Privacy policy for the “Framekin” app

Last updated: 24 October 2026

Controller

Ebrahim Seyfi (Senorit), Seeschwalbentwiete 23, 22119 Hamburg, Deutschland · kontakt@senorit.de · +49 155 609 88996

Data we process

• The display name you choose and a random friend code.
• Photos and optional captions you send to your friends.
• Your friend list: who you added by code.
• A Firebase Installation ID so your widget updates instantly (push).
• A random access token; the server stores only its hash.
• Only if you sign in with Google (optional): we receive your Google account ID and name from Google. We store only the account ID (not your email address) to recognise you on a new phone.
• Only if you subscribe to Framekin Plus: Google Play handles the payment. We never receive your payment details; we store the purchase token and expiry date to unlock Plus. Legal basis: Art. 6(1)(b) GDPR.

Signing in with Google is optional; the app also works with just a display name.

No phone number, no email address, no contacts, no location, no advertising ID, no analytics or ad services.

Purpose and legal basis

Only to deliver photos to the friends you added (Art. 6(1)(b) GDPR, performance of a contract). Only your friends can see your photos.

Recipients and storage

Cloudflare, Inc. (server, database and photo storage) and Google Firebase Cloud Messaging (push delivery, no photo content) and, if you use it, Google (sign-in with Google). Both may process data outside the EU under the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. All connections are TLS-encrypted.

Retention and deletion

Data is kept until you delete a photo, a friend or your account. Delete your account: in the app under Settings → Delete account (how to). This immediately deletes all your photos, friendships and your account. Without access to the app: email kontakt@senorit.de with your friend code.

Your rights

Access, rectification, erasure, restriction, portability and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a supervisory authority such as the Hamburg Commissioner for Data Protection and Freedom of Information.