Privacy policy

The short version

IntegralCam has no accounts. Photos you develop go to our lab linked only to an anonymous device identity, and they're deleted within 24 hours. Maps, place names and caption ideas are computed on your iPhone and never sent anywhere. No ads, no third-party analytics, nothing sold.

What we hold, and how it's linked

• Photos you develop. The photo is uploaded to render the instant-film print. It is linked to an anonymous device identity — a cryptographic key your iPhone creates with Apple's App Attest. We never know your name, email, or phone number, because we never ask.
• Film balances and purchase history. Shots you buy or receive are recorded against that same anonymous identity so your film follows your phone. Payment itself is handled entirely by Apple — we never see your card or billing details.
• Develop records. The film, the time, and whether it worked — plain bookkeeping, so a failed develop can hand the shot back and the numbers add up.

What leaves your iPhone — and what never does

• The photo itself is the only content that leaves, and it leaves clean: EXIF, GPS and all other metadata are stripped on the phone before upload.
• Your location never leaves the phone. Map pins and place names are looked up on-device using Apple Maps.
• Captions — yours or suggested — never leave the phone. Caption ideas are generated on-device with Apple Intelligence.
• Diagnostics stay on the phone, through Apple's MetricKit; the app contains no third-party analytics or tracking SDKs.

Retention

• Uploaded originals and finished prints are deleted from lab storage within 24 hours of developing. Your prints live in the app on your iPhone.
• Develop and purchase records — never photo content — are kept up to 365 days, then deleted.

Deleting everything

In the app: Settings → Delete account. It erases your photos and identity at the lab and on the phone, immediately. We keep a minimal purchase record — no photos, nothing personal — for 365 days in case of a payment dispute, then delete that too. Subscriptions are canceled with Apple in the App Store; deleting the account doesn't stop billing by itself.

Your rights

Because there is no account, your data is reachable only from your iPhone: the shelf shows it, and Settings → Delete account erases it. If you want a copy of the bookkeeping we hold for your device, or anything else under data-protection law (access, rectification, erasure, restriction, portability, objection), write to [email protected]. You can also complain to your local data-protection supervisory authority.

This website

integralcam.com sets no cookies and runs no analytics. The one exception: pick a language from the list at the bottom of a page and the site keeps that choice in a single cookie — ic_lang, holding only the language code, for six months — so your next visit opens in that language. Nothing else is stored, and nothing is shared.

Where and who

Lab servers are operated by IntegralCam in the EU (Hetzner, Germany) with object storage on Cloudflare R2. Contact: [email protected].