Privacy Policy

Introduction

oldcam ("oldcam," "we," "us," or "our") provides a mobile camera and photo editing application that lets you capture, edit, and share images and videos with vintage and retro effects (the "App" or "Service"). This Privacy Policy describes how we collect, use, share, and protect personal information when you download, install, access, or use the App, our websites, and related services that link to this Policy.

By using oldcam, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with our practices, please do not use the App.

This Policy does not apply to third-party websites, services, or applications that may be accessed through the App. Their privacy practices are governed by their own policies.

1. Information We Collect

1.1 Information You Provide to Us

• Account Information. When you create an account, we collect your name or display name, email address, username, password (stored in hashed form), date of birth (for age verification), and optionally a profile photo and biographical information.
• User Content. Photos, videos, captions, comments, hashtags, location tags, edits, filters applied, and other content you create, upload, edit, or share through the App.
• Communications. Messages you send to us (such as support requests, feedback, or bug reports), survey responses, and communication preferences.
• Payment Information. If you purchase a subscription or other in-app purchase, transactions are processed by the Apple App Store or Google Play. We receive transaction confirmation and metadata (such as product ID and purchase date) but do not receive or store your full payment card information.
• Promotional Information. Information you provide when participating in surveys, contests, sweepstakes, or promotional activities.

1.2 Information We Collect Automatically

• Device Information. Device model and manufacturer, operating system and version, unique device identifiers (including IDFA on iOS, AAID on Android, and other resettable advertising identifiers), screen resolution, language and locale, time zone, mobile carrier, and network connection type.
• Usage and Activity Data. Features and functions you use, edits and filters you apply, frequency and duration of use, in-app navigation paths, interactions with other users, and performance metrics.
• Log Data. IP address, access times, user agent, referring screens, error logs, and crash reports.
• Location Information. With your permission, precise location (GPS) when you tag content or use location-based features. We may also infer general location (city or region) from your IP address for service localization, security, and analytics.
• Camera and Microphone Input. While you are actively using camera or video features, the App processes camera and (if recording video) microphone input on your device. This input is not transmitted to our servers unless you save, upload, or share the resulting content.
• Photo Metadata (EXIF). When you import photos, the App may read embedded metadata such as date taken, camera model, and GPS coordinates (if present). You can strip GPS metadata before sharing in the App settings.

1.3 Information from Third Parties

• Sign-In Providers. If you log in via Apple, Google, or another third-party identity provider, we receive basic profile information (such as name, email, and provider ID) as authorized by you and the provider.
• Analytics and Advertising Partners. We may receive aggregated, de-identified, or pseudonymous analytics information from our service providers and partners.
• Publicly Available Sources. Information you have chosen to make public on other platforms when you link those accounts to oldcam.

2. Permissions We Request

The App requests the following device permissions. You may grant or deny each permission individually, and you may revoke them at any time through your device's system settings. Denying certain permissions may limit App functionality.

• Camera. Required to capture photos and videos within the App.
• Photo Library / Photos. Required to import existing photos and videos and to save edited content to your device.
• Microphone. Required when recording audio with videos.
• Location Services. Optional; used to geotag content and to enable location-based features.
• Notifications. Optional; used to send service updates, social interactions, and reminders.
• Storage (Android). Required to save edited content and to access user-selected files.
• App Tracking Transparency (iOS). We will request your permission via the iOS App Tracking Transparency framework before linking data collected from this App with data from other companies' apps or websites for tracking purposes.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and operate the Service. Deliver core functionality, sync content across devices, process subscriptions and in-app purchases, and authenticate users.
• Personalize your experience. Recommend filters, effects, content, and features based on your activity and preferences.
• Improve our Service. Conduct research, analyze usage patterns, debug, test new features, run A/B experiments, and develop new products.
• Communicate with you. Respond to inquiries, send service-related announcements, security alerts, and (with your consent where required) marketing communications.
• Ensure safety, security, and integrity. Detect, prevent, and address fraud, abuse, spam, security incidents, harmful or illegal activity, and to enforce our Terms of Service.
• Comply with legal obligations. Respond to lawful requests from public authorities, enforce our rights, and comply with applicable laws and regulations.
• Aggregated and de-identified data. Create non-identifying statistics and insights that we may use, share, or publish for any purpose.

4. How We Share Your Information

We do not sell your personal information for monetary consideration. We may share your information in the following circumstances:

• Service Providers and Vendors. We share information with third parties that perform services on our behalf, including cloud hosting and storage (such as Cloudflare and Amazon Web Services), analytics (such as Firebase or similar providers), crash reporting, customer support, and payment processing. These providers are contractually obligated to use information only as instructed by us and only for the purposes we specify.
• Other Users. Content you choose to make public (including photos, videos, comments, and profile information) is visible to other users and may appear in public feeds, search results, or shared links. You control what you share.
• Legal and Safety Reasons. We may disclose information to comply with subpoenas, court orders, legal process, or other lawful requests by public authorities; to protect the rights, property, or safety of oldcam, our users, or others; or to investigate, prevent, or address fraud, abuse, or violations of our policies.
• Business Transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will provide notice as required by law.
• With Your Consent. We may share information for additional purposes with your explicit consent.
• Aggregated or De-identified Data. We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you.

5. Data Retention

We retain personal information only for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary depending on the type of data and the context in which it was collected.

• Account data. Retained while your account is active and for a reasonable period after deletion to permit account recovery, resolve disputes, and comply with legal obligations.
• User content. Retained while you maintain it on the Service. Deleted content is removed within a commercially reasonable period, subject to backup retention cycles.
• Log and usage data. Typically retained for up to twenty-four (24) months, after which it is deleted or aggregated.
• Legal compliance. Longer retention may apply where required by law, regulation, or legitimate business purposes such as tax, accounting, or dispute resolution.

You may request deletion of your account and associated data at any time as described in Section 8.

6. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit using Transport Layer Security (TLS), encryption of sensitive data at rest where appropriate, access controls, network monitoring, and regular security reviews.

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for keeping your account credentials confidential.

7. International Data Transfers

oldcam is based in the United States, and the information we collect is processed and stored on servers located in the United States and in other jurisdictions where our service providers operate. If you access the App from outside the United States, you acknowledge that your information will be transferred to, stored, and processed in the United States and other countries that may have data protection laws different from those of your jurisdiction.

8. Your Privacy Rights and Choices

You have choices about the information you provide and how we use it:

• Account Settings. You can review and update your account information at any time in the App settings.
• Device Permissions. You can grant or revoke permissions (such as camera, photos, microphone, or location) at any time through your device's system settings.
• Marketing Communications. You can opt out of promotional emails using the unsubscribe link in any such email, or by adjusting your notification preferences in the App.
• Push Notifications. You can disable push notifications at any time through your device's system settings.
• Account Deletion. You may delete your account through the App settings or by contacting us. Account deletion is generally permanent and removes your content from the Service, subject to the retention practices described in Section 5.
• Access and Portability. You may request a copy of the personal information we hold about you in a structured, commonly used, machine-readable format.
• Correction. You may request that we correct inaccurate personal information.

To exercise these rights, please contact us using the information in Section 15. We will respond within the time period required by applicable law. We may need to verify your identity before fulfilling your request.

9. U.S. State Privacy Rights

Depending on your state of residence, you may have additional rights under applicable state privacy laws. The rights described below are in addition to those described in Section 8. To exercise these rights, please contact us using the information in Section 15.

9.1 California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, California residents have the following rights:

• Right to Know. You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purposes for collecting or selling the information, and the categories of third parties with whom we shared the information.
• Right to Delete. You may request that we delete personal information we have collected from you, subject to certain statutory exceptions.
• Right to Correct. You may request that we correct inaccurate personal information that we maintain about you.
• Right to Opt Out of Sale or Sharing. We do not "sell" personal information for monetary consideration. To the extent we "share" personal information for cross-context behavioral advertising under California law, you may opt out using the controls described in Section 13 or by contacting us.
• Right to Limit Use of Sensitive Personal Information. To the extent we use or disclose sensitive personal information for purposes other than those expressly permitted under the CCPA, you may direct us to limit such use or disclosure.
• Right to Non-Discrimination. We will not discriminate against you for exercising your privacy rights.
• Authorized Agent. You may designate an authorized agent to make a request on your behalf. We may require the agent to provide proof of authorization and may require you to verify your identity directly with us.

9.2 Virginia Residents (VCDPA)

Under the Virginia Consumer Data Protection Act, Virginia residents have the right to access, correct, delete, and obtain a copy of personal data, and to opt out of targeted advertising, sale of personal data, and certain profiling that produces legal or similarly significant effects. You also have the right to appeal a denial of these requests.

9.3 Colorado Residents (CPA)

Under the Colorado Privacy Act, Colorado residents have the right to access, correct, delete, and port personal data, and to opt out of targeted advertising, sale of personal data, and certain profiling.

9.4 Connecticut Residents (CTDPA)

Under the Connecticut Data Privacy Act, Connecticut residents have the right to access, correct, delete, and port personal data, and to opt out of targeted advertising, sale of personal data, and certain profiling.

9.5 Utah Residents (UCPA)

Under the Utah Consumer Privacy Act, Utah residents have the right to access, delete, and port personal data, and to opt out of targeted advertising and the sale of personal data.

9.6 Additional State Residents

Residents of additional U.S. states with comprehensive consumer privacy laws (including but not limited to Texas, Oregon, Montana, Iowa, Indiana, Tennessee, Delaware, New Jersey, Minnesota, Maryland, Rhode Island, Kentucky, and New Hampshire) may have similar rights to access, correct, delete, and port personal data, and to opt out of targeted advertising, sale of personal data, and certain profiling. We will honor these rights as required by applicable law.

9.7 Nevada Residents

Nevada residents may submit a verified request to opt out of the future sale of certain "covered information" as defined under Nevada law. As described above, we do not sell personal information in the manner contemplated by Nevada law.

10. Children's Privacy

The App is not directed to children under the age of thirteen (13). We do not knowingly collect personal information from children under 13 in violation of the Children's Online Privacy Protection Act (COPPA) and related regulations. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information as quickly as possible. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us so that we can take appropriate action.

For users between the ages of 13 and 18, parental supervision is recommended. Additional restrictions or parental consent may apply to teen users in certain jurisdictions.

11. Third-Party Services

The App may contain links to, or integrate with, third-party websites, services, and applications, including social media platforms, sign-in providers, and external content. These third parties operate independently of us and have their own privacy policies and terms of service. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information to them.

12. Cookies and Similar Technologies

The App itself does not use browser cookies; however, embedded web content (such as help articles, sign-in flows, or external links) may use cookies and similar technologies. Our analytics and crash reporting service providers may use device identifiers, SDK-based identifiers, and similar technologies to recognize your device across sessions and to provide their services. You can manage many of these identifiers through your device settings (for example, by resetting your advertising identifier or by limiting ad tracking).

13. Do Not Track and Global Privacy Control

Some browsers and devices support "Do Not Track" (DNT) signals or the Global Privacy Control (GPC) signal. Where required by applicable law (such as California), we treat valid GPC signals as a request to opt out of the "sale" or "sharing" of personal information. Because no consistent industry standard for DNT has been adopted, we do not currently respond to DNT signals.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our Service, or for legal, operational, or regulatory reasons. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this Policy and, where required by applicable law, by providing additional notice (such as an in-app notification or email). Your continued use of the Service after the changes take effect constitutes your acceptance of the revised Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

• Email: [email protected]

For requests to exercise privacy rights, please include sufficient information to verify your identity and to identify the rights you wish to exercise. We will respond within the time period required by applicable law.

16. Categories of Personal Information (CCPA Disclosure)

For California residents, the following table summarizes the categories of personal information (as defined under the CCPA) that we have collected in the preceding twelve (12) months, the business or commercial purposes for collection, and the categories of third parties with whom such information may be disclosed for a business purpose.

We do not sell personal information for monetary consideration. We do not knowingly collect personal information from children under the age of 13. We do not use or disclose sensitive personal information for purposes other than those permitted by the CCPA without offering a right to limit such use.