Vincam Privacy Policy
Last updated: October 18, 2026
Corkie: Photo Board & Film Cam ("the app") is made by penguinius ("we", "us"). This policy explains what information the app handles, why, and the choices you have.
In short
- Your photos stay on your phone unless you put them up on a shared board, which only the people you invite can see. There are no accounts to sign up for.
- Shared boards are stored for us by Supabase in the European Union (Frankfurt) while their group exists, and at most 12 months after it ends.
- The app uses services from Google and RevenueCat for ads, usage statistics, crash reports and in-app purchases. They receive the limited technical data described below.
- We don't sell your personal information.
Your photos and the camera
The app uses your phone's camera to take photos. Your photos, prints, boards, captions and everything else you make in the app are processed and stored only on your device. They are not sent to us or to anyone else, except what you put up on a shared board (below). The app doesn't use the microphone or your location.
When you save an image to your gallery or share it through your phone's share sheet, it goes only where you choose. Deleting the app deletes everything it stored on your phone.
Shared boards
A shared board is a board you fill together with people you invite, for example at a party or on a trip. Using one is optional: nothing about it leaves your phone until you make a shared board or join one with its invite.
Before your first shared board, the app shows the shared-board rules (https://corkie.app/rules), which you accept. It then signs you in anonymously, without an email address or phone number, and sends our server:
- the name you choose for guest lists;
- the photos you put up on a shared board, in three sizes, with what other phones need to show them (the camera and film, when the photo was taken, how far it has developed, and its caption);
- the notes, keepsakes and other pieces you put up, what is written on them, and where everything hangs;
- a random user ID that links these to you, the groups you belong to and your level in each;
- whether you have one of a group's boards open right now, which the others on its guest list see while you do (your name only, never what you look at), and the day you last opened one, which they see as "here today", "here yesterday" or a date;
- the reports you send, with the reason you chose.
Everyone on a board's guest list sees what is put up on it and who put it up. Nobody else can: a board is reached only through its invite, and the data is not public.
The server is Supabase (https://supabase.com), which stores and processes this data only on our behalf, in the European Union (Frankfurt, Germany). It is encrypted in transit and at rest. A group's data stays on the server while the group exists and is deleted 12 months after the group ends; its owner can delete it earlier. When a photo is thrown away or taken down, its files are removed from the server within about 15 minutes, and the text of deleted notes and captions is cleared after 30 days.
You can report a photo or a note, and hide everything a person puts up. A person at Corkie reads every report within a day, removes what breaks the rules and the people who put it up, and passes illegal content to the authorities where the law requires it.
Delete my shared data, on the app's shelf, takes your name and everything you put up off the server, deletes the groups you own, and signs you out; your photos' files go within about 15 minutes. Deleting the app alone leaves your shared data on the server until its groups are deleted, so use Delete my shared data first, or write to us.
Notifications
Reminders about your own strips and free film are made on your phone. Notices about shared boards come from our server through Apple's and Google's push services. They carry the group's name, first names and a count.
If you allow notifications, your phone's notification token is kept on our server while you're in a shared group. Leaving every group, or Delete my shared data on the shelf, removes it.
Advertising: Google AdMob
The app has one optional rewarded ad, which you can choose to watch to speed up a developing strip. To show and measure ads and to prevent fraud, Google's Mobile Ads SDK collects your device's advertising ID and app set ID, your IP address (which gives an approximate location), how you interact with ads and the app (such as app launches and taps), and diagnostic information.
Where the law requires it (for example in the EEA, the UK and Switzerland), Google's consent message asks for your choice before ads are personalized. On iPhone, the system asks whether the app may track you, and you can change this in Settings > Privacy & Security > Tracking. On Android, you can reset or delete your advertising ID in your phone's settings.
Learn more in Google's Privacy Policy (https://policies.google.com/privacy) and in how Google uses information from apps that use its services (https://policies.google.com/technologies/partner-sites).
Usage statistics: Firebase Analytics
To see how the app is used, so we can balance coin prices and find where new players get stuck, Firebase Analytics (by Google) collects how you use the app: app launches and sessions, which features you use (for example taking a photo, loading film, opening the shop, buying or spending coins, watching the ad or exporting a picture), coin pack purchases with their price, and information about the device (such as its model, system version, language and app version). It uses a random app instance identifier and the approximate location (country or city) that comes from your IP address. It doesn't collect your advertising ID, isn't used for personalized ads and isn't linked to the ads above, and we don't set a user ID. Analytics keeps this data for at most 14 months. See https://firebase.google.com/support/privacy.
The app also downloads settings such as coin prices from Firebase Remote Config, which receives only a random installation identifier and the app's version.
Crash reports: Firebase Crashlytics
If the app crashes, Firebase Crashlytics (by Google) collects the crash details, the state of the app at that moment, information about the device (such as its model and system version) and a random installation identifier. We use this only to find and fix problems. Crashlytics keeps crash reports for 90 days. See https://firebase.google.com/support/privacy.
In-app purchases: Google Play, the App Store and RevenueCat
Coin packs are bought through Google Play or Apple's App Store, which handle the payment. We never see your card or payment details. RevenueCat receives the purchase details (which pack, when, the price and the transaction ID) and a random app user ID, so it can verify the purchase and deliver your coins. See https://www.revenuecat.com/privacy.
Legal bases (EEA and UK)
We rely on your consent for personalized ads, on our legitimate interest in keeping the app working, secure and improving for crash reports, usage statistics, fraud prevention and the safety of shared boards, and on performing our agreement with you for purchases and shared boards.
Security
The data these services collect is encrypted in transit.
Children
Corkie: Photo Board & Film Cam is not directed at children and is meant for people aged 16 and over. We don't knowingly collect personal information from children. If you believe a child has used the app and data was collected, contact us and we will help remove it.
Your rights
Depending on where you live, you may have the right to access, correct or delete your personal information, to object to or restrict its use, and to withdraw consent. Unless you use shared boards, we don't hold your photos, and the data described above is linked only to random identifiers. Delete my shared data removes what you put on the server; for anything else, contact us at the address below. You can also reset your advertising ID in your phone's settings and delete the app at any time.
Changes to this policy
If this policy changes, we will update this page and the date at the top.