Privacy Policy

1. Who we are

The App is developed and published by Firefly Team (“we”, “us”, “our”), the developer named on the App’s page in the Apple App Store and Google Play. For the purposes of data protection laws such as the EU and UK General Data Protection Regulation (GDPR), we are the controller of the personal data described in this policy, except where a third party acts as an independent controller (see Section 9).

You can reach us at any time at elflyhight@gmail.com.

2. Information we collect

2.1 Photos, videos and other content you create (stays on your device)

The App reads photos and videos from your device’s photo library or gallery when you choose them, and saves the results back to it when you tap Save. All processing runs locally on your device, using on-device technologies such as Apple’s Core Image, Vision, Metal, AVFoundation and Core ML iOS, and Google ML Kit and on-device graphics libraries Android. We do not upload your media to any server and we cannot see it.

• My Folder keeps a list of the items you saved with the App so it can show them to you. This list is stored on your device only.
• Temporary copies. Some features keep a working copy on your device while they finish in the background. For example, a portrait photo can be re-edited for 24 hours after you take it, so the original and its subject mask are kept on your device for that time and then deleted automatically.
• Music. Music files you import from your device are copied into the App’s private storage on your device. If you add music by pasting a web link, the App downloads the file directly from that address, so the website you entered receives a standard request from your device (such as your IP address). We do not receive the link or the file.
• Filter search. When you search for filters, the App may translate your search words into English on your device, using Apple’s Translation framework iOS or Google ML Kit Android. Your search words are not sent to us. On Android, ML Kit downloads its translation model from Google (over Wi-Fi only) the first time it is needed.
• Sharing. When you share a creation with your device’s share options, it goes to the app or person you choose, under their own terms and privacy policies.

2.2 Information you send us

If you contact us from the App (for example the Request tab or the support option in Settings), the message opens in your own email app. We receive your email address, your message, any files you choose to attach, and the details the App pre-fills in the email: App version, device model and operating system version. We use this only to answer you and to improve the App. The App does not read your mailbox and does not send anything on your behalf.

2.3 Information collected automatically

When you use the App, we and the service providers listed in Section 9 automatically collect:

• Device and app information: device model, operating system and version, App version, the language you selected in the App, country or region, screen size, network type and similar technical data.
• Identifiers: your device’s advertising identifier (the IDFA on iOS, only if you allow tracking; the Advertising ID on Android, unless you have deleted it), app- or developer-scoped identifiers (the identifier for vendor on iOS, the App Set ID on Android), the app instance and installation IDs generated by Google Firebase, and IDs generated by advertising SDKs. These identifiers relate to your device; they do not tell us your name.
• Usage data: which screens and features you use and for how long, and events such as “photo saved”, “filter applied” or “export failed”, with short, non-personal error codes. Usage data never contains your photos, videos, file names or anything you write in them.
• Performance data: for example how long the App takes to start, so we can make it faster.
• Advertising data: which ads were requested, shown and tapped, and related measurement data. See Section 6.
• Diagnostics: crash information collected by our advertising SDKs and, on Android, crash reports collected by Firebase Crashlytics (the state of the App when it crashed, device and OS details, and a Crashlytics installation ID); technical diagnostic information collected by Firebase; and, on Android, performance and usage metrics about the on-device ML Kit features (such as device information, API settings, processing time and error codes) that Google ML Kit sends to Google to maintain and improve those features. ML Kit never sends your photos, videos or the results of processing them.
• Approximate location: a coarse location (such as country or region) derived from your IP address. It is used to show the right consent message, to serve and measure ads, and for aggregated statistics. The App does not request or use your precise (GPS) location.
• Content delivery data: filters, frames and sticker packs are downloaded on demand from our content delivery network (cdn.khanhchi.com). These requests carry only the technical information any web request carries (IP address, device type, the file requested). They never carry your photos.
• Purchase information: see Section 7.

2.4 What we do not collect

The App does not access your contacts, calendars, health data, call logs, SMS or precise location. It does not upload your photos, videos or audio recordings, and it does not use face recognition to identify anyone.

3. Camera, microphone and on-device face processing

• Camera. Used only while you use the camera, to show a live preview with filters, frames, beauty and portrait effects, and to take the photos and videos you choose to make.
• Microphone. Used to record sound with the videos you record. If you decline, you can still record silent video.
• Photos and videos. Used to let you pick items to edit, to show your saved items, and to save your creations. On both iOS and Android you can choose to give the App access to selected items only.
• Face, body and subject processing. Beauty, portrait blur, automatic subject lighting, backlight and leg-stretch features find the position of faces, bodies and people in a photo or camera frame, using Apple’s Vision framework iOS or Google ML Kit Android, both running on your device. This produces temporary landmark points and masks that exist only in your device’s memory while the effect runs (or, for a portrait photo, in the 24-hour re-edit copy described in Section 2.1). We do not store these on any server, we do not share them, and we do not use them to identify you, for advertising, for marketing or for data mining.

These permissions are optional and are requested only when a feature needs them. You can change them at any time in iOS Settings › Postcam iOS or Settings › Apps › Postcam › Permissions Android. Declining a permission never disables a feature that does not need it.

4. Notifications

If you allow notifications (on Android 13 and later the App asks for this permission; on earlier Android versions notifications are on by default), the App schedules reminders on your device (for example, a memory from your photo library, news about new filters or frames, or a tip about a feature). We do not run a notification server and do not collect a push token. A reminder may show a small preview of a photo from your library; that preview stays on your device. You can turn notifications off at any time in your device settings.

5. How we use information

We use information for the purposes below. If you are in the European Economic Area (EEA), the United Kingdom or Switzerland, the table also shows our legal basis under the GDPR.

We do not sell your personal information for money. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

6. Advertising and tracking

The App shows native, interstitial, app-open and rewarded ads from Google AdMob. AdMob can fill ads through other ad networks (“mediation”); the App currently uses Liftoff Monetize and Unity Ads on both platforms, and also InMobi and Mintegral on Android. These partners may collect the data described in Section 2.3 to serve ads, limit how often you see the same ad, measure performance and detect fraud. If you allow it, they may also use this data to show ads personalised to your interests. Unity Ads may also receive the details you submit if you report an ad through its own reporting option.

• iOSApp Tracking Transparency. The App shows a short explanation and then the iOS permission prompt before your data can be used to track you across apps and websites owned by other companies. If you choose “Ask App Not to Track”, the IDFA is not shared; you will still see ads, but they will be less relevant, and every feature of the App works the same. You can change this at any time in Settings › Privacy & Security › Tracking.
• AndroidAdvertising ID. You can reset or delete your Advertising ID at any time in your device settings (usually Settings › Privacy › Ads, or Settings › Google › Ads). If you delete it, ad partners cannot use it; you will still see ads, but they will be less relevant.
• Consent in the EEA, UK, Switzerland and some U.S. states. Where required, the App shows a consent message from Google’s User Messaging Platform (which uses the IAB Transparency & Consent Framework in the EEA and UK) before ads are requested. Where this applies, a Privacy Options item appears in the App’s Settings screen so you can review or withdraw your choice at any time.
• iOSAd measurement. Apple’s SKAdNetwork lets advertisers measure ad campaigns without identifying you.
• Ad-free option. Postcam Premium removes ads (see Section 7).

Ads are provided by third parties. We do not control their content or the websites and apps they link to; those have their own privacy policies.

7. In-app purchases

Postcam Premium is optional and is offered as an auto-renewing subscription (monthly or yearly) or as a one-time purchase. Purchases are processed by Apple through the App Store iOS or by Google through Google Play Billing Android, under their own terms and privacy policies. We never receive or store your payment card, bank or billing details. The store tells the App which product you bought, whether it is active, and the transaction identifiers needed to confirm it; the App uses this only to unlock and restore Premium on your device. Our usage statistics record that a purchase happened and which plan was chosen, and our advertising partners may receive purchase-related information as described in their own policies. Billing, refunds and subscription management are handled by Apple or Google.

8. How we share information

We share information only as described in this policy:

• Service providers that provide analytics, crash reporting, remote configuration, content delivery and consent management. They process data on our behalf.
• Advertising partners that serve and measure ads in the App. Some of them act as independent controllers of the data they collect, under their own privacy policies.
• Apple and Google, for app distribution, payments, on-device platform features and ad measurement.
• People and apps you choose when you share a creation or send us an email.
• Legal and safety reasons: when we believe in good faith that it is required by law or legal process, or needed to protect the rights, property or safety of our users, the public or us.
• Business transfers: if we are involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction and will remain subject to this policy or one at least as protective.

We work only with third parties that commit to protecting personal data with the same or equal protection as described in this Privacy Policy and as required by applicable law, the Apple App Store Review Guidelines and Google Play policies, and we require them to use the data only for the purposes for which it was shared.

9. Third-party services we use

This list reflects the current versions of the App and may change as we add or remove partners. Unless marked, a provider is used on both iOS and Android.

10. Data retention and deletion

When data is no longer needed, we delete it or make it anonymous. The App has no user accounts, so there is no account to delete; uninstalling the App removes everything it stored on your device.

11. Your choices and controls

• Permissions: turn camera, microphone, photo and notification access on or off in your device settings (see Section 3).
• Tracking: Settings › Privacy & Security › Tracking iOS; reset or delete your Advertising ID Android.
• Ad consent: Settings › Privacy Options in the App, where shown (see Section 6).
• Ads: Postcam Premium removes ads.
• Local data: delete items from your photo library or gallery; uninstalling the App removes everything the App stored on your device.
• Withdraw consent at any time. This does not affect processing that already took place.

12. Your privacy rights

Depending on where you live, including under the GDPR, the UK GDPR, Vietnam’s personal data protection laws and U.S. state privacy laws, you may have the right to:

• access the personal data we hold about you and receive a copy;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to certain processing, including processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time; and
• complain to your local data protection authority.

How to make a request. Email elflyhight@gmail.com with the subject “Privacy Request”, and tell us whether you use the iOS or Android version. The App has no user accounts, so most of the data described here is held under device identifiers that we cannot link to a name or email address. Please tell us what you need and, if you contacted us before, the email address and approximate date. We may ask you to verify your request. We will respond within one month, or within the time required by the law that applies to you. Where data is held by one of our partners under identifiers we cannot link to you, we will explain how to contact that partner directly, and you can also use the controls in Section 11.

13. U.S. state privacy notice

This section applies to residents of California and other U.S. states with comprehensive privacy laws.

• Categories we collect: identifiers (such as advertising and device IDs); internet or other electronic network activity (App usage and ad interactions); approximate geolocation; commercial information (purchase records); and inferences that advertising partners may draw about your interests. We collect these from your device and from our partners, for the purposes described in Section 5. Your photos, videos and audio stay on your device and are not collected by us.
• “Sale” and “sharing”: we do not sell personal information for money. However, allowing ad partners to collect identifiers and usage data for personalised, cross-context behavioural advertising may count as a “sale” or “sharing” under some state laws. To opt out, use the Privacy Options item in the App’s Settings where it is shown, choose “Ask App Not to Track” on iOS, delete your Advertising ID on Android, or email us with the subject “Do Not Sell or Share”.
• Sensitive information: we do not use or disclose sensitive personal information to infer characteristics about you.
• Your rights: you may request to know, access, correct and delete your personal information, and to opt out as described above. You may use an authorised agent. We will not discriminate against you for exercising your rights.
• Retention: see Section 10.

14. Children

The App is not directed to children under 13, or under the minimum age required in your country to consent to data processing (for example, 16 in some EEA countries). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

15. Security

Data the App stores stays in its private storage on your device, protected by the operating system’s app sandbox. Network requests use encrypted connections (HTTPS). No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we rely on the protections the platform and our providers offer.

16. International transfers

We and our service providers may process information in countries other than the one where you live, including the United States. Where the law requires it, these transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or equivalent mechanisms.

17. Changes to this policy

We may update this policy from time to time, for example when we add features or partners. We will change the “Last updated” date above and, when changes are significant, give notice in the App or in the store release notes. If you keep using the App after an update, the updated policy applies.

18. Contact us

Questions, requests or complaints about this policy or your data:

If you are in the EEA or UK and believe we have not handled your data properly, you also have the right to lodge a complaint with your local data protection authority.