Privacy Policy

Last updated: October 30, 2026

Fotina edits your photos on your iPhone. There are no accounts and we run no servers: your photos never leave your phone. Only two things do: crash reports, and usage data without your name or your photos, if you agree to share it. Both are handled for us by Google Firebase.

1. Who we are

Antonio Martelli, trading as Hammers ("we", "us", "our"), makes the Fotina app. For any privacy question, write to fotina@martellis.app.

2. Your photos

Everything happens on your iPhone. Filters, effects, frames, collages and the detection of the subject and the sky are computed on your device. Your photos are never uploaded, and we never see them.
Photo library. With your permission, Fotina reads your library to show your recent photos and open the one you pick. You can give access to all your photos or only to some, and change it at any time in the iPhone Settings.
Saving. With your permission, Fotina saves the edited photo as a new photo in your library: the original is never changed. The saved photo keeps the capture date and the camera details. Its location is kept only if you turn it on in the export screen.
Photos from other apps. A photo you open in Fotina from Files or the share sheet is copied into the app's space on your device, only to be edited.

3. Data that stays on your device

Your last edit, so you can resume it, the looks you save, your favorite and recent filters, your collages and your settings.
A few counters used to decide when to show Apple's rating request.

This data is stored only in the app's space on your device. It may be included in your device backup, if you turned backups on, under Apple's terms. Deleting the app deletes it, except the rating counters and the installation identifier described in section 5, which iOS keeps in your device's keychain. A look you choose to share is a small file that goes only where you send it.

4. Purchases

Fotina Pro is a one-time purchase handled by the App Store. Apple processes your payment and billing details; we never see them. Apple tells the app only what you bought, and the app keeps that on your device to unlock Fotina Pro.

5. Crash reports and usage data

Crash reports, always on. If the app crashes, Firebase Crashlytics sends us a report: what failed in the code, device model, iOS version, app version and a random installation identifier. We use them only to fix bugs, and they are always on.
Usage data, only with your consent. The first time, Fotina asks on its home screen whether you want to share usage data; you can change your answer at any time in Settings › Share anonymous usage data. Until you answer, nothing is sent. If you say yes, Firebase Analytics sends us events such as which screens and tools you open, which filters, effects, frames and presets you pick, how long an edit takes, whether you export, save or share the result, the size of the photo in megapixels and how much of it the subject covers (never the photo itself), how much memory the app had left and whether it had to reduce an export, slow-downs and unexpected exits, whether you take a screenshot or a screen recording while editing, whether you open the Fotina Pro screen, and the purchase reported by the App Store (product, price, currency, App Store country). They come with a random installation identifier, whether you have Fotina Pro, a range of your device's memory (such as "8 GB"), device model, iOS version, app version and your approximate location (city and country), which Google works out from your IP address without storing the address. The installation identifier is kept in your device's keychain, so it can survive deleting and reinstalling the app. We never receive your photos, what is in them, where they were taken, or your name. If you turn sharing off, nothing more is sent and the identifier Firebase uses is reset, so what you share later is not joined to what you shared before.
Firebase is provided by Google, which processes this data on our behalf, also in the United States under the EU–U.S. Data Privacy Framework. The data is not linked to your identity and is not used for advertising or to track you across apps and websites.
Usage data is kept for at most 14 months after it is sent, including a daily copy in Google BigQuery stored in the European Union; the random installation identifier is kept until 14 months after you last use the app or turn sharing off. After that, only totals with no identifiers remain in our reports. Crash reports are kept for 90 days.
Fotina has no ads. We do not sell or share your data.
Legal bases. Usage data: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time. Crash reports: our legitimate interest in keeping the app working (Art. 6(1)(f)); they contain no name and are not linked to you. Purchases: what is needed to give you what you bought (Art. 6(1)(b)).

6. Emails

If you write to us, from the app or directly, we receive your email address and what you write, and use them only to answer you. We delete the conversation when it is no longer needed.

7. Children

Fotina is a photo editor for everyone and does not ask your age. If you are under 14, ask a parent or guardian before you agree to share usage data, or choose "No thanks": the app works the same.

8. Your rights

Your photos and edits live on your device, so you control them: delete them in the app or in Photos, or delete the app. Usage data can be turned off at any time in Settings. If you are in the European Union, you keep your rights under the GDPR, including access, correction, deletion, restriction, portability, objection and the right to complain to your data protection authority (in Italy, the Garante per la protezione dei dati personali). Withdrawing your consent does not affect what was processed before. Usage data is not linked to your identity, so we usually cannot tell which records are yours: turning sharing off stops it, and what was already sent expires as described in section 5. To exercise your rights, write to fotina@martellis.app.

9. Changes

If Fotina changes how it handles data, we will update this page and the date at the top before that version is released.