Datenschutz

Fujigraphy is run by Ankit Aglawe, who is responsible for your data. Contact: support@fujigraphy.com.

There are no ads, no analytics, no third-party trackers and no push notifications.

What stays on your device

Your photos and your camera files stay on your device. Recipes you save while signed out stay on your device; if iCloud sync is on, they sync through your own iCloud account, which we cannot read.

Browsing

You can browse recipes without an account. The app downloads the public catalogue file; that request carries no account information.

Likes and saves without signing in

So you can like, save and follow without signing in, the app creates an anonymous app ID: a random number made on your device when you first use these features. It is not linked to your name, email, Apple or Google account, or advertising identifier. We store only a keyed one-way hash of it, never the ID itself, and use it to keep one anonymous account per install.

With that anonymous account we store your likes, saves, installs, shares, follows and blocks (likes, saves and follows count in public totals, which never show who did what), a device push token if the app registers one (see below), and when the app last used the account. An anonymous account has no profile and is never shown publicly.

If you later sign in, your likes, saves, installs, shares, follows, blocks and push tokens move into your account and the anonymous account is closed: its hashed app ID is deleted at once, and the closed account keeps only a link to the account it moved into, which is deleted 12 months later. If you sign out, the app starts a new, empty anonymous account; nothing moves back.

Retention. An anonymous account that is not used for 12 months is deleted automatically, with everything stored for it.

What we store if you sign in

• Sign-in identifier. A one-way SHA-256 hash of the account identifier Apple or Google gives us. We do not store your name from Apple or Google, and there are no passwords.
• Email address. The address Apple or Google shares when you sign in (with Apple this can be a private relay address). We use it only to join sign-in methods with the same verified address into one account. Private relay addresses are never used to join accounts.
• Profile. The handle, display name, bio, profile photo and profile links (such as Instagram or a website) you choose. Your creator profile, including these, is public.
• Recipes you publish and the photos you attach. These are public. The app removes location (GPS) and other EXIF metadata on your device before a photo is uploaded, and our server strips EXIF (including GPS), XMP and IPTC metadata again from every uploaded photo and profile photo before storing it. We record when you confirmed you have the right to publish it.
• Likes and saves, so your hearts and saves sync between devices, and which recipes you installed or shared, so each person counts once in public counts and rankings. Public counts are totals only; nobody can see who liked, saved, installed or shared a recipe.
• Favourites and collections while you are signed in, with the time of each change, so they sync between your devices. Favourites saved before you signed in are added to your account when you first sign in. They are private.
• Creators you follow, so follows sync between devices. Follower counts are public; who follows whom is not.
• Reports you send, and creators you block, so the block follows you to other devices.
• Push tokens. If the app registers your device for notifications, we store its push token with your account until you remove it or delete your account. Fujigraphy does not send push notifications yet.
• Session tokens. A hashed refresh token, kept up to 90 days or until you sign out.

IP addresses

Your IP address is used to rate-limit sign-ins, anonymous app IDs, likes, saves and follows, and anonymous reports. We store only a keyed hash of it (HMAC-SHA256 with a secret key, so it cannot be turned back into your address) in a counter that is deleted within two hours. We do not keep IP logs.

Who processes data for us

Cloudflare, Inc. hosts the service (Workers, D1 database, R2 storage, CDN) and processes data on our behalf. Apple and Google verify your sign-in.

When you publish a recipe or send a report, an internal operational alert goes by email to the operator's own mailbox, which Google hosts (Gmail): for a recipe, its name and your handle; for a report, what was reported, the reason, any details you wrote and your account ID (or "anonymous"). Apart from this, nobody else receives your data, and we do not sell it.

Deleting your account

Profile > Account > Delete account in the app (signed in) deletes your account straight away (it calls DELETE /v1/account). For Sign in with Apple we also revoke the app's access with Apple at that moment. Deletion removes your sign-in identifiers and email addresses, profile (including bio, profile photo and links), sessions, likes, saves, installs, shares, follows, favourites, collections, blocks and push tokens, deletes your published recipes and their photos, and detaches your name from reports you sent. Public copies disappear from the catalogue within about 15 minutes. Copies of deleted photos already held by our CDN or by a browser can still load from their old address until those caches expire. Reports you sent stay, without your name: what was reported, the reason and any details you wrote are kept as a moderation record, and copies remain in the operator's alert emails. Recipes Fujigraphy entered to credit a third-party creator are not part of your account and stay.

If you haven't signed in, go to Profile > Delete my data. It calls the same DELETE /v1/account and deletes the anonymous account straight away with its likes, saves, installs, shares, follows, blocks and push tokens, and its hashed app ID; public counts drop accordingly. The app then starts a new, empty one.

You can also email support@fujigraphy.com to ask what we hold or to have it deleted.

Backups

Database backups are kept for up to 30 days, so deleted data is gone from backups within 30 days.

Children

Fujigraphy is not directed at children under 13 and we do not knowingly collect their data.