This policy covers the Silverlog website and the Silverlog app: Silverlog 2 (coming to the App Store and Google Play) and Silverlog 1.x (on the App Store). Silverlog's tool apps, such as Timer, Reciprocity and DoF, work differently and have their own policy.
We don't sell data, we don't show adverts, and nothing that identifies you is sent to advertisers or data brokers.
The website
Analytics: We use privacy-respecting analytics to understand which pages are visited and roughly where visitors are from. No personal data is collected, no cookies are used, and you are not tracked across sites.
Email addresses: If you sign up for notifications, we store your email address. We use it only to send you updates you requested. You can unsubscribe at any time.
Form submissions: If you submit sample images or contact us, we receive the information you provide. We use it only for the stated purpose.
The website does not use:
- Advertising tracking
- Third-party analytics that track you across the web
- Cookies (except essential functionality if needed)
Silverlog 2
Silverlog 2 is the logbook for film photography, version 2.0 and later, on iOS and Android (including its beta). It works on your phone first: you don't need an account, and without one your logbook stays on your phone. This section says, feature by feature, what leaves the phone and where it goes.
On your phone
Your logbook (rolls, frames, notes, kit, film and paper stock, darkroom logs, prints and the photos you add) is kept in the app's own storage on your phone. Backups are files you make and save or share yourself; we don't receive them. Even without an account, the app sends crash reports, usage counts and weather requests (each can be turned off in Settings → Privacy), and talks to RevenueCat about purchases. Each is described below.
Account (optional)
You need an account only for sync. On iOS you can sign in with Apple or with your email address; on Android, with your email address. With email, we send you a six-digit code; there is no password. With Sign in with Apple, Silverlog asks Apple for your email address only, never your name, and Apple may give us a private relay address if you choose to hide yours.
Your account (your email address and a user id) is held by Supabase. Sign-in codes are sent from hello@silverlog.app by Namecheap Private Email, our email provider.
Sync (Silverlog Pro)
Sync is part of Silverlog Pro and stays off until you turn it on. When it is on, your logbook is copied to our database at Supabase and kept in step between your devices by PowerSync.
- What syncs: your rolls and frames (including each frame's place, if you recorded one), kit, film and paper stock, darkroom logs, prints, presets, your lists and settings, and the photos you add to them. Each phone that syncs is also recorded, with a random device id, its platform and the app version.
- What stays on the phone: your day's timeline, the phone's meter calibration and its display choices.
- Photos: stored with Supabase. During the beta each account has 100 MB of photo space; photos beyond that stay on your phone only.
- Turning sync off stops syncing but does not delete the copy on our servers. If Silverlog Pro ends, sync stops and the copy stays. To delete it, delete your account.
Location
- A frame's place: when you log a frame, the app can record where you are, with location permission while you use the app. You can say no, and the frame is logged without a place. The place stays on your phone unless sync is on. To show a name for the place, the app asks your phone's own place-name service (Apple's on iOS, Google's on Android); the name is shown, not stored.
- Weather: while “Fetch weather” is on (it is on unless you turn it off), logging a frame with a place asks Open-Meteo for that day's weather. The app sends the place rounded to two decimal places (about a kilometre) and the date, nothing else. Like any web request, Open-Meteo sees your IP address.
- Timeline of your day: optional and off until you turn it on (Settings → Logging). While a roll of film is loaded, it records where you go, about every 200 metres, including when the app is closed, so you can later fill in frames you forgot to log. It needs location permission all the time; on Android the app explains why before Android asks, and shows a notification while it records. The timeline is kept only on your phone and is never synced or sent anywhere. Its places are deleted after 14 days, or 2 days after the roll is finished, and all of them are deleted when you turn the timeline off.
- Phone photos in the timeline (iOS only): if you allow access to your photo library, the timeline also reads when and where each photo you took with your phone was taken, so it can suggest a time and place for a frame. It doesn't read, copy or upload the images, and what it reads stays on your phone. On Android, Silverlog does not ask for access to your photo library.
Camera and photos
The camera is used by the Meter and to take a reference photo for a frame, print or piece of kit. The Meter's pictures are read for their light and deleted straight away; they never leave the phone. To add an existing photo, the app uses the system's photo picker, which gives it only the photos you choose. Reference photos are kept in the app, and uploaded only if sync is on.
Photos kept by Silverlog carry no location or camera details. A photo you take or pick is saved again without its metadata (such as where it was taken and which camera took it), and photos imported from Silverlog 1 have that metadata removed. A frame's place is kept with the frame, as described under Location, not inside the photo.
Notifications
Silverlog's notifications, such as timer alerts and the evening reminder, are set on your phone. Silverlog doesn't send push notifications from a server.
Crash reports
Sent to Sentry, unless you turn off “Send crash reports” in Settings → Privacy. A report says what went wrong and where in the app's code, with the device model, the operating system and the app version. Before a report is sent, the app removes any user or request details, keeps only the kind of each recent step (not what was tapped or typed), and replaces file paths and quoted text. The app also sends performance timings for one in five sessions, and Sentry keeps a random installation id to group reports. Sentry is set not to store IP addresses.
Usage counts
Sent to Aptabase, an analytics service built for privacy, unless you turn off “Share usage counts” in Settings → Privacy. The app counts a few actions: opening the app, loading a roll, logging a frame (and whether that was in the app, from the Lock Screen or a notification, or from the Action button), finishing a roll, running a development timer, logging a print, making a backup (by hand or automatically) and finishing an import. Each count also carries the app version, the operating system and its version, your language and region setting, whether it is a development build, and a random id that lasts only until the app is closed. Aptabase also sees the request's IP address. It uses it to estimate the country and region, and to make a temporary anonymous code, reset every 24 hours, for counting daily users. It does not store the IP address. There is no advertising identifier, no account, no location and no content.
Purchases
Silverlog Pro is bought through the App Store or Google Play, which take the payment; we never see your card details. RevenueCat manages purchases and tells the app and our server whether you have Pro. It gives each install an anonymous id. When you sign in, that id is linked to your account's user id, and your account's email address is given to RevenueCat so that we can find your purchase if you contact us. RevenueCat keeps the record of what you have bought, so that you can always restore it; when you delete your account, your email address is removed from it.
How long we keep it
- Your account, synced logbook and photos: until you delete your account.
- Something you delete in the app: removed from our servers 30 days later. A deleted stock item is kept, marked as deleted, until you delete your account.
- A photo no entry uses any more: removed from our servers after 7 days.
- Daily totals of what each account syncs and downloads (used for the limits above): 60 days.
- On your phone: until you delete it, use Settings → Clear all data, or remove the app.
- Crash reports and usage counts are not linked to your account, and are deleted by Sentry and Aptabase on their own schedules.
Deleting your account
In the app: Settings → Account → Delete account. Your account, your synced logbook and your photos are deleted from our servers straight away, and your email address is removed from RevenueCat. RevenueCat keeps the record of what you bought, so that a purchase such as lifetime Pro can still be restored. If RevenueCat can't be reached at that moment, we remove your email address by hand. Deleting your account doesn't cancel a subscription: cancel it in the App Store or Google Play. You can also ask us to delete your account without the app. Both are explained on Delete your Silverlog account.
Silverlog 1.x
Silverlog 1.x may request the following device permissions:
- Camera: Used for features like light metering. Photos are only captured when you explicitly use the feature.
- Location (optional): Used to tag where photos were taken. You can decline or revoke this permission at any time.
Data storage: App data is stored locally on your device, and backup exports are created only when you explicitly request them. Apart from features you use (Cloud backup, weather for a roll, and purchases), the app sends only crash reports and the anonymous usage counts described below. Nothing that identifies you is sent to advertisers or data brokers.
Cloud backup: If you create a Cloud account, Supabase holds your email address and the backups you upload. You can delete the account in Settings → Cloud Backup → Delete Account, which deletes your backups with it, or ask us by email (see Delete your Silverlog account).
Weather: When weather is fetched for a roll (automatically, if weather is turned on in Settings), Open-Meteo receives that roll's location (latitude and longitude).
Crash reports: Sentry receives crash and performance reports from the app, with email, username and IP address removed before sending.
Purchases: Apple and RevenueCat process subscriptions and purchases and confirm what you have bought.
Anonymous usage counts: From version 1.2.5 the Silverlog app counts a few actions (for example opening the app, creating a roll, making a backup, opening the subscription screen) so we can see which parts are used. The counts go to Aptabase, an analytics service built for privacy. Each count includes the action and one detail of it (for example the film format, whether a backup includes images, or which plan or screen a purchase came from), the app version, the operating system and its version, your language and region setting, whether it is a development build, and a random id that lasts only until the app is closed. Aptabase also sees the request's IP address. It uses it to estimate the country and region, and to make a temporary anonymous code, reset every 24 hours, for counting daily users. It does not store the IP address. There is no advertising identifier, no account, no location and no content. You can turn the counts off in Settings → Share anonymous usage counts.
Silverlog's tool apps
The tool apps (Timer, Reciprocity, DoF, Flash, Stars, Hyperfocal, ND, Scan, Mix, Pinhole and the others) have no accounts, no usage analytics and no sync. What you enter stays on your phone; they send only crash reports. Their policy is at silverlog.app/app/privacy.
Service providers
These services process data for us, each only for what is described here. The app or apps that use each one are in brackets.
- Hosting: Vercel (USA) — serves the website
- Analytics: Vercel Analytics — privacy-focused, no personal data (website)
- Maps: OpenStreetMap — map tiles load only if you open the directory map, and like any web request they see your IP address. No cookies are set (website)
- Email: If you subscribe, your email is processed by our email provider (website)
- Accounts, database and photo storage: Supabase — your account, and your synced logbook and photos (Silverlog 2); your Cloud account and backups (Silverlog 1.x)
- Sync: PowerSync — keeps your synced logbook in step between your devices, when sync is on (Silverlog 2)
- Sign-in emails: Namecheap (Private Email) — sends the six-digit sign-in code to your email address (Silverlog 2)
- Purchases: RevenueCat — manages subscriptions and purchases and confirms what you have bought (Silverlog 2, Silverlog 1.x). In Silverlog 2 it also receives your account's user id and email address when you are signed in, and deletes them when you delete your account
- Apple: App Store purchases and Sign in with Apple (Silverlog 2, Silverlog 1.x), and place names on iOS (Silverlog 2)
- Google: Google Play purchases, and place names on Android (Silverlog 2 on Android)
- Crash reports: Sentry — crash and performance reports, as described above for each app (Silverlog 2, Silverlog 1.x, tool apps)
- App analytics: Aptabase (EU-hosted) — anonymous usage counts (including the request's IP address, used to estimate the country and region; not stored), described above (Silverlog 2, Silverlog 1.2.5 and later)
- Weather: Open-Meteo — a free public weather service; receives a place and a date when weather is fetched, as described above (Silverlog 2, Silverlog 1.x)
- Purchases on silverlog.app: Paddle (UK) — our reseller and Merchant of Record for plans bought on silverlog.app. Paddle takes your name, email address, country, payment details and, where tax needs it, your address; we never see your card details. Paddle tells our server which plan was bought, with an order reference, so the Mac app can unlock it. Paddle's own privacy notice applies (Silverlog for Mac)
- Payments: Ko-fi — if you choose to support us, their privacy policy applies
Your rights
You can ask for a copy of the data we hold about you, or ask us to correct or delete it. Email privacy@silverlog.app. To delete a Silverlog account, see Delete your Silverlog account.
Changes
We may update this policy. Changes will be posted here with an updated date.
Contact
Questions? Email privacy@silverlog.app.