Your Privacy Matters

Film Notes is designed with privacy as a core principle. Your photography data stays on your device by default, under your complete control. We collect only minimal, anonymous analytics to improve the app, and we never sell your information.

When we introduce cloud features in the future, they will be optional and clearly explained, giving you full control over what data is stored in the cloud.

Privacy Policy

Last Updated: December 1, 2025

  1. Introduction

Film Notes ("we," "our," "us," or "the app") is a film photography companion app developed by Sergio Rojas that helps photographers track their analog photography workflow, manage film rolls, log shots, and organize their equipment.

This privacy policy explains how we collect, use, store, share, and protect your information when you use Film Notes. We are committed to transparency and giving you control over your data.

By using Film Notes, you agree to the collection and use of information in accordance with this policy.

  1. Information We Collect

2.1 Information you provide directly

The following information is stored locally on your device and is never automatically uploaded to our servers unless you explicitly choose to enable cloud features:

- Film Roll Data: Brand, ISO, format, roll size, development status, lab information, notes

- Shot Information: Frame numbers, exposure settings (aperture, shutter speed, ISO), notes, weather tags, push/pull settings, EV values, calibration offsets

- Equipment Inventory: Camera and lens information, brands, models, formats, focal lengths, mounts, battery types, descriptions, notes, tags

- User Profile: Optional name, username, and avatar image

- Reference Photos: Photos you take or select from your photo library to associate with shots

- Shooting Days: Planned shooting sessions with dates, locations, and notes

- Locations: Saved location names and coordinates for shot tracking

- Roll Presets: Custom presets for frequently used film configurations

Current Storage: All user-provided data is stored locally on your device only using iOS secure storage (UserDefaults and file system). This data never leaves your device unless you explicitly enable cloud sync features (see Future Features section).

2.2 Information Collected Automatically

2.2.1 Location Data

Location data is collected only when you explicitly use location-based features:


- Lab Finder: GPS coordinates to find nearby film development labs

- Shot Location Tracking: GPS coordinates attached to individual shots (optional per shot)


Storage: Location data is stored locally on your device only. We do not upload location data to our servers.


Control: You can control location permissions in iOS Settings → Film Notes → Location. You can choose "Never," "While Using the App," or "Ask Next Time."

2.2.2 Usage Analytics

We collect anonymous usage statistics to help us improve the app. This data is sent to Supabase (our analytics provider) and includes:

- Device Information: Device type and model (e.g., "iPhone 15 Pro"), iOS version, app version

- Usage Events: Feature usage patterns (e.g., "roll created," "shot logged," "view opened")

- Session Data: Session duration, app launch times, screen views

- Anonymous Device ID: A randomly generated UUID that cannot be linked to your personal identity

Important: All analytics use an anonymous device UUID, not your personal identity. We cannot identify you personally from this data. No personally identifiable information (PII) is collected through analytics.

Control: You can disable analytics in Settings → Privacy → Share Analytics. Disabling stops all anonymous data collection.


2.2.3 Crash Reports & Diagnostics

Technical diagnostic data may be collected to help us fix bugs and improve app stability:


- Crash logs and stack traces

- Error messages and exception details

- Device information relevant to the crash

This data does not include your personal information or content.


2.3 Information from Third-Party Services

- Lab Directory: Public lab information retrieved from Supabase database (name, address, contact info, services, hours). This is public information, not personal data.

- Apple Maps: Map data and location services provided by Apple when you use the lab finder feature.

  1. How we use your information

3.1 Local Storage (On device)

All your photography data is stored ONLY on your device:

- Roll data, shots, equipment, and photos never leave your device automatically

- No cloud backup unless you explicitly enable it (see Future Features)

- Complete control over your data

- Data is stored using iOS secure storage mechanisms

- Automatic local backups created daily (stored on device only)

3.2 Analytics (Supabase)

We use Supabase to collect and analyze anonymous usage data:

- To understand how users interact with the app

- To identify bugs and performance issues

- To prioritize feature development

- To improve user experience


We do NOT:

- Sell analytics data to third parties

- Use analytics for advertising targeting

- Link analytics data to your personal identity

- Track you across other apps or websites

3.3 Location Services

Location data is used ONLY for:


- Finding nearby film development labs when you use the lab finder

- Attaching location coordinates to shots (when you choose to do so)


Location data is NOT:


- Uploaded to our servers

- Shared with third parties

- Used for advertising or tracking

- Stored in the cloud

3.4 Future Features

The following features are planned for future versions and will be optional:

3.4.1 Cloud Sync

In future versions, we plan to offer optional cloud synchronisation that will allow you to:


- Sync your data across multiple devices (iPhone, iPad)

- Back up your data to the cloud

- Access your data from a web portal


Important: Cloud sync will be opt-in only. You will have full control over whether to enable it. If enabled, your data will be stored securely in Supabase with encryption.


3.4.2 User Authentication

User accounts are already implemented but are currently optional. In the future, authentication may be required for cloud sync features. If you create an account, we will collect:


- Email address (for account management and password reset)

- Password (encrypted and stored securely)

- Optional: Name, username, avatar (if you choose to provide them)


Authentication methods may include:


- Email/password

- Apple Sign-In

- Google Sign-In (if implemented)


3.4.3 Photo Backup

Future versions may offer optional photo backup to Supabase Storage. This will allow you to:


- Back up reference photos to the cloud

- Access photos from multiple devices

- Restore photos if you lose your device


Important: Photo backup will be opt-in only. Photos will be encrypted and stored securely.


3.4.4 Social Features

Future versions may include optional social features that allow you to:


- Share rolls and shots with other photographers

- Follow other users

- Comment on shared content


If you use social features, the content you choose to share will be visible to other users according to your privacy settings.


  1. Data Sharing & Third-Parties

4.1 We DO NOT share your personal data

We commit to NOT:

- Sell your personal information to anyone

- Share your data for advertising purposes

- Track you across other apps or websites

- Upload your photos to our servers (unless you enable optional cloud features)

- Share your location with third parties

- Use your data for marketing without your consent

4.2 Third-Party Services we use

We use the following third-party services to provide app functionality:


  • Service: Supabase (Supabase, Inc.)

    • Purpose: Analytics data storage, Lab directory database, Future: Cloud sync, authentication, photo storage

    • Data Shared: Anonymous analytics events, Public lab directory data, Future: User data (if cloud sync enabled)

    • Privacy Policy: https://supabase.com/privacy


  • Service: Apple Maps (Apple Inc.)

    • Purpose: Display lab locations on map, provide directions

    • Data Shared: Your search queries and location (when using lab finder)

    • Privacy Policy: https://www.apple.com/privacy/


  • Service: Google Sheets API (Google LLC)

    • Purpose: Retrieve public lab directory (being migrated to Supabase)

    • Data Shared: No personal data transmitted

    • Privacy Policy: https://policies.google.com/privacy

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

  1. Data Storage and Security

5.1 Local Storage Security

Your data stored locally on your device is protected by:


- iOS secure storage mechanisms (UserDefaults, file system)

- iOS built-in device encryption

- App sandboxing (data isolated from other apps)

- Automatic daily backups stored securely on device


5.2 Cloud Storage Security

If you enable optional cloud features in the future, your data will be protected by:


- Encryption in transit (HTTPS/TLS)

- Encryption at rest (data encrypted on Supabase servers)

- Secure authentication (password hashing, token-based auth)

- Row-level security policies in Supabase

5.3 What you should do

- Enable device passcode, Face ID, or Touch ID

- Keep iOS up to date

- Use secure device practices

- Regularly export your data as backup (Settings → Data & Backup → Export Data)


  1. Your Data Rights

6.1 Access your data

You can access all your data directly in the app. You can also export your data in multiple formats:


- JSON format: Complete backup of all data (rolls, shots, equipment, profile, etc.)

- CSV format: Rolls, shots, and equipment exported separately for spreadsheet use

- Access via: Settings → Data & Backup → Export Data


6.2 Delete your data

You have the right to delete your data at any time:

- Factory Reset: Removes ALL data from the app (Settings → Data & Backup → Delete All Data)

- Warning: This action cannot be undone. Make sure to export your data first if you want a backup.

- Future: If you have a user account, you can delete your account and all associated cloud data.

6.3 Control Analytics

- Toggle analytics in: Settings → Privacy → Share Analytics

- Disabling stops all anonymous data collection

- You can re-enable at any time


6.4 Control Location

- iOS Settings → Film Notes → Location

- Choose: Never, While Using the App, or Ask Next Time

- You can revoke location access at any time


6.5 Control Camera & Photo Library

- iOS Settings → Film Notes → Camera / Photos

- You can revoke these permissions at any time

- Note: Some features may not work without these permissions


6.6 GDPR Rights

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:


- Right to Access: Request a copy of your personal data

- Right to Rectification: Request correction of inaccurate data

- Right to Erasure: Request deletion of your data

- Right to Restrict Processing: Request limitation of data processing

- Right to Data Portability: Export your data (available in app)

- Right to Object: Object to processing of your data

To exercise these rights, contact us using the information in the Contact section.


6.7 CCPA Rights

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):


- Right to Know: Request information about data collection and sharing

- Right to Delete: Request deletion of your personal information

- Right to Opt-Out: Opt out of sale of personal information (we do not sell your data)

- Non-Discrimination: We will not discriminate against you for exercising your rights


To exercise these rights, contact us using the information in the Contact section.


  1. Data Retention

7.1 Local Data

Data stored locally on your device is retained until you:


- Delete it manually in the app

- Perform a factory reset

- Uninstall the app (data may remain in iOS backups)


7.2 Analytics Data

Anonymous analytics data is retained for up to 2 years to help us improve the app. After 2 years, data is automatically deleted.

7.3 Cloud Data

If you enable cloud features in the future:


- Your data will be retained as long as your account is active

- After account deletion, data will be permanently deleted within 30 days

- You can request immediate deletion at any time


  1. Children's Privacy

Film Notes is not directed at children under 13 years old (or under 16 in the EEA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information.

  1. International Data Transfers

Currently, all your personal data is stored locally on your device, so there are no international data transfers of your personal content.


Anonymous analytics data is processed by Supabase, which may transfer data to servers located outside your country. Supabase complies with applicable data protection laws and uses appropriate safeguards for international data transfers.


If you enable cloud features in the future, your data may be stored on Supabase servers, which are located in various regions. We will ensure appropriate safeguards are in place for international data transfers.

  1. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by:


- Updating the "Last Updated" date at the top of this policy

- Displaying an in-app notification when you open the app

- Requiring acceptance of the new policy (for significant changes)

- Posting a notice on our website (if applicable)


Continued use of the app after changes constitutes acceptance of the updated policy.


We encourage you to review this privacy policy periodically to stay informed about how we protect your information.

  1. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or your data, please contact us:


- Developer: Sergio Rojas Alvarez

- App Name: Film Notes©

- Bundle ID: app.filmnotes.co

- Website: https://filmnotes.co

- Email: privacy@filmnotes.co (or use App Store contact form)


Response Time: We aim to respond to privacy-related inquiries within 30 days.

  1. Legal Information

App Name: Film Notes©
Developer: Sergio Rojas Alvarez
Bundle Identifier: app.filmnotes.co
Platform: iOS 17.0+

Data Controller: Sergio Rojas Alvarez
DNI/NIE: 47174779P

Email de contacto oficial: sergio@filmnotes.co
Jurisdiction: Spain / European Union
Applicable Laws: GDPR (Regulation EU 2016/679), LOPDGDD 3/2018, and other relevant EU digital services regulations.

  1. Development Disclosure

AI-Assisted Development: Film Notes was partially developed with the assistance of Cursor AI, an AI-powered code editor. All code, features, and functionality have been reviewed, tested, and approved by the developer (Sergio Rojas). The use of AI assistance in development does not affect the privacy, security, or functionality of the app, and all data handling practices described in this privacy policy remain unchanged.

  1. Copyright

© 2025 Film Notes. All rights reserved.

Film Notes, including its design, interface, branding, features, and all associated content, is protected by applicable copyright and intellectual property laws.

Reproduction, distribution, modification, or reuse of any part of the app or its content without prior written permission from the rights holder is strictly prohibited.

Third-party trademarks, assets, or content integrated within the app remain the property of their respective owners.


A simple hub for your film photography. © 2025 Film Notes. All rights reserved.

Privacy Policy

About

Download