Legal

Privacy Policy

Lupo — Film Camera · Last updated 29 August 2026

Lupo is a camera. Almost everything it does happens on your device, and this policy is short because there is very little to describe.

The short version

Your photographs never leave your device. Lupo has no servers, no accounts, no analytics and no advertising. The only information that goes anywhere is a record of what you have bought, which is handled by our payments provider so that film you paid for is still there after you change phones.

Photographs

Every frame you shoot is stored on your device. Negatives, prints and contact sheets are held inside Lupo's own storage and are not uploaded, backed up to us, transmitted, or shared with anyone.

If you choose to save a roll, Lupo writes those photographs into your own Photos library, on your device. That is a copy from one part of your phone to another; nothing is sent anywhere.

Undeveloped negatives are deleted once a roll has been developed and printed.

Purchases

Lupo sells rolls of film as in-app purchases. Payment is handled entirely by Apple — we never see your payment details, card, or Apple Account.

To keep track of which rolls you have bought, we use RevenueCat, a purchase management service acting as our data processor. RevenueCat receives:

• A random identifier generated by the app, which is not your name, email address, Apple Account, or device identifier
• A record of which in-app purchases you have made, and when

This is used for one purpose: making sure film you paid for is still available to you after reinstalling the app or moving to a new device. It is not used for advertising, is not sold, and is not shared with anyone else.

RevenueCat's own privacy policy: revenuecat.com/privacy

iCloud

Lupo stores two small pieces of information in your own iCloud account, using Apple's key-value storage:

• The random identifier described above
• A record of which rolls you have loaded, so the same film is not spent twice across two devices

This is your iCloud account and your storage. We have no access to it. If you are not signed into iCloud, Lupo works exactly the same way, and this information stays on the device instead.

Permissions

Lupo asks for these, each at the moment it is needed, and works without any of them:

• Camera — to take photographs. Required for the app to function as a camera.
• Photo library — only when you choose to save a roll, so the frames can be written into an album of their own.
• Notifications — only to tell you when a roll has finished developing.

What we do not collect

No name, email address or account. No location. No contacts. No analytics, crash reporting, or usage tracking. No advertising identifiers. No tracking across other apps or websites. Lupo does not use your data for advertising and does not sell it, because it does not have it.

Children

Lupo is not directed at children and does not knowingly collect information from anyone.

Changes

If this policy changes, the revised version will be posted here with a new date.

Contact

Questions about this policy, or about anything Lupo stores:
januszpolowczyk19@gmail.com