Privacy Policy

Last updated: 10 July 2026

This policy explains how Pawel Laszczak PawelosFPV (“Grainy,” “we,” “us”) handles information in the Grainy iOS app (the “App”), on grainyapp.com (the “Site”), and when you join the waitlist or contact us.

The short version: Grainy has no user accounts, does not upload your photo library to us, and has no advertising or third-party analytics SDKs. Photos are developed and stored on your device. Optional Apple services and actions you choose — such as adding a place, buying a camera pack, saving to Photos, or sharing — are explained below.

Questions or privacy requests? Email us at support@pawelosfpv.com.

1. Who we are

The data controller is Pawel Laszczak PawelosFPV, a sole trader (jednoosobowa działalność gospodarcza) registered in Poland (NIP 6812118189), with a business address at al. Solidarności 68/121, 00-240 Warszawa, Poland.

2. Information in the App

The App processes and stores the following information locally so its features work:

Photo content: the original camera capture, developed photo, and a smaller thumbnail. Development is performed on-device.
Photo details: capture date and time, selected camera/film style, development seed, whether a photo is still developing or came from a try-shot, and the purchased camera pack used for a shot.
Information you add: captions and, if you enable Places and grant permission, coordinates and a city/country place label.
App state and preferences: onboarding status, daily shot usage, camera inventory and remaining shots, one-time try-shot status, reminder time and state, last app-open and recap state, and settings such as auto-save, flash, date stamp, and Places.
Local purchase record: the product purchased, purchase date, remaining shots, and Apple StoreKit transaction identifier used to avoid granting the same consumable purchase twice.

This information is kept in the App’s private storage or preferences on your device. We do not operate an App account or photo-storage server, and this information is not sent to Grainy. The App does not access your microphone, contacts, or existing Photos library.

3. Permissions & Apple services

Camera

Camera access is required to frame and take a photo. The live preview and capture are processed by the App while you use the camera; Grainy does not receive them.

Places and location

“Add Places” is enabled as an App preference by default, but the App cannot access your location unless you separately grant “While Using the App” permission. When both the preference and permission are on, the App requests a recent location at roughly 100-metre accuracy while the camera is in use, stores coordinates with new photos, and uses Apple’s geocoding service to turn them into a city and country label. Apple may process the coordinates to provide that result under Apple’s Privacy Policy. Grainy does not receive the coordinates or place label.

Turning off Places stops tagging future photos; it does not remove location already attached to a photo. You can remove that App copy by deleting the photo.

Photos

The App requests add-only Photos access. It cannot browse or read your existing library. “Save New Photos to Photos” is on by default, but no copy can be added unless you grant Apple’s permission. A saved copy may include the photo’s GPS coordinates. Copies in Photos are controlled by you and may sync through iCloud Photos if you have that Apple feature enabled.

Notifications

If you opt in, Grainy schedules at most one evening reminder using Apple’s local notification system. Its timing and content are calculated on your device from local App activity and memories. Grainy does not use a push-notification server or collect a push token.

Purchases

Optional camera-pack purchases use Apple StoreKit. Apple handles your Apple Account, payment method, billing, refunds, and purchase authorization. The App receives product information and a verified transaction record, then keeps the local inventory described above. We do not receive your card or payment-account details, and the App does not send receipts to a Grainy server. Apple’s handling is governed by Apple’s Privacy Policy.

Sharing, Instagram, and exports

Nothing is shared unless you choose a share or save action. The destination you select through Apple’s share sheet receives the selected image or images. A caption can be visibly rendered into a framed share image. The Instagram Story action places the selected rendered image on the general iOS pasteboard for up to five minutes and opens Instagram; Instagram then handles it under its own policy. Other apps’ access to that pasteboard is controlled by iOS. Grainy checks locally whether Instagram is installed but does not store or send that result. Images sent through the share sheet are rendered without location or other photo metadata, so sharing cannot pass on where a photo was taken; story and strip artwork likewise carries no location. Saving a photo to Photos is the one action that can attach its GPS coordinates.

Backups and Apple diagnostics

Apple may include App data in an iPhone or iCloud device backup, depending on your settings. Apple may also collect App Store activity and device diagnostics and may provide us aggregated sales/performance information or crash reports, depending on Apple’s terms and your device settings. Grainy contains no third-party crash-reporting SDK, and Apple’s reports do not give us access to your App photo library.

4. Information we receive

We do not receive your App photos, captions, location, App settings, camera inventory, or local notification history. We receive personal information only when you take a separate action that sends it to us, such as:

joining the Site waitlist;
emailing support or otherwise contacting us; or
visiting the Site, where hosting and form providers process technical request data.

If you contact support, we receive your email address, message, and anything you choose to attach. Please do not send a photo or location unless it is needed for your request.

5. The Site & waitlist

Information you provide

When you join the waitlist, we collect the email address you enter so we can send the launch notice described next to the form. We do not ask for your name, phone number, or App data. Formspree processes and delivers the submission to us.

Technical information

When you load the Site or submit the form, Cloudflare and Formspree may process technical data such as your IP address, browser and device type, request date and time, referring page, requested URL, routing/security data, and spam signals. This is used to deliver the Site, keep it secure, troubleshoot errors, and prevent abuse. Cloudflare may also produce aggregated traffic statistics.

6. Why we use information & legal bases

Where the GDPR, UK GDPR, or similar law applies, our purposes and legal bases are:

Provide the App and features you request, including local photo processing, saving, sharing, and purchase fulfillment: performance of our contract with you (GDPR Art. 6(1)(b)). Optional permissions remain under your control.
Send the waitlist launch notice: your consent (Art. 6(1)(a)). You may withdraw it at any time before the message is sent.
Deliver, secure, and troubleshoot the Site; prevent spam and fraud; and protect our services: our legitimate interests (Art. 6(1)(f)).
Answer support and privacy requests: performance of a contract, steps at your request, and our legitimate interest in supporting users (Art. 6(1)(b) and (f), as applicable).
Meet tax, accounting, consumer-protection, and other legal duties: compliance with law (Art. 6(1)(c)). Apple, rather than Grainy, keeps the payment account and billing records for App Store purchases.

We do not use waitlist emails for unrelated marketing, and we do not sell or rent personal information.

We disclose information only as needed for the purposes above:

Apple — distributes the App and provides StoreKit, camera and Photos permissions, local notifications, location/geocoding, iCloud features, and optional diagnostics. Apple controls information it processes for its own services. See Apple’s Privacy Policy.
Formspree — receives and delivers waitlist form submissions and processes related technical/spam-prevention data on our behalf. See Formspree’s Privacy Policy.
Cloudflare — hosts, routes, and protects the Site and processes request and security logs on our behalf. See Cloudflare’s Privacy Policy.
Our email provider — delivers waitlist and support email.
A service you choose for sharing — such as Instagram, Messages, or another destination in Apple’s share sheet. That service receives the content only after you select it and is responsible under its own privacy policy.

We may also disclose information if required by law, to respond to valid legal process, or to protect people, our rights, and our services. We do not sell personal information or “share” it for cross-context behavioural advertising.

8. Retention & deletion

App photos and details: remain on your device until you delete a photo or remove the App. Copies already saved to Photos or shared elsewhere must be deleted from those destinations separately. Device/iCloud backups may retain a copy according to your Apple settings and Apple’s retention rules.
App preferences, activity, and local purchase inventory: remain until changed, reset by the feature, or removed with the App, subject to device backups. Apple retains its own App Store transaction records under its policy and legal duties.
Waitlist email: kept while the waitlist is active, until you ask us to remove it, or until the launch mailing is complete. We then remove it from our active list. Formspree, our email provider, and backups may retain submissions or logs for a limited additional period under their retention policies or legal obligations.
Support messages: kept only as long as reasonably needed to resolve the request, maintain a support record, or meet legal obligations.
Site logs: retained by our providers according to their settings and policies for security, troubleshooting, and legal compliance.

9. Cookies, analytics & tracking

The App does not contain advertising, attribution, cross-app tracking, or third-party analytics SDKs and does not request Apple’s tracking permission. The Site code does not set analytics or advertising cookies and includes no analytics pixel. Its web font is self-hosted. Cloudflare or Formspree may use strictly necessary security and anti-spam technologies when providing their services. Links to social networks are ordinary links; those companies receive information only if you choose to open them.

10. International transfers

We are based in Poland. Cloudflare, Formspree, Apple, and email providers may process information in the United States, European Economic Area, and other countries where they operate. Where required, transfers are protected by an applicable legal mechanism, such as an adequacy decision, the EU–U.S. Data Privacy Framework, or Standard Contractual Clauses, together with provider safeguards.

11. Your choices & rights

You can manage Camera, Location, Photos, and Notifications in iOS Settings. In Grainy Settings, you can turn off Places, future auto-saves to Photos, and evening reminders. These changes do not remove previously created copies or location tags.

Because we cannot access data stored only inside the App, we cannot retrieve or delete your on-device library for you. You control it by editing captions, deleting photos, or deleting the App. To leave the waitlist or request access, correction, deletion, restriction, objection, or portability for information we do hold, email support@pawelosfpv.com. You may withdraw consent at any time; this does not affect earlier lawful processing.

If you are in the EEA or UK, you may also complain to your local data-protection authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

California residents: subject to applicable thresholds and exceptions, you may have rights to know, access, correct, and delete personal information and to opt out of its sale or sharing. We do not sell or share personal information for cross-context behavioural advertising and will not discriminate against you for exercising a right. Submit a request using the email above.

12. Security

On-device App data is protected by iOS and the App sandbox. Website and waitlist data is transmitted over HTTPS, and we use providers and access controls intended to protect it. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

13. Children

The App and Site are not directed to children under 13, or to children under the higher age (16 in Poland and much of the EU/UK) that applies where consent to an online service requires it, and we do not knowingly collect personal information from them. If you believe a child has joined the waitlist or contacted us, email us and we will take appropriate steps to delete the information.

14. Changes to this policy

We may update this policy from time to time. We’ll post the new version here and change the “Last updated” date above. Significant changes will be made clear.

15. Contact

Pawel Laszczak PawelosFPV
al. Solidarności 68/121, 00-240 Warszawa, Poland
NIP: 6812118189
Email: support@pawelosfpv.com