Privacy Policy

Last updated: October 7, 2026 · Version 1.2

This Privacy Policy explains how Fuyu Labs LLC (“Fuyu Labs,” “we,” “us”) handles information in the Fuyu Film: Photobooth app (the “App”) and on this website. By using the App you agree to this policy. It should be read with our Terms of Service.

1. Information the App uses

We do not ask you to create an account, and the App does not ask for your name, email address, phone number, contacts or location.

2. What we do NOT collect

• We do not receive, upload, copy or store your photos, strips, event data or originals on our servers. We do not run a server for them.
• We do not collect or store faceprints, face geometry or any other biometric identifiers (see Section 4).
• We do not use your photos to train artificial intelligence or machine learning models, and we do not analyze them for commercial purposes.
• We do not sell or share personal information, and we do not use it for advertising, profiling or behavioral tracking.
• We do not use advertising networks, data brokers, social media SDKs or third-party analytics in the App.
• We do not track your location and do not access your contacts.
• Any future cloud or online feature (for example, QR code sharing) will be optional and clearly disclosed here before it ships.

3. Where your data is stored

Everything the App creates is stored on your device, inside the App’s private area (Apple’s App Sandbox). It is protected by your device’s security: passcode, Face ID or Touch ID, and Apple’s device encryption. Please note:

• Device backups. Depending on your iOS settings, the App’s data may be included in your iCloud or computer backups. Those backups are controlled by you and Apple, not by us.
• Keychain. Items in the iOS Keychain may remain after you delete the App, so that pass and daily-strip rules can’t be reset simply by reinstalling.
• Exports. When you export or save photos (to Photos, Files, AirDrop and so on), copies exist wherever you send them and are no longer under the App’s control.
• Other people on the device. Anyone who can unlock the device, or who knows the host PIN, may be able to see event photos on it.

4. Face and pet detection (biometric information)

To put backdrops behind people and props on faces and pets, the App uses Apple’s Vision framework on your device to find people, faces, facial landmarks (such as eyes, nose and mouth) and animals in a photo. We want to be clear about how this works:

• It runs entirely on your device, only while you are using the App.
• The App uses this information only to position an effect on that photo. The results are held in memory while you work on that strip. They are not saved to storage or sent anywhere.
• The App does not identify who a person is, does not compare faces, does not build or store face templates, and does not match anyone against a database.
• We do not receive, collect, store, share, sell or transmit any of it.
• We do not use information from the camera, face or person detection, or your photos for marketing, advertising or data mining, and we do not allow anyone else to.

Because we never possess it, we do not believe this feature involves collecting “biometric identifiers” or “biometric information” under laws such as the Illinois Biometric Information Privacy Act, the Texas Capture or Use of Biometric Identifier Act or the Washington biometric privacy law. If you are a host using the App at an event, see Section 7.

5. The one network request

The App is designed to work offline. The only thing it sends over the internet on its own is a small request to Apple’s website (apple.com) to read the current time. The App uses it for event-time protection, so that a pass cannot be extended by changing the device clock. This request contains no photos, no event data and no personal information, but, like any internet request, it reveals your IP address and your device’s technical details to Apple. We do not receive or log it. Apple’s privacy practices apply. If the App is offline, it keeps working and re-checks the time later.

6. Sharing, printing and exporting

Photos leave your device only when you or an event host send them:

• Share sheet and saving: AirDrop, Files, Photos, Messages and other apps you choose. Those services have their own privacy practices.
• Printing: the strip is sent to the printer you choose through Apple’s AirPrint over your local network, or through a bridge device. The printer, its manufacturer, its cloud services (if any) and the network operator may log or retain the image. We don’t control them. On shared or public networks, other people on that network may be able to see print traffic.

In an event, the host controls the saved strips and original photos and may export or delete them.

7. Event hosts and guests

Hosts are solely responsible for:

• telling guests that photos are being taken, saved, printed or shared, for example with a sign at the booth;
• obtaining any consent, and following any laws, that apply where the event takes place, including rules about photographing children and about biometric or facial-recognition privacy;
• getting any model or publicity release needed if guests’ photos will be used for marketing, a sponsor, a contest or anything beyond giving guests their own strips;
• how photos are stored, exported, shared, printed and deleted afterward, and for removing a guest’s photos on request;
• securing the device (for example, with a device passcode and Guided Access) and keeping the host PIN private.

Guests who have a question about their photos, or want them removed, should contact the event host. Fuyu Labs cannot access or delete photos stored on a host’s device.

8. Permissions the App asks for

• Camera: to take photobooth photos. You can turn this off in iOS Settings, but the App can’t capture without it.
• Photos (add only): to save a strip to your library when you choose. The App does not read your library; when you pick a picture for a custom backdrop, prop, frame or footer, iOS gives the App only the picture you chose.

9. Analytics, ads and third-party services

Currently integrated:

• Apple frameworks that run on your device, such as the camera, Vision (person, face and pet detection), image processing and AirPrint.
• The Apple App Store for downloads and purchases. If you’ve chosen to share crash reports or analytics with developers in iOS settings, we may see aggregated, non-identifying information from Apple.
• The time request to apple.com described in Section 5.

Not integrated: advertising networks, data brokers, social media SDKs, marketing or behavioral analytics, crash-reporting or tracking SDKs, or any third-party code library that collects data. The App is built on Apple’s own frameworks.

If we ever add analytics, cloud features or other services that handle personal information, we will update this policy first and make any new data collection opt-in where required by law.

These website pages. The Fuyu Film: Photobooth pages load fonts from Google Fonts, which may receive your IP address and browser details. They don’t use analytics or advertising cookies. Because we don’t track you across sites, there is nothing for a “Do Not Track” signal to turn off. Links to other sites are covered by those sites’ own policies.

10. In-app purchases

Purchases (such as event passes and extra strips) are processed by Apple through the App Store. We do not see or store your payment card, billing address or Apple ID. We may receive aggregated sales information from Apple. The App stores on your device a record of what you’ve bought so it can apply it (see Section 1). Refunds are handled by Apple.

11. Legal basis for processing (GDPR)

Because the App does not send your photos or personal data to Fuyu Labs, most of what happens on your device isn’t “processing” by us as a controller. It is your own device storing your own data under your control. To the extent we do process personal data (for example, when you email us for support), our legal bases are:

• Contract performance (GDPR Art. 6(1)(b)): responding to support and purchase-related requests, and providing the App you asked for.
• Legitimate interests (Art. 6(1)(f)): keeping the App secure and functioning, and preventing misuse of passes and the pricing rules (for example, through the time and daily-strip records described above).
• Consent (Art. 6(1)(a)): where we ask for it, such as for any optional feature we add in the future. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): where the law requires us to keep or disclose information.

For hosts: if you collect guests’ photos in the EU or UK, you are the controller of that data and need your own legal basis and notices for guests.

12. Security and breach notification

Because data stays on your device, its security depends largely on your device. Use a passcode, keep iOS updated, and use Guided Access at events. The App runs inside Apple’s App Sandbox. No system is perfectly secure, and we can’t guarantee absolute security. Because we do not hold your photos, we cannot recover them if your device is lost, damaged or reset.

If we confirm a security issue in the App that could affect your information, we aim to tell users (through an App update, this website or email) within 72 hours of confirming it. If an incident affected personal information that we hold, we will notify affected people and regulators as the law requires, for example within 72 hours under the GDPR and within the time required by California and other state laws. Because we hold almost no personal data, a breach of your photos on our side is structurally unlikely: we have nothing to breach.

13. Retention and deletion

• You can delete strips, events and custom items inside the App, or delete the App to remove its stored data from your device. Remember to also delete any exported copies and backups.
• Keychain records (PIN hash, pass state, daily-strip time) may remain after deletion for the reason given in Section 3.
• We hold no server-side copies of your photos, so there is nothing for us to delete on our end. Deleting the App is a complete deletion of what we could ever have.
• If you contact us, we keep your email and our reply as long as reasonably needed to help you and for basic record-keeping, and delete them sooner on request.

14. Children’s privacy

The App is intended for people 13 and older, and event passes are for adults 18 and older. Because the App does not collect, store or transmit personal information from any user to us, whether a child or an adult, we do not believe the Children’s Online Privacy Protection Act (COPPA) requires parental-consent steps for the App, and the App does not present an age gate. We do not knowingly collect personal information from children under 13. If a future version adds a feature that would collect personal information, we will add appropriate age checks and parental consent first and update this policy.

Photos of children taken in the App are kept on the device by whoever controls it. Parents and event hosts are responsible for photos of children they take, and for getting any parental consent required. Parents can limit the App’s camera access in iOS Settings or Screen Time. If you believe a child has sent us personal information (for example, in an email), contact us and we will delete it.

15. Your privacy rights

Because we don’t hold your photos or build a profile of you, most of these rights are already met by how the App works. For completeness:

• Access and portability: your photos, strips and settings are on your device and can be exported from within the App.
• Deletion: delete items in the App, or delete the App.
• Withdrawing consent: you can turn off the App’s camera or photo access at any time in iOS Settings.
• Correction: you can edit event details and settings in the App.
• Objection, restriction and opt-out of sale or sharing: not applicable in practice, because we don’t sell or share personal information and don’t collect it.
• Not being treated worse: we will not discriminate against you for exercising a privacy right.

To make a request about information we do hold (such as your support emails), email synclively@gmail.com with your request type and the email address you used. We may need to verify your identity. Most requests will simply be confirmed as already satisfied, because there is nothing held to act on.

16. Regional privacy rights

• EU/EEA/UK: rights under the GDPR include access, rectification, erasure, portability, restriction, objection, and protection from solely automated decisions (the App makes none). You may also complain to your local data protection authority.
• California: rights under the CCPA/CPRA include access, deletion, correction and portability, and to opt out of sale or sharing. We don’t sell or share personal information, and we don’t use or disclose sensitive personal information beyond what is needed to provide the App.
• Other U.S. states with privacy laws (such as Virginia, Colorado, Connecticut, Texas and others) give similar rights, and you can make a request in the same way.
• Canada and Australia: analogous rights under PIPEDA and the Privacy Act 1988, respectively.

17. California “Do Not Sell or Share” disclosure

Current status: Fuyu Film: Photobooth does not sell or share personal information as defined by the California Consumer Privacy Act (CCPA/CPRA), and has not done so in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16.

Future changes: if this ever changes, we will give California residents at least 30 days’ advance notice, and add a “Do Not Sell or Share My Personal Information” option in the App before doing so.

18. International data transfers

Fuyu Labs LLC is based in the United States. Because your photos do not leave your device through us, we do not transfer your personal data internationally. If you use iCloud backups, Apple may store them in data centers worldwide under its own safeguards. The request described in Section 5 is processed by Apple. If we ever introduce a feature that moves personal data across borders, we will put appropriate safeguards in place (such as Standard Contractual Clauses or an adequacy decision) and disclose it here first.

19. Safety and privacy reports

If you believe the App was used to take or share photos without someone’s consent, to harass someone, or in a way that violates privacy, tell us at synclively@gmail.com with what happened, when and where (if known). Reports are handled confidentially. Because photos stay on the host’s device we can’t remove them ourselves, but we can advise on next steps and cooperate with law enforcement when the law requires. For an emergency or immediate threat, contact local emergency services first.

20. Changes to this policy

We may update this policy as the App changes. We will change the date above. For material changes we will give at least 30 days’ notice, in the App, on this page or by email where we have it, before they take effect. Continued use after the effective date means you accept the update.

21. Contact

Fuyu Labs LLC
Data controller for information you send us directly (such as support emails). We are not the controller of photos kept on your device.
Privacy questions and requests: synclively@gmail.com

Response times (targets): general inquiries within 5–7 business days; privacy requests within 30 days (up to 90 for complex ones); urgent security reports, acknowledged as quickly as we can.