Privacy Policy
Last updated September 19, 2026
Pookie is an instant camera app that turns your photos into Apple Wallet passes. This policy explains what Pookie (“we”) collects when you use the Pookie app and pookie.pics, why, who else sees it, and how to delete it.
The short version: photos are processed on your phone. We only receive a photo when you choose to add it to Wallet or give it away. We never sell data. We use PostHog to understand how the app is used. The only cross-app tracking we do is ad measurement with Meta, and only if you tap Allow when iOS asks; say no and it never happens.
1. What we collect and why
| Data | How we get it | What it's used for |
|---|---|---|
| Apple account identifier | Sign in with Apple gives us a random, app-specific user ID. We do not request your name or email address. | Creating your account, your referral code, and your film balance. It is also the ID attached to your analytics events (below). It is not linked to your identity elsewhere. |
| Photos you add to Wallet or give away | Sent from the app only when you tap Wallet or Give away. The camera preview and shots you don't keep never leave your phone. | Building the signed Wallet pass and refreshing it later (for example, marking it as given away). Stored so Wallet can re-download the pass. |
| Precise location of a photo (optional) | Only if you turn on the Location option before shooting. Read from your phone's location service at capture time. | Written into that pass so Wallet can surface it when you're near where it was taken. Not used for anything else. |
| Date a photo was taken | From the capture time (or a photo's embedded metadata). | Written into the pass so Wallet can surface it on the anniversary, if you enabled the Date option. |
| Wallet device registration | When you add a pass, Apple Wallet registers with our pass web service: an anonymous device library identifier and a push token. | Telling Wallet to refresh a pass when it changes. Removed when the pass is removed from Wallet. |
| Referral activity | Opening an invite link or entering an invite code, and taking your first developed photo. | Counting invites toward the inviter's free film and crediting your welcome shot. Inviters see a count, never who you are. |
| Purchases | Handled entirely by Apple through the App Store. We receive a transaction record on your device; we never see payment details. | Unlocking film you bought and restoring purchases. |
| Usage analytics | The app sends events such as which screen you're on, which camera style you picked, that you took, developed, shared or added a photo to Wallet, saw the paywall, made or restored a purchase, or shared an invite. Each event carries your account ID, an install ID, device model, OS version, app version and an approximate (city-level) location that PostHog derives from your IP address. Never the photo itself, its precise location, or your invite code. | Understanding what people use, finding bugs, and improving the app. Processed by PostHog on our behalf. |
| Advertising measurement (only if you allow tracking) | The app includes the Meta (Facebook) SDK. After you sign in, iOS asks whether to allow tracking. If you tap Allow, the SDK collects your device's advertising identifier (IDFA) along with app installs, launches, sign-ups, checkouts and purchases (product and amount), and asks Meta once whether this install came from one of our ads; if it did, we record that (and the campaign name) in our analytics. If you tap Ask App Not to Track, no advertising identifier is collected and Meta only receives Apple's privacy-preserving SKAdNetwork attribution. | Knowing which of our ads on Facebook and Instagram led to installs and purchases so we can spend less on ads, and comparing how people who came from an ad use the app. This is the only tracking we do. |
| Server logs | Standard request logs (IP address, timestamp, endpoint) generated by our hosting provider, plus error reports Apple Wallet sends our pass web service. | Keeping the service running and secure. Retained briefly and not combined with your account. |
We do not collect contacts, your photo library, or your name or email. Your advertising identifier is never read unless you allow tracking. The app’s camera and location permissions are used only for the purposes above; you can revoke any of these at any time in iOS Settings.
2. Who else sees your data
We do not sell or rent personal data. The third parties below either process data on our behalf or, in Meta’s case, receive ad-measurement data under their own terms:
- Apple — Sign in with Apple, App Store purchases, and the Apple Wallet and Push Notification services that deliver and refresh your passes. Apple’s handling is governed by Apple’s privacy policy.
- Vercel — hosts pookie.pics and our API and stores account records and pass photos in encrypted storage.
- PostHog — product analytics (the usage events above), processed on our behalf on PostHog Cloud. See posthog.com/privacy.
- Meta Platforms — the Facebook SDK for ad measurement. With your tracking permission it receives your advertising identifier and the app events listed above, which Meta may combine with your Facebook or Instagram account to attribute our ads. Without permission it receives only aggregate, Apple-mediated attribution. See Meta’s privacy policy.
We only disclose data beyond these providers if the law requires it.
3. Sharing passes with other people
When you give a photo away, we void your copy and mint a new pass for the recipient. The recipient gets the photo, its caption, and any location and date you enabled for that pass — so don’t enable Location on a photo you’d rather not place on a map for someone else.
4. How long we keep it
- Account records are kept until you delete your account.
- Pass photos and their location/date are kept while the pass is in use so Wallet can re-download it. Removing a pass from Wallet unregisters your device; the stored copy is deleted on request (see below).
- Wallet registrations are removed as soon as Wallet tells us the pass was deleted.
- Server logs are retained by our hosting provider for a short, rolling period.
- Analytics events stay in our PostHog project until we delete them; deleting your account stops new events being tied to you, and you can email us to have the existing ones erased.
5. Deleting your data and withdrawing consent
- Delete your account in the app: open Invite friends and choose Delete account. This erases your account, referral code, referral links and film balance immediately. Film you bought through the App Store stays tied to your Apple ID and can be restored if you sign in again.
- Delete a photo: remove the pass from Apple Wallet, then email us the pass serial (shown on the back of the pass) or simply ask us to delete every photo connected to you, and we’ll erase our copy.
- Stop sharing location or dates: leave the Location and Date options off for future photos, or revoke the Location permission in iOS Settings.
- Stop ad tracking: turn off Allow Tracking for Pookiein iOS Settings › Privacy & Security › Tracking (or for every app at once). Analytics events are not affected by that switch; email us to opt out of analytics entirely.
- Sign in with Apple: you can stop using your Apple ID with Pookie at any time from Settings › Apple Account › Sign in with Apple.
You can also email hello@pookie.pics to access, correct, export or delete your data. We respond within 30 days. If you live in the EU/EEA, UK, California or another region with data protection rights, these are the mechanisms for exercising them, and you may also complain to your local supervisory authority.
6. Security
All traffic uses HTTPS. Account sessions use signed tokens that expire automatically. Pass photos and account records are stored in private, encrypted storage that only our server can read. Passes are cryptographically signed so they cannot be altered after they leave our server.
7. Children
Pookie is not directed to children under 13 (or the minimum age for an Apple ID in your country) and we do not knowingly collect their data. If you believe a child has created an account, email hello@pookie.pics and we will delete it.
8. Changes
If we change how we handle data we’ll update this page and the date above, and for material changes we’ll tell you in the app before they take effect.
9. Contact
Pookie · hello@pookie.pics
See also our Terms of Use.