Privacy Policy

Effective 26 July 2026 · Updated 14 September 2026

The short version

Your photos

• When you shoot on your own, photos are captured and "developed" (the film look is rendered) entirely on your device. Nothing is uploaded.
• When you save a solo photo it stays on your device. When you share one, or message support, only that content is uploaded so it can be delivered — nothing else.
• Shared rolls are different: when you add a photo or short video to a Reveal Party roll it is uploaded to our servers so everyone in that roll can see it at the reveal. See Reveal Party below for exactly what that means.
• Camera access is used only to take your photo or video. Photo-library access is used only to save your developed photos to your camera roll.

Reveal Party — shared rolls

Reveal Party lets a group shoot a shared roll together at an event — everyone shoots blind, and the whole roll develops and reveals together afterwards. Because a shared roll has to be seen by other people in the roll, it works differently from solo shooting:

• What we store, and where. When you add a photo or short video (up to 30 seconds) to a shared roll, that file is uploaded to and stored on our servers — object storage on Cloudflare (Cloudflare R2), plus a small amount of roll metadata (an anonymous roll id, an anonymous member id, timestamps and a shot count). This is the one case where your photos and videos leave your device — it is what makes the shared reveal possible. Solo shots never do this: they are captured and developed on your device and are never uploaded.
• Automatic deletion. A shared roll and everything in it — every photo and video — is automatically deleted about 3 days after the roll reveals. A host can also end and delete their party at any time, which removes it immediately. (Host-timed rolls that are created but never revealed are deleted automatically after about 30 days.)
• No account needed. You never create an account or give a name or email to join or shoot a roll. A guest who joins from a web link in their browser is given a temporary, anonymous id just for that roll — no sign-up. Any display name is optional and is only a label shown next to your shots; it is not a real identity and is deleted with the roll.
• Remove your shots. You can remove your own content at any time: leave a roll to delete all the photos and videos you added, or delete an individual shot. The host of a roll can remove any shot and block anyone, which deletes that person's content. We operate a zero-tolerance policy for objectionable content — anything reported is reviewed and actioned, and reported content is removed within 24 hours.
• Not linked to you, never used to track you. The photos, videos and the anonymous ids in a shared roll are not linked to your identity and are never used to track you across other apps or websites. Location and EXIF metadata are stripped from what is uploaded.
• Terms. Joining or hosting a roll requires agreeing to the Reveal Party terms, which cover acceptable content and moderation — see the Reveal Party terms.

Data we collect

We collect no name, no email, no location, no contacts and no personal data. The app sends anonymous usage events (for example, that a screen was opened) so we can understand how the app is used and fix problems. These events are not linked to your identity and are not used to track you.

Purchases

DEVELOP·LATER offers a single one-time unlock. Payment is processed by Apple through the App Store. To validate purchases we use RevenueCat, which receives an anonymised random app identifier and your purchase receipt — never your name, email or photos. See also Apple's privacy policy.

Children

The app collects no personal data from anyone, including children. The only data collected is the anonymous usage described above, which is not linked to any identity.

Changes

If this policy ever changes, the new version will be posted at this address.

Contact

Questions about your privacy? Email developlater@dropstudio.uk.