Effective November 13, 2026

Your moments.
Your privacy.

Flick is a private camera and encrypted vault for iPhone. You do not create an account or provide a name or email to use it.

On your iPhone

Your vault media and index are encrypted on your device with Apple CryptoKit and protected by iOS Data Protection. Vault keys remain in the device’s Keychain. Flick does not back up your vault to our servers or to iCloud. Deleting the app or losing the vault key can permanently remove access to your media.

Camera recording, playback and sharing may require protected temporary files, which Flick removes when finished or when the app goes into the background. Sharing is an explicit action you control. Camera and microphone access are used for capture; optional Face ID unlocks your vault. Your PIN or pattern verifier stays on the device. Regular capture and Beauty processing stay on your iPhone.

An anonymous identifier

A random anonymous ID is stored in synchronizable iCloud Keychain, separately from your vault key. It links your credit balance and purchases across reinstallations when that Keychain item remains available. We do not receive your Apple ID. Losing this anonymous ID may prevent us from recovering your credit balance.

AI, only when you ask

After your consent, tapping an AI action sends the chosen photo through our Cloudflare service to OpenAI for AI Lens, Hairstyle, Outfit or Retouch. Only that photo and the information needed for the selected action are sent. We process photos and results in memory and do not store them on our servers, databases, caches or logs. Results you keep are encrypted in your device’s vault. You can withdraw AI consent in Settings.

OpenAI processes requests under its API data policy; its own retention rules apply. Flick does not promise that the AI provider retains no data. See OpenAI’s API data controls. AI can make mistakes; estimates are for reference.

Purchases and service protection

Apple StoreKit handles payments. We verify Apple-signed transactions and keep transaction identifiers, product and environment, subscription expiry, anonymous ownership, credit ledger entries and delivery status to provide purchases and prevent replay. App Attest verifies genuine app requests; we store attestation keys, verification receipts, counters and short-lived challenges. Cloudflare receives network information, including your IP address; the service uses it for rate limiting. Operational records include request identifiers, action/model, usage, cost, timing and error codes, but no photo content.

Credit and purchase records are retained to preserve balances and prevent abuse. Short-lived challenges and rate-limit records are cleared regularly. Flick has no advertising or analytics SDK and does not sell your personal data.

Your choices and contact