Your privacy, thoughtfully handled.

1. Who we are and what this covers

Day1Apps ("we", "us" or "our") provides FilmRoll, an app for creating stylized AI portraits and saving, organizing and exporting photo rolls. This policy covers FilmRoll and the FilmRoll-related pages on day1apps.com. Day1Apps is responsible for deciding how personal information is used for these services.

This policy does not describe unrelated Day1Apps products. Google, Meta, app stores and other third-party services also have their own privacy policies. Our Terms of use explain the rules for using FilmRoll.

2. Information we process

• Account information. Your email address, internal account ID, sign-in provider, session credentials and authentication records. If you choose Google or Facebook, we may receive your provider identifier, name, email address and profile picture, depending on what the provider makes available. We do not receive your Google or Facebook password, friends list, social posts or general photo library through sign-in.
• Photos and creative inputs. Photos you choose, prepared image copies, file type, dimensions, size, integrity checksums, selected styles and settings, optional written instructions, generation requests, generated images and retake requests. Images and text can contain personal information, including information about other people.
• Library and preferences. Drafts, saved rolls, Favorites, export history, presentation preferences, and generation progress and recovery records. Some of this information is stored only on your device.
• Purchases, where available. Product and transaction identifiers, purchase status, store and currency information, account-linked purchase history, and pack or credit balances. The store handles your payment details; FilmRoll does not receive your full card number or payment security code.
• Technical and support information. IP addresses and service request logs, app and operating-system information, timestamps, job identifiers, error/status codes and information you send when requesting support. FilmRoll also keeps a limited on-device diagnostic history to help troubleshoot failures.

We receive information from you, your device when it communicates with our services, and the sign-in, infrastructure, AI and purchase providers involved in the features you use. We do not request access to your contacts, microphone or precise device location.

3. Photos, faces and AI processing

FilmRoll works with the photo you deliberately select. It does not upload your entire photo library. A selected image is prepared for processing, which can include decoding, rotating, resizing or converting it. Keep a separate copy of your original file if you need its original format or metadata.

When you confirm permission to use a photo and start an available online generation or retake, the prepared photo, relevant instructions and generation settings are transmitted through our backend to the configured AI provider. The provider processes the image, including visible facial characteristics, to generate the requested likeness and style. Outputs are returned for display and saving. Our infrastructure also processes information needed to operate, secure and troubleshoot the request.

A photo of a face is personal information. FilmRoll is not a facial-identification or identity-verification service. We do not create a FilmRoll database of facial recognition templates to identify people across images. AI models nevertheless analyze image features to perform the requested transformation; this policy does not imply that no face-related processing occurs.

We do not use your uploaded portraits, instructions or generated photos to train our own AI models, and do not publish them or use them in advertising without a separate permission. AI providers can have their own service, safety-review and retention obligations. We do not promise zero provider retention or immediate erasure from every provider system. See Service providers and Storage and retention.

You can decline to submit a photo or use online AI features. Selecting a local photo does not itself authorize us to use it for unrelated purposes. An explicitly labeled offline demo uses sample outputs and does not send your selected portrait to an AI provider. Do not submit confidential documents or information you do not want processed, and obtain permission from anyone shown in a photo.

4. Why we use information

We use information to authenticate you; create requested portraits and retakes; save and display available content; support exports, recovery and account deletion; verify purchases and account ownership; respond to support requests; and maintain the security and reliability of FilmRoll. We also use necessary records to prevent fraud, enforce our terms and comply with legal obligations.

Where the GDPR, UK GDPR or similar laws apply, the legal bases may include performing our agreement with you, complying with legal duties, and our legitimate interests in providing a secure, reliable service and preventing abuse. We rely on consent where required, such as for particular permissions or processing of sensitive information. You can withdraw consent, without affecting processing that was lawful before withdrawal. A feature may not work without the information needed to provide it.

We do not use your photos to make decisions about credit, employment, insurance or other similarly significant matters, or to infer sensitive characteristics for advertising.

5. Service providers and disclosures

We disclose information needed to provide the features you use. Not every provider receives every request. The available app version and backend configuration determine which AI service processes a generation.

Supabase — authentication and backend infrastructure

Processes account and authentication information, application records, and cloud media where a feature stores it. Supabase privacy policy.

Google and Meta — optional social sign-in

Handle the sign-in you choose and share the permitted basic account information with FilmRoll. Their own services may use cookies and process sign-in activity. Google privacy policy; Meta privacy policy.

AI image providers — generation and retakes, when enabled

FilmRoll supports OpenAI, xAI, and models accessed through fal.ai, including FLUX, Seedream and Google image models. The selected, configured service receives the image and instructions needed for that request. These integrations are not a claim that all providers are active or receive your data. OpenAI privacy policy; xAI privacy policy; fal.ai privacy policy. Provider selection, processing locations and applicable data controls must be considered when using online generation.

Google Play and RevenueCat — purchases, when enabled

Process store transactions, app/account identifiers and purchase status to deliver and reconcile one-time packs. They do not need your portrait to verify a purchase. Google privacy policy; RevenueCat privacy policy.

Expo — app infrastructure

Provides app build, distribution and, for compatible versions where enabled, update services. Update requests may include technical device, app and network information. Expo privacy policy.

We may also disclose relevant information when legally required, to protect users and the service, to investigate fraud or security incidents, to professional advisers subject to confidentiality, or as part of a merger, acquisition or transfer of the business with appropriate safeguards. If you choose to export or share a photo to another app, that recipient's handling of the photo is outside FilmRoll's control.

We do not sell personal information or share it for cross-context behavioral advertising. These FilmRoll legal pages contain no advertising pixels, third-party analytics scripts or embedded social widgets.

6. Storage and retention

On your device. FilmRoll stores drafts, saved originals and generated photos, Favorites and related library records locally where supported. Local information can remain until you delete it or remove the app's data. Signing out does not necessarily erase account-scoped local files. Clearing temporary export files is different from deleting saved rolls. Browser storage, device backups and operating-system behavior can also affect retention.

On our services. We retain account records while needed to provide the account. Online processing can require temporary image data, job and recovery records, cloud-stored sources or outputs, and security logs. Device-delivery flows save results to the phone; older or recovery flows can also use cloud media. Server cleanup is queued and retried, so completing, canceling or deleting a request does not guarantee that all associated bytes disappear immediately.

Retention depends on the data's purpose, active work and recovery needs, deletion requests, security requirements and legal duties. We do not promise permanent cloud backup of device-saved photos. Export important images before changing devices, uninstalling, clearing data or deleting an account.

Providers and legal records. AI providers, hosting providers and stores may retain information under their applicable contracts, backup schedules, safety requirements or legal obligations. Limited purchase ownership, refund, anti-fraud and accounting records may need to remain after account deletion. Contact us for information about the retention applicable to your request; we do not claim that deleting FilmRoll content automatically erases independent store or AI-provider records.

7. How to delete your data

• Delete a saved roll using the available Library controls. Related app-managed files are scheduled for cleanup; a failed cleanup may need a retry.
• Delete your account in Settings → Account → Delete account and confirm. The service starts account deletion, cancels active work and schedules associated account data and media for removal. Completion may take time while active requests and cleanup are resolved.
• Request deletion without the app using our online support form. Select Support and identify your request as “FilmRoll data deletion”. State the email address and sign-in method associated with FilmRoll. We may verify ownership before acting; never send passwords or sign-in codes.
• For Facebook Login data, the same in-app and online support form deletion routes apply. You can also remove FilmRoll from Facebook's Apps and Websites settings. Removing that connection alone does not delete your FilmRoll account or previously stored information. Likewise, revoking Google access is not an account-deletion request.

Photos already saved to your Gallery, exported files, copies on other devices, device backups and content shared to third parties are not removed by FilmRoll account deletion. Delete those copies using the relevant device or service. Any legally required or justified exceptions to an erasure request will be explained as required by applicable law.

8. Permissions, local storage and cookies

FilmRoll uses the system photo picker or necessary photo-library permissions to let you choose an image, and may request permission needed to save an export. You can manage permissions in your device settings. Denying a permission can limit the related feature. The Android app does not request camera or microphone access.

The app uses local storage and secure storage for sessions, account-scoped drafts and library data, preferences, and presentation history. A web preview may use browser session storage or local storage. Authentication providers may use their own necessary cookies when you open their sign-in pages.

These static legal pages do not set application cookies or load tracking scripts. The website hosting provider may still process ordinary access and security logs, including IP address, requested page and browser information. We will update this notice and provide any required choices before introducing materially different tracking practices.

9. Your privacy rights

Depending on where you live and the law that applies, you may have rights to access or obtain a copy of your information, correct it, delete it, receive it in a portable format, restrict or object to certain processing, withdraw consent, and appeal a decision about your request. You may also complain to your local privacy regulator. These rights can be subject to legal exceptions.

Submit your request through our online support form. We may request information reasonably necessary to verify you or an authorized representative, and respond within the period required by applicable law. We do not discriminate against you for exercising applicable privacy rights. Because we do not sell personal information or share it for cross-context behavioral advertising, we do not operate a sale or targeted-advertising opt-out program.

10. Security and international processing

We use safeguards designed to protect information, including encrypted network connections, authenticated access and account-based access controls. No system is completely secure. Keep your device and sign-in account secure, and do not share login codes.

Our service providers may process information in countries other than your own, including the United States, where privacy laws may differ. Where legally required, transfers must rely on an appropriate legal mechanism, such as applicable standard contractual clauses or another recognized safeguard. Contact us for details relevant to your data. We do not promise that processing stays in your country.

11. Age requirements

FilmRoll is intended for adults aged 18 or older and is not directed to children. Do not use FilmRoll if you are under 18. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and take appropriate action. Never submit images that exploit or sexualize a child.

12. Updates to this policy

We may update this policy as FilmRoll or legal requirements change. The date above identifies the latest revision. For material changes, we will provide additional notice and seek consent where required. An update to this policy is not, by itself, consent to a new use of your personal information.

13. Contact us