Privacy Policy
Last updated: July 24, 2026
This Privacy Policy describes how Framewalk (“we”, “us”) collects, uses, stores, and shares information when you use the Framewalk website, mobile apps (iOS and Android), and related services (together, the “Service”). By using the Service, you agree to this policy.
1. Who we are
Framewalk is a photo-hunt product operated by nheek. For privacy questions, email [email protected].
2. Information we collect
- Account and profile: email address, username, password (stored in hashed form for email/password accounts), display name, avatar you set, and your preferred app language (`en` or `no`) when you choose one in Settings.
- Sign in with Apple: if you choose Apple sign-in on iOS or the web, we receive an Apple user identifier and, on your first authorization only, the email and name Apple shares with us (Apple may hide your real email behind a private relay address). We store a link between your Framewalk account and that Apple identifier so you can sign in again. You may also connect or disconnect Apple from Settings → Sign-in methods while already logged in; that updates the same link without creating a second account.
- Hunts, frames, and posts: photos you capture or attach during a hunt (a walk draft), hunt settings (visibility, map/trail options), captions or notes you add when you keep a walk, and metadata needed to display your frames (for example dimensions and shot order). Media files are stored in object storage we operate or use as a processor (DigitalOcean Spaces).
- Prompts and themes: prompts you invent, themes linked to hunts or kept posts, and your private daily prompt for each calendar day (UTC). Daily prompts are assigned per account — not a single shared global prompt. When choosing or generating a daily prompt, we may use signals from your account such as themes you liked or saved, themes from your recent hunts, your preferred app language, and approximate location from recent hunt photos (when those shots already have GPS) so the hunt fits where you have been shooting. Generated daily prompts are stored in a reusable prompt pool so the same text can be offered to other users later without calling AI again. When AI is configured, we may send prompt text you submit to an AI provider for safety moderation, may use AI to generate daily prompts when the pool has no good match, and may create embeddings of prompt text to help detect similar themes (including across languages) so we can suggest existing themes or avoid near-duplicates. We store those embeddings with the prompt. We may also detect the language of captions and prompts so the app can offer optional translation. If your prompt idea matches an existing theme in another language, we may keep a shared theme (one prompt) and optionally cache your wording as a translation for that theme so Translate can show it later — we do not create a second theme for the same idea.
- On-demand translations: when you tap Translate on a caption or prompt, we send that text to an AI provider to produce a translation into your preferred language. We may cache the translation so the same text does not need to be re-translated for every viewer. Translation is opt-in on feeds and theme pages (you choose Translate); we do not auto-replace feed text without that action. Exception — private daily prompt: we may auto-localize today’s assigned theme into your preferred app language (using the same cache) so the hunt text matches your Settings language when the stored theme is in another language.
- Optional location and trails: if you enable tracking on a hunt, we store GPS points and optional photo pins for that walk so you can attach a trail or map when you keep. Location is collected while that hunt is active on your device—we do not continuously track you in the background for other purposes. Map tiles are rendered by Apple or Google on your device according to platform.
- Social graph and activity: follows, likes, saved walks (bookmarks on your account), reposts (resharing a walk into the feeds of people who follow you, without changing the original visibility), direct shares (sending a walk to a mutual friend in a private thread — not public chat), hidden share threads (your choice to hide a direct-share conversation from your inbox; stored on your account and syncs across your devices), notifications (for example new likes, reposts, shares, followers, or when a data export is ready), which walks you view in feeds, explore, and theme lists according to visibility rules, and blocks or content reports you submit so we can hide abuse and review safety issues. We may record that you opened a walk, profile, or theme (unique view counts) to help detect abuse when many viewers report the same content. Reports may be triaged automatically (when AI is configured) before staff review, and content may be provisionally hidden when report volume relative to viewers is high.
- Moderation and appeals: strike and flag records for unsafe prompts, account ban state, and appeal messages you submit when banned (plus admin notes when staff resolve an appeal).
- Subscriptions: when you buy Frame+ or Frame Exclusive, Apple or Google process payment. We receive limited billing metadata (transaction IDs, subscription status, plan tier)—not your full card number.
- Device and technical data: IP address, app or browser version, device type, session tokens, push notification tokens (if you enable device alerts), diagnostics, and security logs to operate and protect the Service.
- Support: information you send when you contact us.
3. How we use information
We use the information above to:
- provide and improve Framewalk (prompts, hunts, frames, feeds, explore, follows, likes, saved walks, reposts, direct friend shares, maps/trails you enable);
- authenticate you, including Sign in with Apple where offered;
- generate daily prompts and moderate user-written prompts for safety when AI is configured;
- create embeddings of prompt text to match similar themes (including across languages) and suggest or merge near-duplicates when AI is configured;
- detect content language and, when you request it, translate captions or prompts and cache those translations; auto-localize your private daily prompt into your preferred language when needed; optionally cache a hunter’s draft wording as a translation when they join an existing cross-language theme;
- process subscriptions and enforce plan limits (frames per walk, open walks, discard shelf retention, custom prompts, daily prompt refreshes);
- assign private daily prompts (reuse pool when possible; personalize from likes, saves, hunt history, and recent photo GPS when present);
- send push notifications you opt into;
- keep the Service secure, prevent abuse, enforce our Terms, review reports and blocks, apply prompt-safety warnings and bans, process appeals, and comply with law;
- communicate important service notices.
We do not sell your personal information. We do not use your private hunt drafts to train third-party advertising models.
4. Legal bases (EEA/UK users)
Where GDPR applies, we rely on one or more of: contract (providing the Service you asked for), legitimate interests (security, product improvement, abuse prevention, and service notices, balanced against your rights), consent (where we ask for it—for example optional push alerts, camera/library access, or location when you enable a trail), and legal obligation.
5. Sharing and processors
We do not sell your personal information. We may share data with:
- Infrastructure and hosting (servers, databases, object storage for your media);
- Payment processors (Apple App Store, Google Play) for purchases you initiate;
- Sign in with Apple (Apple Inc.) when you choose that sign-in method—governed by Apple’s terms and privacy policy for the data Apple provides;
- AI providers (for example OpenAI) when prompt generation, moderation, theme similarity embeddings, language detection, or on-demand content translation is configured—prompt or caption text and related signals as needed to run those features;
- Map tile providers (Apple Maps, Google Maps) when a trail or map renders on your device;
- Push delivery (Expo) when you enable notifications on mobile;
- Other Framewalk users, according to the visibility you choose on a kept walk:
- Public — visible to anyone using Framewalk (including Explore);
- Followers — visible to people who follow you;
- Friends — visible to mutual follows;
- Reposts — someone who can see your walk may reshare it into the feeds of people who follow them; viewers still must satisfy your original visibility to open it;
- Professional advisers or authorities when required by law or to protect rights and safety.
We use contracts or standard safeguards (including appropriate transfer mechanisms where data leaves the EEA/UK) with processors where required.
6. Retention
We keep information while your account is active and for a limited period afterward for backups, security, or legal compliance.
- Open hunts you park stay until you resume, discard, or delete them.
- Discarded hunts remain recoverable for a plan-based window (7 days on Free, 30 on Frame+, 90 on Frame Exclusive), then are permanently removed.
- Kept posts and media remain until you delete them or your account is deleted. Optional GPS trail points stay with the hunt or kept post until you delete that walk or your account.
To delete your account or download a copy of your data, use Settings → Your data in the app, or email [email protected] as a fallback. For other questions, use Settings → Contact us (or the contact form on our website).
7. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object, or port your personal data, and to withdraw consent where processing is consent-based.
- Correct: edit profile and hunt/post details in the app.
- Delete / access / portability: use Settings → Your data in the app (download or delete account), or contact [email protected]. If you used Sign in with Apple, you can also revoke Framewalk in Settings → Apple ID → Sign in with Apple on your device.
See also our GDPR page. You may lodge a complaint with your local supervisory authority.
8. Children
Framewalk is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us data, contact [email protected].
9. Security
We use technical and organizational measures designed to protect your information (including hashed passwords, session controls, and transport security). No online service is completely secure; please use a strong, unique password where you sign in with email and password.
10. International transfers
We may process data in countries other than your own (including where our hosting, storage, AI, or push providers operate). Where required, we use appropriate safeguards for cross-border transfers.
11. Changes
We may update this Privacy Policy from time to time. We will post the updated version and adjust the “Last updated” date. Continued use after changes means you accept the updated policy where permitted by law.