Privacy

Last updated 23 September 2026

FLSH is a photo editor. Most of it runs entirely on your iPhone. A few things do leave the device, and this page says exactly which, so you can decide before you tap.

What stays on your phone

• Your photos and videos. The app reads the ones you pick and writes the ones you export. Your library is not uploaded, indexed or scanned.
• Your edits. Projects, edit stacks, presets, favourites and saved recipes live in the app's own storage on the device.
• Camera and microphone. Used only while the Camera tab is open, and only to make the photo or clip you are shooting.

What leaves your phone, and when

Certain tools cannot run on a phone. When you tap Render on one of these, that single image — and nothing else from your library — is sent over an encrypted connection to our server, which passes it to the model that does the work and returns the result to you.

• The tools involved: Expand, object removal, Makeup, Hair Style, Hair Colour, Impression, Night Flash, After Dark, Clear Skin, Bedazzled and Fisheye Flash.
• Who processes it: Google (Gemini image models) and fal.ai, which hosts the models we use for expanding and editing. Object removal runs on our own server. These providers process the image to produce your result; we do not licence your photos to them for training.
• What is kept: the image is held in memory for the length of the request and then discarded. We do not write it to storage, and we do not keep a copy.
• What we log: for each run, your account id, which tool it was, which provider and model, how long it took, whether it succeeded, and what it cost us. No image, no prompt content. These records are deleted automatically after 90 days, and they exist so we can meter daily allowances and understand our own bill.

Every one of these tools is marked in the app and requires an explicit tap. Nothing is sent in the background.

Your account

You get an anonymous account the first time you open the app, so your Pro entitlement and your allowance can follow you. It holds no personal information.

• Sign in with Apple links that account to your Apple ID. If you choose to hide your email, we only ever see Apple's relay address.
• Email sign-in sends a one-time link to the address you give; the address is stored on your account so you can sign in again.
• Your profile holds whatever you set — a handle, a display name and an avatar — and nothing you did not type in.
• Notifications, if you allow them, mean a device token is stored on your account so we can send them. Turn them off and the token stops being used.

Discover

Posting to Discover is a switch on the export sheet and it is off unless you turn it on. When you post, the image, its recipe, your handle and your avatar become publicly readable, and other people can like, report or apply the recipe. Likes are recorded against your account so a post can be unliked.

You can delete any post from your own profile. Deleting it removes the image and the record; copies other people already saved to their camera roll are, as ever, outside anyone's reach.

Purchases

FLSH Pro is sold by Apple. Payment happens entirely in the App Store and we never see a card number. We use RevenueCat to tell us whether a subscription is active; it receives an app-specific identifier and Apple's receipt, not your name or payment details.

Analytics and diagnostics

The app uses Google Firebase Analytics to count screen views and feature usage, and Firebase Remote Config to turn features on and off without shipping an update. This is aggregate product usage — which tools get used, where people stop — not a record of your photos or their contents. Crash and error diagnostics are collected in the same way.

Children

FLSH is not directed at children under 13, and we do not knowingly create accounts for them.

Deleting everything

Settings → Delete account removes your profile, handle, posts, likes, saved recipes, uploaded images and the account itself, permanently and in one step. Nothing is retained afterwards except the anonymised cost records described above, which age out within 90 days. Deleting the app alone removes everything held on the device.

Your rights

If you are in the EU, the UK, California or anywhere with comparable law, you can ask for a copy of what is on your account, ask us to correct it, or ask us to delete it. The in-app delete does the last of these immediately; for the others, write to us.

Changes

If this policy changes in a way that affects what leaves your phone, we will say so in the app before the change takes effect.

Contact

Astera · support@astera.digital