Effective Date: October 15, 2026
Firstgram (“Firstgram,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information Firstgram processes, why we process it, when it may be shared, how long it is retained, and the choices available to you.
Firstgram is operated by CHEN NING YU. For purposes of applicable data protection law, the operator is the data controller, meaning the person or entity that decides why and how personal data is processed.
This Privacy Policy applies to the Firstgram iOS application and related services. It does not apply to third-party websites, applications, or services that have their own privacy policies.
With your permission, Firstgram may access:
Live camera frames and pose-alignment information are processed on your device for the camera-guidance feature. They are not uploaded merely because you use that feature. A photo is uploaded only when you choose to use it for an account, profile, post, report, or another cloud-based feature.
If you allow Firstgram to add photos to Apple Photos, captured photos may be saved to your photo library. Photos stored in Apple Photos remain under your control and are retained until you delete them through Apple Photos or another authorized application.
If you create an account or sign in, we may process:
We may process information that you provide or create, including:
Your profile, posts, captions, attached locations, and some social activity may be visible to other Firstgram users or the public, depending on the feature and your settings. Your account email address is not displayed as public profile information.
If you publish a photo with the Public setting enabled, other Firstgram users may use that photo as a free reference template while taking their own photos. If you later make the post private or delete it, Firstgram prevents new template access and removes Firstgram-managed cached copies from other users’ devices the next time those devices synchronize. Photos that other users already created using the reference are not deleted.
To detect potentially unsafe, illegal, or prohibited content, Firstgram may process:
When you submit profile or post content that requires moderation, the relevant text or image may be sent to OpenAI for automated content-safety analysis. Before this transmission, Firstgram will present a clear notice and request your consent. If you do not consent, you may continue using features that work entirely on your device, but you will not be able to submit content that requires cloud moderation.
Automated moderation may prevent content from being published or may flag it for further review. You may contact us if you believe a moderation decision was made in error.
For personalized post recommendations, Firstgram 1.0.1 uses Apple Vision on your device to analyze post images and generate a limited set of content tags. When you publish a public post, these tags are submitted with the post to Firstgram, which uses them with your bookmark history to rank recommended posts. Supported legacy cloud-classification flows may send public post images to OpenAI to generate recommendation tags. Recommendation classification and the OpenAI content-safety review described above are separate processing steps; on-device classification does not remove the safety review required for publishing. These activities are not used for advertising or cross-app tracking.
Firstgram does not request continuous or background access to your device’s location. When you publish a photo, Firstgram reads its GPS capture location and automatically attaches it to the post. The location of a public post may be visible to other users. You can remove or change the location before publishing.
Map searches and map displays use Apple MapKit. Apple may process map requests, device information, IP address, and related technical information according to Apple’s privacy terms.
If you buy F Coin or use F Coin to purchase a Creator Kit:
Firstgram and its service providers may automatically process limited technical information such as IP address, device and operating-system information, app version, request timestamps, error information, and security events. If you contact us, we also process the information included in your support request.
Content Safety Review applies to content submitted for cloud moderation. Product analytics is a separate optional choice in Settings and requires separate consent. Declining or withdrawing product analytics does not prevent publishing or using on-device camera features. Earlier moderation-only or combined consent does not grant consent under the new independent analytics notice. You may withdraw consent for each purpose separately in Settings. Declining or withdrawing Content Safety Review leaves on-device camera features available but prevents submissions requiring cloud review. Turning off product analytics stops future collection on this device and clears its pending analytics queue; it does not automatically delete historical events already uploaded. If the server update fails while offline, the app shows a failure and continues to stop local collection until you explicitly consent to analytics again. Withdrawal does not undo completed content reviews.
In versions with usage analytics enabled, we record limited feature interactions and technical data, including entering the foreground, visible foreground time, opening template libraries, built-in photo impressions, opening photo previews, clicking external links, applying references, completing captures, saving references, and starting purchase flows. We also record operation outcomes, waiting times, and controlled error codes to understand feature use and improve reliability. Server-verified publishing and purchase outcomes enter analytics only when their verification flows are enabled; unverified client actions are not treated as successful transactions.
Events contain an event identifier, timestamp, session identifier, app version, data-format version, and identifiers of related templates, photo items, or features. Signed-in activity uses an account identifier; signed-out activity uses a random visitor identifier. Visitor and account analytics histories remain separate and are not merged on sign-in. These records may be linked to an account or visitor identifier and are not fully anonymous.
Product analytics events do not contain photo or video content, facial features, precise location, device fingerprints, contacts, passwords, full payment details, free-text input, or full error messages. We do not record screens; foreground time excludes background time. These limits apply to product analytics events. Photos and locations that you choose to publish are handled under the other sections of this policy.
We use information to:
Where applicable law requires a legal basis, we rely on your consent, performance of our agreement with you, our legitimate interests in operating and securing Firstgram, and compliance with legal obligations. You may withdraw consent at any time, but withdrawal does not affect processing that was lawful before withdrawal.
We share information only as needed for the purposes described in this Privacy Policy, including with:
We require service providers that process personal data for Firstgram to protect it consistently with this Privacy Policy and applicable law. Third-party services may also process information under their own terms when they act independently from Firstgram.
Firstgram does not sell or rent personal data to data brokers or for third-party advertising. Personal data may be transferred as part of a business transaction described above, subject to applicable law; this provision does not authorize unrelated sales or unrestricted use of personal data. Firstgram does not use third-party advertising SDKs or track users across other companies’ apps and websites for targeted advertising.
Information that you choose to publish may be copied, saved, shared, or viewed by other people. Even after you delete public content, copies may remain in screenshots, shares, search caches, or records controlled by other users or third parties. Do not publish information that you do not want others to see.
Public post photos are also available inside Firstgram as free camera templates. Making a post private or deleting it stops future Firstgram template access after synchronization, but does not remove photos that another user already created.
We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy:
Retention periods may vary according to the type of information, the sensitivity of the information, legal requirements, and whether the information is needed to resolve a dispute or enforce an agreement.
Depending on where you live, you may have the right to access, correct, delete, restrict, object to, or receive a portable copy of your personal data, and to withdraw consent.
You can:
When you delete your account, Firstgram deletes your authentication account, profile, uploaded profile media, authored posts and post media, F Coin balance, Creator Kit ownership, and associated social data from active systems. Apple and RevenueCat may retain transaction records needed for refunds, fraud prevention, dispute resolution, accounting, or legal compliance. Creating another Firstgram account does not restore deleted F Coin or Creator Kit ownership.
We may need to verify your identity before completing a privacy request. We may deny or limit a request where permitted by law, including when information must be retained to protect users, complete a transaction, prevent fraud, or comply with a legal obligation.
Signing out or uninstalling the app does not delete analytics events already transmitted. You may contact us to request access, a copy, correction, restriction, cessation of collection or use, objection, or deletion of identifiable analytics data, as applicable under law. We will confirm the relevant identifiers and retention requirements before arranging processing. Provider deletion may complete in stages; submitting a request is not proof of immediate deletion.
We use reasonable administrative, technical, and organizational safeguards designed to protect information. However, no internet transmission or storage system is completely secure, and we cannot guarantee absolute security.
You are responsible for protecting access to your device, email account, and Sign in with Apple credentials. Please contact us if you believe your Firstgram account has been compromised.
Firstgram and its service providers may process information in countries other than the country where you live, including the United States and other locations where our providers operate. Where required, we use appropriate safeguards for international transfers of personal data.
Product analytics currently uses a United States regional service. Data is transmitted over networks, stored, and processed into electronic reports. Access is limited to authorized people who need it to provide, maintain, or support the service or handle data requests.
Firstgram is not directed to children under 13. If you are below the minimum age required to consent to data processing in your jurisdiction, you may use account or social features only with authorization from a parent or legal guardian where permitted by law.
If you believe that a child provided personal data without appropriate authorization, contact us at firstgram.official@gmail.com. We will investigate and delete the information where required.
We may update this Privacy Policy when Firstgram’s features, service providers, or legal obligations change. We will publish the updated policy at the same public URL and change the “Last Updated” date. If a change materially affects your rights, we will provide additional notice or request consent where required.
For privacy questions, requests, or complaints, contact:
CHEN NING YU Email: firstgram.official@gmail.com Postal address: Lawful address will be provided if legally required