Privacy Policy

Chase&Keep is a film photography service operated by LSR Solutions. You post film to a lab, we get scans back to you, and you can buy gear, order prints and book events in the same app. This policy covers the iOS app and this website.

For UK and EU data protection law we are the data controller for your account. Individual labs are separate businesses and are controllers for the work they do on your film.

Account

Your name and email address. If you use Sign in with Apple and choose to hide your email, we only ever receive Apple's private relay address, and that is fine — everything works the same.

Profile

Optional: a photo, phone number, short bio, and the country you're in. Country is not optional, because it decides your currency and which labs can reach you.

Addresses

Shipping addresses you add, so film and parcels can get to you and back.

Orders

What you ordered, from which lab, what you paid, and where it is in transit.

Your images

Scans of your film, and photos you upload. These are yours. We store them so you can get them back and so the lab can deliver them.

Payment details

The brand, last four digits and expiry of a saved card, and nothing else. Full card numbers never reach our servers — they go from your device straight to Stripe, who are certified to hold them.

Devices

A push notification token per device, plus the device name and when it was last active, so we can tell you your scans are ready and you can see which devices are signed in.

Favourites

Labs, services, products and listings you save.

No advertising identifiers. No third-party analytics or tracking SDKs. We do not build a profile of you for advertising, we do not sell your data, and we do not share it with data brokers. There is nothing in the app doing behavioural tracking, because we did not put anything there.

Location stays on your phone. If you allow location access, it is used on the device to sort events by how close they are to you. It is not uploaded, not stored, and never leaves the handset.

We use a small number of processors, each for one job. They see only what that job needs.

Google Firebase

Sign-in, database, file storage and push notifications. This is where your account, orders and images live.

Stripe

Payments, saved cards, and paying labs and sellers. Card data goes to Stripe directly.

EasyPost / ShipEngine

Shipping labels — EasyPost in the US, ShipEngine in the UK. They receive the names and addresses printed on the label, because that is what a label is.

Apple

Sign in with Apple, if you use it.

The lab or seller

The lab developing your film, or the seller shipping your camera, gets the details needed to do the job and post it back — your name, delivery address and what you ordered.

Some of these process data outside the UK and EEA. Transfers rely on the standard contractual protections those providers offer.

In the app: Profile → Delete Account. You'll be asked to sign in again first, because deletion is permanent and we would rather be sure it is you.

Deleting removes, immediately:

• —Your profile and the account you sign in with
• —Your orders
• —Your scan files and any photos you uploaded
• —Your profile photo
• —Your basket and saved favourites

Two honest caveats. Stripe keeps its own record of payments it processed, because it is legally required to, and we cannot delete that on your behalf. A lab that developed your film keeps its own business records of the work it did. Neither of those is under our control, and no policy of ours can pretend otherwise.

Download your scans first. Deleting the account deletes the images, and we cannot get them back for you afterwards.

If you are in the UK or EU you can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. Email hello@chaseandkeep.com and we'll respond within 30 days. Most of it you can do yourself in the app, faster than we can do it for you.

If you think we have handled your data badly you can complain to the UK Information Commissioner's Office at ico.org.uk, or your national data protection authority in the EU.

Chase&Keep is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it.

If we change how we handle your data we will update this page and change the date at the top. If a change is significant we will tell you in the app rather than hoping you re-read this.

hello@chaseandkeep.com