Privacy Policy
Last updated 2026-09-11
Sunprint stores the photos, videos and voice notes taken at your event so the people who were there can see them together after the reveal. We collect only what that needs, keep it in a private bucket, show no ads, run no trackers, and delete everything when a host deletes their account.
Who we are
Sunprint is made by Fernix LLC. When this policy says “we”, it means Fernix LLC. For anything about your data, write to furkankar6@icloud.com.
What we collect
There are two roles in Sunprint, and they give us different things.
Hosts — the person who creates a film
- Sign in with Apple. Apple sends us a stable identifier for your account, an email address (your real one or Apple’s private relay address, your choice), and — only on your very first sign-in — your name. We use these to keep your films attached to you across devices. We never see your Apple password.
- Film details. The film’s title, event type, dates and reveal time, the guest capacity you chose, and an optional cover photo.
- Purchases. Capacity is bought through the App Store. Apple processes the payment; we receive only the product bought and a transaction identifier so we can grant the capacity. We never see card details.
Guests — anyone who joins with a code
- A display name you type when joining. It can be anything.
- A device token we generate so your phone can keep uploading to the same film without an account. It is not tied to your Apple ID or your phone’s advertising identifier.
Everyone
- The media itself: photos, videos and voice notes captured through the camera, plus when each was taken. Location metadata is not collected.
- Your IP address, briefly. Joining and uploading are rate-limited per address so one phone cannot flood a film. The counter lives for ten minutes and then expires automatically.
- Server logs of requests (timestamp, endpoint, status), kept by our hosting provider for operations and debugging.
What we do not do
- No advertising, and no advertising identifiers.
- No third-party analytics or tracking SDKs — in the app or on this site.
- No selling, renting or sharing of your data with data brokers. Ever.
- No reading of your photo library. The app only writes prints you choose to save.
- No face recognition, and no training of models on your media.
Where it lives
Media and film records are stored on Amazon Web Services in Frankfurt, Germany (AWS eu-central-1). The media bucket is private: there is no public address for any photo. When an album is revealed, the app is given short-lived signed links (at most one hour) to load each print; a leaked link stops working on its own.
Media is encrypted at rest (AES-256) and in transit (HTTPS). Our servers run on Vercel; our purchase records are verified with RevenueCat. Both act only on our instructions.
Who can see what
| Data | Visible to |
|---|---|
| Photos, videos, voice notes | The host and the guests of that one film, after the reveal time. Nobody else. |
| A guest’s display name | Everyone in that film, next to their shots. |
| A host’s email and Apple identifier | Only us. Never shown to guests. |
| Purchases | Only us and Apple. |
The host of a film can remove any guest’s photo from the album and can turn guest downloads off. Before the reveal, nobody — not even the host — can see the sealed photos.
How long we keep it
- Live album: 12 months from the event date, downloadable at any time.
- After that: the album is archived to cold storage, not deleted. Guests lose access; the host can ask us to bring it back. We do not silently delete anything.
- Account deletion: when a host deletes their account from Settings, we delete their account, every film they created, every photo, video and voice note in those films, and every guest record attached to them — from the database and from storage, in the same request. This cannot be undone.
- Rate-limit counters expire after ten minutes. Server logs are retained by our hosting provider for a limited period.
Your rights
Wherever you are, you can ask us what we hold about you, ask for a copy, correct it, or have it deleted. Hosts can delete everything themselves from Settings. Guests, who have no account, can ask the host to remove their photos or write to us and we will do it. We answer within 30 days.
If you are in the EU/EEA or the UK, the legal basis for processing is the contract with you (to run the event album you asked for) and, for rate limiting and logs, our legitimate interest in keeping the service working and safe. You may complain to your local data protection authority.
Children
Sunprint is not directed at children under 13, and hosts must be old enough to hold an Apple ID and make purchases. If you believe a child has given us data, contact us and we will delete it.
Changes
If this policy changes in a way that matters, we will update the date at the top and, for hosts, say so in the app. Continued use after a change means you accept it.