Privacy policy for photographers
Archived version. This is the text in force on 24 September 2026. The current version.
Correction (25 September 2026). The company named below as FrameDrop, Inc. is Magic Image Solutions LLC, a Delaware limited liability company (8 The Green, Suite A, Dover, DE 19901), which operates FrameDrop and Magic Gallery. Nothing else in this text is changed.
This page is about your own data as a photographer who uses the FrameDrop app: what we collect, why, where it goes and what you can do about it. Your clients' data, which you control and we process for you, is covered by the client privacy policy and the Data Processing Agreement.
Last updated: 24 September 2026 (the version of 23 September). Controller: FrameDrop, Inc., a Delaware corporation ([registered address]) (“FrameDrop”, “we”). Contact: framedroppro@gmail.com. [EU representative under GDPR Art. 27: to be appointed.] [UK representative: to be appointed.]
1. What we collect
| Category | Details | Source |
|---|---|---|
| Identity and contact | First and last name, phone number, email address, invitation code and who referred you, language | You, at sign-up |
| Business details | Business card details you enter (name, tagline, phone, email, social handles, website, a picture), prices, payment rails you use, currency | You, in Settings |
| Device and app | A device identifier we assign, phone model, iOS version, app build, battery and thermal state, network type, storage state, settings you have chosen | The app |
| Camera | Your camera's make, model, serial number, firmware, the name you gave it, its Wi-Fi network name and password (so the phone can rejoin it), its Bluetooth identity | You and the camera |
| Location | Where each shift and sale took place (coordinates and the resolved place name); the app does not work without location because it is used to name galleries, to time-zone sales and, where you turn it on, to alert nearby photographers | The phone, with your permission |
| Sales and delivery | Each sale: time, photo count, price, currency, payment method, tax status; each delivery: how it went out; each gallery: its code, when it was opened and what was bought | The app |
| Photos | The photos you deliver to clients, previews of them, and, if you switch it on, RAW backups; their metadata | Your camera through the app |
| Client contacts | The email addresses and phone numbers your clients give you (processed for you, see section 7) | Your clients |
| Diagnostics | The app's own log (what the camera link, uploads and deliveries did), crash reports, a one-page device summary, uploaded to us periodically and on request | The app |
| Earnings and tax | Your earnings balance, payouts, Stripe account identifiers, and the tax information Stripe or the law requires | You; Stripe |
| Agreements | Which version of each agreement you accepted or declined, when, in what language, from which build | The app |
| Testing data | Which presentation variant each client saw, and what was kept and bought | The app |
2. Why, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Running your account and the app: signing you in, syncing settings across your devices, moving photos, recording sales, building and hosting galleries, delivering files, sending the emails you ask the app to send | Contract |
| Paying you, keeping tax and accounting records, reporting to tax authorities where required | Contract; legal obligation |
| Naming galleries after places and time-zoning your sales | Contract |
| Heads-up alerts to nearby photographers (only while you have the feature on) | Consent, withdrawable in Settings |
| Diagnostics: finding and fixing faults, supporting you | Legitimate interest |
| Security, fraud and abuse prevention, enforcing our terms | Legitimate interest; legal obligation |
| Testing and improving how the app presents photos, using what clients kept and bought | Legitimate interest (running and improving the service you use) |
| Licensing your photos and sale data to third parties, or using them to train models | Only under the Machine Data Agreement, which is consent and can be withdrawn |
| Re-selling your photos to the people in them and sharing the revenue | The Pro Licensing Agreement (contract), if you accept it |
| Telling you about changes to the service and your agreements | Contract; legal obligation |
We do not use your data for third-party advertising, and we do not sell it. We do not make automated decisions about you with legal or similarly significant effects.
3. Notice of financial incentive (California and similar US laws)
The Machine Data Agreement offers FrameDrop Pro at no charge instead of US$20 in exchange for your permission to use the data the app generates (sales, what was kept and bought, and, where you agree, the photos) to improve our products and license it to partners. Under California law that is a financial incentive. The material terms are in the agreement itself; you opt in by accepting it and may withdraw at any time in Settings → Account, after which the Pro price applies from your next renewal and no data generated after withdrawal is licensed. We value the data at the difference in price, US$20 per period, based on the revenue we expect from licensing an average photographer's data over that period. You will not be treated differently for declining, other than the price.
4. Face data
The app groups photos by face on your phone using iOS's built-in face detection. The resulting numbers stay on your phone, are deleted when the photos are, and are never uploaded to us. We hold no biometric identifiers of you or your clients. You control the feature (EU-safe mode turns it off) and you are responsible for using it lawfully where you shoot.
5. Who we share it with
| Recipient | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, server functions | United States |
| Cloudflare | Magic Gallery hosting (Pages), photo and preview storage (R2) | Global; storage in the United States and EU |
| Hetzner | Rendering previews | Germany |
| Stripe | Client payments, your shop, payouts, identity and tax checks (Stripe is an independent controller for these) | United States and EU |
| Resend | Emails to your clients and to you | United States |
| Apple | The App Store, in-app purchase, TestFlight, crash reporting you have opted into with Apple | — |
| GeoNames | Turning shift coordinates into a place name (coordinates only) | Switzerland |
| Payment apps you hand a sale to (Square, SumUp and others) | Only the amount and a reference; the transaction is yours with them | — |
| Your clients | Your name, business card, and the photos you deliver | — |
| Partners under the Machine Data Agreement | Only if you accepted it, and only what it describes | As it states |
And where the law requires, to protect safety, or to a successor of the business under this policy.
6. International transfers
We are in the United States. For photographers in the EU, EEA, UK and Switzerland, transfers to us and to providers outside those areas rest on the Standard Contractual Clauses (with the UK Addendum) and, where a provider is certified, the EU-U.S. Data Privacy Framework. Ask us for copies.
7. Your clients' data: you are the controller
The photos of your clients and the contact details they give you are yours to control and ours to process on your instructions. We keep them to deliver, host galleries and send the emails the app sends; we act on a client's unsubscribe or deletion request ourselves, whoever they send it to, and we tell your phone to delete its copy. We do not use client data for anything of our own except aggregated statistics that identify nobody. The Data Processing Agreement [to be published] contains the detail, including our sub-processors above and how we help you answer a client's rights request.
When you close your account, photo sessions paid for by and delivered to your clients will not be deleted unless the clients opt to delete the photos themselves. We keep the photos each client paid for, and that client's own contact details, only so the client can go on viewing and downloading what they bought; from then on FrameDrop is the controller of them, on the basis of our legitimate interest in keeping a purchase available to the person who paid for it (and, where FrameDrop sold the photos, our contract with that client). Your name, your device and your camera's identifiers are removed from them. The photos a client did not pay for, free and undelivered sessions, your RAW and archive copies and everything else are deleted.
8. How long we keep it
- Account, settings, camera details: until you delete your account.
- Photos and galleries: until the gallery expires or you or the client delete them; sessions your clients paid for and received stay after your account closes (section 7). RAW backups until you delete them or the account.
- Sales, payouts, tax records: as long as tax and accounting law requires (up to 10 years), without contact details after deletion.
- Diagnostics: 90 days. Heads-up locations: 24 hours.
- Agreement records: for as long as we may need to show what you agreed to, at least the statutory limitation period.
- Backups: roll off within 14 days of a deletion.
Deleting your account (Settings → Account → Delete my account) removes everything above except the records we must keep and the sessions your clients paid for and received (section 7), within 24 hours. Or email us.
9. Your rights
You can see, correct, export, delete, restrict and object to the processing of your data, and withdraw consents (in Settings where the feature lives, or by email). Write to framedroppro@gmail.com; we answer within one month (EU) or 45 days (US). EU, EEA and UK residents may complain to their data protection authority. US state residents: we do not sell your personal information or share it for cross-context advertising; you may appeal a decision on a request by replying to it; we will not discriminate against you for exercising a right (the financial incentive above is disclosed and optional).
10. Children
FrameDrop is for adults; we do not knowingly create accounts for anyone under 18 and delete any we find.
11. Security
Sign-in is by a code emailed to you; there is no password to steal. Data is encrypted in transit and at rest with our providers. Photos are served through short-lived links. Access inside FrameDrop is limited to what running the service needs, and our own read access to the database is read-only. No system is perfectly secure; if a breach affects you we will tell you and, where required, the authority without undue delay.
12. Changes and contact
Material changes are announced in the app at the next launch and dated here. Questions and requests: framedroppro@gmail.com, FrameDrop, Inc., a Delaware corporation ([registered address]).