Last updated: 9 August 2026
Boothie ("we", "us", the "app") is a photobooth app that lets you take, style and share photo strips. Boothie is built to keep your data on your device wherever possible. This policy explains exactly what we do and don't collect.
Strips you keep are saved inside Boothie's own storage on your iPhone. Two things about that are worth knowing:
Boothie uses your camera to take photos and, if you choose, your photo library to import existing ones. All editing — filters, frames, retouching, background removal, video export — happens locally on your device. We do not use any cloud image-processing or artificial-intelligence service, so your photos are never sent to us or to any third party for processing. When you save or share a strip, that happens through iOS and whichever app you choose; we are not involved and receive nothing.
Boothie asks for camera access, permission to read your photo library (only if you tap to import), and permission to add photos to your library (only when you save). We do not read, scan, index or upload your photo library.
Boothie does not upload your photographs anywhere. Not to us, not to a cloud service, not to an AI service. Every filter, frame, retouch, background removal and video export runs on your iPhone, using your iPhone.
An earlier version of Boothie had a feature called Duo Strips, which let two friends build one strip together and briefly uploaded encrypted photos to do it. That feature is not in this version. We removed it before launch, and the ability to upload a photo has been switched off on our servers as well as in the app — so it is off whichever way you look at it.
We may bring it back in a future version. If we ever do, we will update this policy first and it will be obvious in the app.
Boothie's referral feature lets you share a code so you and a friend can unlock watermark-free exports. To operate this, we generate a random, anonymous identifier on your device and store it — together with your referral code and whether it has been redeemed — in our backend database (provided by Supabase). This identifier is not linked to your name, email, phone number, or Apple ID, and we cannot use it to work out who you are. We do, however, treat it as personal data under UK GDPR, because a persistent identifier tied to a device is capable of singling out a user. It is generated randomly by the app, is not Apple's advertising identifier, and is regenerated if you delete and reinstall Boothie.
Your level, stamps, streaks, credits, unlocked frames and preferences are stored on your device and are never sent to us. Credits and unlocked frames are held in the iOS Keychain so that they survive an app update and are restored if you move to a new iPhone from an iCloud backup. Note that, as with any Keychain data, these may persist even after you delete the app; you can remove them by deleting the app and then resetting your device, or contact us and we will tell you how.
Purchases and subscriptions are handled entirely by Apple through the App Store. We do not receive or store your payment details. Apple's handling of that information is governed by Apple's own privacy policy.
We do not use advertising networks, analytics SDKs, or social media trackers.
Our backend is hosted by Supabase Inc. in the Tokyo, Japan region
(ap-northeast-1), chosen because it is the closest to the people who use Boothie.
The limited data described above — a random identifier, an eight-character invite code and
its redemption status — is therefore processed outside the UK and EEA.
For that transfer we rely on the UK International Data Transfer Addendum and the standard
contractual clauses in Supabase's data processing agreement. No photograph is ever transferred,
because no photograph ever leaves your phone.
Boothie has no accounts and we hold no information that directly identifies you — no name, email, phone number or Apple ID. We do hold pseudonymous identifiers (your randomly generated device identifier and referral code), and we treat these as personal data.
You have the right to access, correct, delete, restrict or object to our processing of that data, and to data portability.
The easiest way to exercise your right to erasure is in the app: open Settings → Your data → Delete my data. That removes your referral record from our servers straight away — and since that record is the only thing we hold about you, nothing is left to ask us for.
If you would rather email, or if the button cannot reach our server, tap Settings → Your data → Copy my anonymous ID and paste that ID into your email. Because we cannot link our identifiers to a person, that ID is how we find your record — so we now show it to you rather than expecting you to know it. Email us and we will respond within one month.
What we cannot delete, so you are not surprised: anything already saved to your own iPhone or your Photos library is yours and stays there — delete it from Your Strips and from Photos. Credits and unlocked frames are held in the iOS Keychain and survive deleting the app. Your own iCloud backups are inside your Apple account and outside our reach. And our hosting provider (Supabase) keeps short-lived database write-ahead logs and point-in-time recovery snapshots for operational resilience, which age out on their own schedule; we cannot purge an individual record from those on request.
Lawful basis. For your referral record we rely on performance of a contract (UK GDPR Article 6(1)(b)) — you asked us for an invite code, and we cannot give you one, or tell you when a friend has used it, without storing it. That is the service you requested, not an optional extra you consented to.
For the short-lived IP records used to rate-limit our API we rely on legitimate interests — specifically, keeping the service available and preventing abuse. We balanced this against your interests: the records last at most two days, are not linked to your device identifier, and are used for nothing else.
You can end the contract at any time by deleting your data in Settings, which removes the record entirely.
You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Boothie is operated as a UK sole trader, and we are the data controller for the small amount of information described above.
We are registered with the UK Information Commissioner's Office. ICO registration reference: ZC222447. You can check that registration on the ICO's public register at ico.org.uk/ESDWebPages/Search.
If you want to exercise any of the rights above, or you simply want to ask what we hold about you, email us and we will answer within one month. You can also see the complete list inside the app at any time — Settings → What Boothie knows about you.
Our Terms set a minimum age of 13, and the App Store rating reflects that. We want to be straight with you about how that is enforced: the app does not ask your age. We considered adding an age screen and decided against it, because it would mean collecting more information about young people in order to protect them, and there is nothing here to protect them from.
Instead we do the thing the ICO's Children's Code allows in place of establishing age: we apply the highest protections to everybody, by default, with no lower setting. No advertising, no profiling, no tracking, no location, no analytics, no contact details, no way for one user to reach another, and no photograph ever leaving the phone. A younger child using Boothie is in exactly the same position as an adult using it, and the only thing we would hold about either of them is a random invite code they chose to create.
If you believe a child under 13 has used Boothie and you would like the invite record removed, contact us and we will delete it — or delete it yourself in Settings → Your data.
Nothing a child does in Boothie sends us a photograph. There is no feature in this version that uploads an image, so a young person using Boothie is not sharing pictures with us, with another user, or with anyone else through the app. What they make stays on their phone unless they choose to save or share it themselves, using their own iPhone.
Because Boothie is likely to appeal to younger users, we have designed it in line with the principles of the UK's Age Appropriate Design Code: no accounts, no advertising, no tracking across other apps or sites, no profiling, no location data, no contact details collected, no data sold or shared, and high privacy by default. There is no public feed, no discovery, no messaging, no comments, no profiles, and no way for one user to contact another through Boothie at all. A stranger cannot find, follow, message or send anything to a child using this app, because none of those routes exist.
All data is transmitted over encrypted (HTTPS) connections. In addition:
No method of storage or transmission is 100% secure, but we take reasonable measures to protect the limited data we handle.
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Boothie is operated by Tyler L., a sole trader based in the United Kingdom, who is the data controller for the limited personal data described in this policy.
For any privacy question, data request, or complaint, contact purenestaircs@outlook.com. We aim to respond within 7 days and, for formal data rights requests, within one month as required by UK GDPR.