Privacy

The short version

• No accountNothing to sign up for, nothing to log into, no profile of you anywhere.
• No networkThe published app has no permission to reach the internet. That is not a promise: Android enforces it.
• No trackingNo analytics, no advertising, no cookies, no code that collects data.
• You decidePhotos leave the app only when you share them, save them to your gallery, or leave the automatic copy on.

The rest is detail. If you stop reading here, you already have the substance.

What the app keeps, and where

Photographs and rolls

Every shot is saved in the app's private storage, which no other app can read: the raw frame and, once the roll is developed, the print. The raw frame stays because the film is applied at development, and that is what lets you develop a roll again with another film.

Next to them, in a database on the phone (rullino), is the state of each roll: film, format, frames, development status, and its name if you gave it one. For each shot the app records the moment and the time-zone offset, so the date on the border stays the date where you were. No location: the offset is a number of minutes, not a place. The app does not read GPS and writes no metadata into the photos.

The app never deletes a roll on its own. Rolls stay until you delete them.

Preferences

A few simple values on the phone: language, which photo the film previews are drawn on, signature and date on prints, the era for the next roll, the automatic gallery copy, and a check that stops you shortening the wait by moving the clock. Nothing that identifies you.

Reminders

If you load a roll that develops after 24 hours, the app schedules a local notification on the phone for when it is ready. No server sends it, and the app rebuilds it from the list of rolls at every launch.

Temporary files

To share or save a print, the app writes a copy to temporary storage so the system has a file to pass on. That folder is emptied at every share and every launch.

None of this is sent anywhere, and no copy exists anywhere else. Android's automatic backup is turned off for this app: nothing, including rolls not yet developed, ends up in your Google backup.

Permissions, and what each one is for

On first launch the app asks for them one at a time. You can refuse them: below is what changes.

Camera — required

To take photographs, and nothing else. Without it the app cannot shoot.

Notifications — optional

To tell you when a 24-hour roll is ready. If you refuse, everything works the same: you come back and look yourself.

Gallery — optional, write only

To save prints to your phone's gallery. The app asks only to write: it cannot see your other photos, and does not ask to. If you refuse, the prints stay in the app and you can still share them.

Start after reboot

Restarting the phone clears pending notifications. This permission only puts them back. The app does not keep running and does not watch anything.

Internet — not present

In the published version the network permission is removed. Android blocks any request to the internet, from any part of the code. The app contains Firebase components that come with the notifications library: with no configuration and no network they never start and transmit nothing.

Your photos leave only when you decide

Only developed rolls can leave the app. A photo that has not been developed never reaches your gallery: it stays unseen, as it should.

Sharing

The app hands the prints (or negatives) to Android's share menu and stops there. You choose where they go, and from then on the privacy policy of the receiving app applies.

Automatic gallery copy — on by default

When a roll is developed, the app copies its prints to your phone's gallery, in the notyet.cam folder, or in a subfolder with the roll's name if you gave it one. It is there so you don't lose the photos if you later delete the roll or the app. You can turn it off in settings. The copies in your gallery are yours: the app never touches them again, even if you delete the roll.

“Save to gallery” and “Create the album in your gallery”

The same saves, done by hand from a roll's prints.

Your phone's gallery may be connected to a backup service such as Google Photos. If it is, that service may upload the prints saved there, following its own settings and privacy policy. The app has no way to do that or to prevent it.

Problem reports: you send them, or nobody does

The app cannot tell when it breaks. If something goes wrong, Settings → Help and more → Report a problem opens your email app with a message already addressed to notyet.cam@gmail.com. It goes only if you press send. Nothing is ever transmitted automatically.

The message contains an encoded block of text, so it arrives intact. It holds only:

• app version
• language and film preview type
• screen size and density
• operating system and its version
• whether the gallery is available
• the state of your rolls — only film, numbers and status, for example “developed (12)”
• the last recorded error — with file paths removed

No photographs, no roll names, no capture dates, no location. Above the block you write what happened, and you decide whether to send it.

Money: there is none

The app is free and has nothing to sell: no in-app purchases, no subscription, no ads. It does not ask for the billing permission and does not talk to Google's payment system.

After you develop a roll it may offer to let you buy me a coffee. That is a link which opens a page of this site in your browser: the payment happens there, with your own service, and the app does not see it. It does not know whether you donated, and donating unlocks nothing and changes nothing. You can turn it off for good from the sheet itself.

Google Play

The app is distributed through Google Play, and Google collects its own data about the installation: which device, which version, and crashes when they happen. That collection is Google's, under Google's rules and privacy policy, whether you open the app or not.

What reaches the developer from Play is aggregate only: how many installs, on which versions, and technical crash traces. Never your photographs, which Play never sees.

Deleting everything

Settings → Help and more → Full reset returns the app to how it was when you first opened it: every roll and its files, the preview photo, the preferences and pending notifications. It asks twice and cannot be undone. It does not touch prints already saved to your gallery, which are yours.

Uninstalling the app also removes everything it holds. Nothing is left anywhere else, so there is no request to send to anyone.

Children

The app is a camera. It has no accounts, messages or comments, and receives content from no one. It sells nothing and has no ads. Nothing in it collects data about anyone, at any age.

If this page changes

The date at the top is the change log. If anything changes in what the app keeps or asks for, we write it here and in the app's release notes on the same day.

Contact

Write to notyet.cam@gmail.com, or to @notyet.cam on Instagram.