Privacy Policy
Last updated: May 15, 2026

This Privacy Policy describes how Retrofilm Moments ("Retrofilm," "we," "us," or "the app") collects, uses, and shares information when you use our mobile application and related services (together, the "Service"). By using Retrofilm, you agree to the practices described in this policy.

1. Who we are

Retrofilm is operated by Andreea Flavia Luca, based in the United States. For any questions about this policy or your data, contact us at retrofilm.app@gmail.com.

2. How Retrofilm works

Retrofilm is a shared event-photography app. A host creates an event ("a roll of film"), invites guests via a code or link, and each guest gets a limited number of photos to capture during the event. All photos stay hidden — "developing" — until the host's chosen reveal time. At reveal, every photo in the event becomes visible at once to all participants, who can then view and save the photos they want.

The app uses an anonymous account system: when you first open Retrofilm, an anonymous account is created for you automatically, without requiring an email, phone number, or password. Your events and photos are associated with this anonymous account.

3. Information we collect

3.1 Account identifiers

3.2 User content

3.3 Purchase information

If you make an in-app purchase, your purchase is processed by Apple through the App Store. We use RevenueCat, Inc. to validate and manage your purchase receipts and entitlements. RevenueCat receives a pseudonymous identifier, purchase receipt details, and product IDs in order to verify and persist your purchases across devices. We do not receive your full payment information (such as credit card numbers) — that is handled directly by Apple.

3.4 Information we do NOT collect

Retrofilm does not collect: your email address, phone number, contacts, precise location, photo library outside of what you choose to share, advertising identifiers, browsing history, or third-party tracking data. We do not use analytics services that track individual users, and we do not sell or share personal information for advertising purposes.

4. How we use information

We use the information described above solely to operate the Service:

5. Photos and the reveal

Photos captured inside an event are uploaded to our backend and stored privately until the event's reveal time. Before reveal, photos are not visible to anyone, including the person who took them — only blurred placeholders showing the photographer's name appear in the app. At the reveal time, photos become visible to all participants of that event. After reveal, participants can save photos from the event to their own device's photo library.

Photos shared inside an event are visible only to the participants of that event. They are not made public or shared outside the event.

6. Where your data is stored

Retrofilm uses Supabase (operated by Supabase, Inc.) as its backend service provider for database, authentication, and photo storage. Data is processed and stored on Supabase's infrastructure, primarily located in the United States. Supabase processes data only to provide services to us under contractual safeguards.

Purchase validation and entitlement management is provided by RevenueCat, Inc. Push notifications are delivered through Apple Push Notification service (APNs), operated by Apple Inc. Only the minimum payload needed to deliver the notification (event name and identifier) is sent through APNs.

7. How we share information

We do not sell your personal information, and we do not share it for advertising purposes. We share data only:

8. Data retention

We retain your account, events, and photos for as long as your anonymous account is active, so that past events remain accessible to participants. If you stop using the app, your data remains in our systems unless you request deletion. You may request deletion of your data at any time by contacting retrofilm.app@gmail.com; we will delete the requested data within 30 days, except where retention is required by law or to resolve disputes.

Purchase records may be retained for up to seven (7) years to comply with tax, accounting, and legal obligations.

Because Retrofilm uses anonymous accounts tied to your device, please note that uninstalling the app, switching devices, or losing access to your device may result in losing access to your events and photos, as there is currently no email-based account recovery. We may add an optional sign-in method in a future version to enable recovery.

9. Security

We protect your information using industry-standard practices: data is transmitted over encrypted HTTPS connections, stored with encryption at rest by our cloud providers, and access is restricted through role-based controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children's privacy

Retrofilm is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact retrofilm.app@gmail.com and we will take steps to delete it.

11. Your rights

Depending on where you live, you may have certain rights regarding your personal information:

11.1 For California residents (CCPA/CPRA)

California residents have the right to know what personal information we collect, to request access to or deletion of that information, to correct inaccuracies, and to opt out of the sale or sharing of personal information. We do not sell or share personal information. You will not be discriminated against for exercising these rights. To exercise them, contact retrofilm.app@gmail.com.

11.2 For users in the EEA, UK, and Switzerland (GDPR)

You have the right to access, correct, delete, restrict, or object to processing of your personal data, and the right to data portability. Our legal bases for processing are performance of a contract (operating the Service), legitimate interests (keeping the Service secure and functional), consent (for push notifications and photo library access), and legal obligation. You may also lodge a complaint with your local data protection authority.

11.3 Submitting a request

To make any privacy request, email retrofilm.app@gmail.com. We aim to respond within 30 days. We may need to verify your identity before fulfilling a request.

12. Device permissions

Retrofilm asks for the following device permissions:

You can change or revoke these permissions at any time in your device's Settings.

13. International data transfers

Retrofilm is operated from the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States and other countries where our service providers operate. By using the Service, you consent to this transfer. Where required by law, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

14. Third-party links and services

Retrofilm may contain links to third-party websites or services (such as the App Store). This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review their privacy policies.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Service or legal requirements. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated through the app or by other appropriate means. Continued use of the Service after changes take effect means you accept the updated policy.

16. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

Andreea Flavia Luca
Email: retrofilm.app@gmail.com
For urgent privacy requests, include "URGENT — Privacy Request" in the subject line.

Retrofilm · Andreea Flavia Luca