mahayo2404@outlook.com from your account address; we reply within five working days.

11. Data storage & security

Data is encrypted in transit (TLS) and at rest via Supabase, and Gallery backup originals are encrypted at rest by Cloudflare R2. Passwords are hashed by Supabase Auth and never stored or visible in plain text to us.

12. Children

You must be at least 13 years old to create an account. If you are under 18, a parent or guardian must have reviewed and agreed to our Terms and Conditions on your behalf. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has given us personal data, contact us and we will delete it.

13. Changes to this policy

We may update this policy. If we make material changes, we will notify account holders and update the date at the top before the change takes effect.

14. Contact

Questions about this policy? mahayo2404@outlook.com. See also our DMCA policy and AI content policy.