Effective 14 October 2026. Applies to FujiFlow 1.0 for iPhone, published by TAHAT LLC.
The short version
- FujiFlow has no account, no advertising, no tracking and no third-party analytics. It contains no third-party code.
- Your recipes, photos, cards, profile and cameras stay on your iPhone unless you choose to share them. The community data described below uses Apple’s iCloud.
- A problem report leaves the phone only when you tap Send report. The app also makes a once-a-day check with Apple for a newer version. Community data leaves the phone when you use the sharing and community features described below.
- Sharing to the community uses Apple’s iCloud and is available in version 1.0 at launch.
What stays on your iPhone
The local information listed below stays on your iPhone unless you choose to share it. Deleting the app removes its local data; community and iCloud data are described separately below.
- Recipes you create, edit, open from a file or save.
- Your profile: display name, title, short text, links and the picture you choose. The picture comes from the system photo picker, which gives FujiFlow only the one photo you pick. FujiFlow crops it to a square and keeps one small copy.
- Your Arsenal: the cameras you add, their nicknames and any photo of a camera you attach. When a camera really connects, a salted one-way hash of its identifier is kept so the app can tell it is the same camera.
- The cameras you have paired, by name and model, so the app can reconnect.
- Backups the app makes of a camera’s settings, and share cards you make.
- What you have read or saved in News and the community pages, and your settings.
- A short activity log and, after a crash, the crash details iOS provides. They are described below.
When you use the community, your public contributions and private iCloud lists are handled as described below.
What leaves your iPhone, and when
A problem report, only when you tap Send report
After the app stops unexpectedly, or when you choose Settings > Help > Report a problem, you can send a report. Before you send it you can see what it contains. Nothing is sent without that tap.
The report is saved by the app itself into FujiFlow’s own container in Apple’s iCloud (CloudKit), which Apple runs; we run no server of our own for this. Other people who use the app cannot read it. It holds:
- the app version, your iPhone model, the iOS version and the time;
- the last steps the app took, from a log of fixed words (which screens opened, which actions ran) that never holds recipe names, photo names, people’s names, places, serial numbers, Wi-Fi names or passwords;
- the camera model, firmware and connection type, if a camera was in use;
- Apple’s crash details for the app (MetricKit), if they have arrived;
- the report of your last camera connection, if there is one, with the camera’s network name, passwords and serial numbers removed;
- the words you choose to type under “What were you doing?”, up to 1,000 characters.
It holds no name, no email address and no Apple ID. Apple does attach to every iCloud record an opaque identifier of the account that created it. It is not your name and we do not receive your name or email with it, but it does tie the report to your account, so we treat reports as data linked to you. We use reports only to find and fix problems.
If there is no connection when you tap Send report, the app keeps that report on your phone (at most three, for at most 30 days) and sends it later. You can delete waiting reports in Settings > Help. If you are not signed in to iCloud, you can choose “Send it another way”: the app prepares an email to fujiflow@tahat.info (subject starting with [FujiFlow]), or opens the share sheet, with the report attached. Then we also receive the email address you send it from.
The update check, once a day at most
When the app opens and the phone is online, FujiFlow asks Apple’s public App Store lookup (itunes.apple.com) whether a newer version exists. The request contains the app’s identifier and the region set on your iPhone, and nothing else: no name, no device identifier, no account, no cookies. Apple, like any server, sees the internet address the request comes from; that is covered by Apple’s privacy policy. If the request fails nothing happens.
The community
Community sharing is available in version 1.0 at launch. It uses Apple’s iCloud (CloudKit), not a server of ours.
- Public, visible to every FujiFlow user, only what you choose to share: your public name, title, a short line, up to five links, your profile picture, and each recipe you publish with its description, category and one to eight photographs you made. You may add up to four photographs of your own to a recipe you saved; they are shown with your public name. Photographs are made smaller and stripped of location and camera details on your phone before they are sent. Your profile is identified by a code derived from your iCloud account, not your email address or Apple ID.
- Private, in your own iCloud, readable only by you: your likes, saved recipes, people you follow and people you block.
- Reports: if you report a recipe, a picture or a profile, the report (what, why, your optional note and a code that identifies you only to us) reaches us so we can act on it. Reports are kept for the safety of the community and are not deleted when a profile is.
Reading the community needs no account. Sharing, liking, saving and following need you to be signed in to iCloud.
Things you choose to send
When you share a recipe, a card or an article, the iOS share sheet sends it where you choose; we do not see it unless you send it to us. Saving a card to your photo library puts it in your library on your phone. When you tap a link in the app, your phone opens it in its browser; the app itself makes no request.
Your camera stays between you and it
FujiFlow talks to your camera directly, by Bluetooth, over the camera’s own Wi-Fi network, or by USB cable. The camera connection does not send the live picture, your photos or your recipes to us or anyone else. Content you choose to share is handled as described above.
What FujiFlow asks permission for
Bluetooth
To find your camera, ask it to start its Wi-Fi, and stay connected to it while you join that Wi-Fi. FujiFlow may keep the Bluetooth link to a remembered camera in the background.
Local network
To talk to your camera over its own Wi-Fi network: live view and the settings you change.
“Camera”
iOS’s name for controlling an attached camera. It is used when you plug a Fujifilm camera into the phone with a USB-C cable. FujiFlow does not use the phone’s own camera.
Photos, add only
To save a share card to your library. FujiFlow can add pictures and cannot see what is in your library.
Photos you pick
When you pick a photo for a card, a recipe or your profile picture, iOS gives FujiFlow that one file and nothing else. Cards are exported without location or camera metadata.
Wi-Fi configuration and Live Activities
To join the camera’s Wi-Fi when you ask. While a recording runs, a small tally can show on the Lock Screen and in the Dynamic Island; it is made on the phone and uses no push service.
What we do not do
- We do not sell your data.
- We do not use advertising software or third-party analytics, and the app contains no third-party code.
- We do not track you across apps or websites, and FujiFlow does not ask for tracking permission.
- The app does not send your recipes or photos to us unless you choose to share them as described above. The live picture is not sent to us.
If you allow it in your iPhone’s settings, Apple shares anonymous crash and usage statistics with developers. That is governed by Apple’s privacy policy.
How long we keep things, and how to have them deleted
- On your phone: the activity log rolls over by itself. Problem-report files, crash details and waiting reports are deleted after 30 days, and a report’s files are deleted as soon as it is sent. Everything else stays until you delete it or the app.
- A problem report we hold: we keep it until we have used it to find and fix the problem, and delete it after that. To have yours deleted sooner, write to us with its code (such as 7F3A).
- An email you send us: we use it to answer you and delete it when it is no longer needed.
- Your community profile: Settings > Community > Delete my community profile removes your name, title, line, links and picture and every recipe and photograph you shared, for everyone. It cannot be undone. Your private lists stay in your own iCloud until you remove them there. Reports that others made about content, or that you made, are kept.
- Anything else we hold about you: write to us and we will tell you what it is and delete it on request.
Children
FujiFlow is not directed at children, does not ask for anyone’s age, and does not knowingly collect information from children.
This website
These pages are plain static pages. They use no cookies, no analytics, no advertising and no scripts from other sites. Our web host may keep ordinary server logs, such as the internet address of a request, for security.
Changes
If a later version sends more data off your phone, this policy will be updated before that version is released, and the date above will change.
Contact
TAHAT LLC · contact@tahat.info