Blown Flash — Privacy Policy

Last updated: 9 October 2026

Blown Flash is a photo and video editor. This policy explains exactly what the app does and does not do with your data. It is short because the app collects very little.

The short version

• Your photos and videos never leave your device. All editing runs on your phone's GPU.
• There is no account, no email address, no name, no sign-in.
• The app asks for no storage permission and cannot browse your library.
• What is sent off the device: an anonymous install id, and purchase confirmations handled by Google Play and RevenueCat.

Your photos and videos

Editing happens entirely on your device, in a local Vulkan compute engine. A photo or video you open is decoded into memory, processed by the GPU, and written back to your gallery. No image or video data is ever transmitted anywhere, to us or to anyone else. There is no cloud processing, no upload step, and no server-side rendering.

The app does not request access to your photo library. You choose each file through the Android system photo picker, which hands the app that one file and nothing else. Exports are written through the system MediaStore to Pictures/Blown Flash and Movies/Blown Flash.

The anonymous device id

On first launch the app generates a random identifier (a UUID) and stores it on your device. It is not derived from your hardware, your advertising id, your Google account, or anything else that identifies you or your phone. It is a random number that exists so that two things can work:

1. Your subscription survives a reinstall. The id is what a purchase is attached to. 2. Sync of your own edit history and remote presets, if those are enabled on your build.

The id is sent to our backend and to RevenueCat. It cannot be traced back to you, and clearing the app's data regenerates it — which will also detach it from an active subscription until you tap Restore purchases.

Purchases

Subscriptions are sold through Google Play Billing and managed through RevenueCat, which verifies the purchase and tells our backend whether the subscription is active.

We never see and never store your payment details. Your card number, billing address, and Google account are handled by Google and are not available to this app. What our backend stores is: the anonymous device id, which product was bought, and when the paid period ends.

• Google Play's privacy policy: https://policies.google.com/privacy
• RevenueCat's privacy policy: https://www.revenuecat.com/privacy

On-device subject detection

The Sticker cutouts effect separates a subject from its background using Google ML Kit's subject segmentation, which runs on your device through Google Play Services. The image is not sent to Google to do this. Google Play Services may download the segmentation model itself the first time the feature is used; that download contains no data of yours.

What we do not do

• No analytics or telemetry SDK.
• No advertising, no ad id, no ad network.
• No crash reporting that includes your content.
• No tracking across apps or websites.
• We do not sell or share personal data, in the sense of GDPR, the CCPA, or any other framework. There is nothing to sell.

Diagnostics

The app shows your GPU model in Settings → About so that a bug report can say which driver it happened on. That text is displayed to you only; it is not collected.

Your rights

Because there is no account, there is nothing to log into and nothing for us to look up about you. Concretely:

• Delete everything: clear the app's data, or uninstall it. That removes the device id, and with it the only key that links anything on our backend to your install.
• Request deletion server-side: email the address below with your device id (visible in Settings) and the associated record will be deleted.
• Access or export: the same address. The record is a handful of fields.

Under GDPR the legal basis for processing the device id is performance of a contract — it is what makes a paid subscription work. There is no consent-based processing because there is no processing we could ask consent for.

Children

Blown Flash is not directed at children under 13 and collects no personal information from anyone, of any age.

Changes

If this policy changes, the date at the top changes with it, and material changes will be announced in the app's release notes.

Contact

zigmasreisas@gmail.com