LastFrame Privacy Policy

The short version

LastFrame has no accounts. Every photo you upload is deleted automatically when its timer runs out, or sooner if you delete it yourself.

We don’t sell your data, show ads, or track you across other apps and websites.

Who we are

LastFrame is made and operated by ES KEY TECH LTD („Ес Кей Тех“ ЕООД), EIK 208916463, 35 Stoyan Mihaylovski St., 4000 Plovdiv, Bulgaria. We are the controller of the data described on this page.

What we store

Your photos. The photo you take and a smaller preview of it are stored on Amazon Web Services until the timer you chose runs out. Before uploading, the app re-encodes the photo on your phone, which removes camera metadata such as location.

A device ID. When you first open LastFrame it creates a random ID on your phone. It links your photos to your device and isn’t tied to your name, email or phone number.

A notification token. If you turn on expiry alerts, we store the token your phone gives us so we can send reminders and tell you when a photo is deleted.

What we don’t collect

No name, email, phone number, contacts or location. LastFrame never reads your photo library: gallery backup only saves copies of your captures to your phone, and those copies never leave it.

Why we process it

We store photos, the device ID and the notification token to provide the app you asked for (GDPR Art. 6(1)(b)). Server logs and error reports are processed to keep the service secure and working (our legitimate interest, Art. 6(1)(f)).

Services we use

Amazon Web Services stores photos. Expo, Apple and Google deliver notifications. Rollbar receives crash and error reports, with device IDs and file paths removed first. Our server host sees your IP address when the app connects, as any website would.

Tips are paid through the App Store or Google Play. Apple or Google processes the payment, and we never see your payment details.

Some of these providers are based in, or process data in, countries outside the European Economic Area, such as the United States. Those transfers rely on the safeguards GDPR requires: the EU–US Data Privacy Framework where the provider is certified, or the European Commission’s Standard Contractual Clauses.

How long we keep it

Photos are kept only until their timer runs out, from 1 hour to 7 days, plus any time you add. Then they are deleted from our storage.

The device ID and notification token are kept while you use the app. Once you have no photos left and haven’t opened LastFrame for 30 days, they are deleted from our server. Server logs and error reports are kept for a limited time for security and debugging.

Your choices

You can delete any photo at any time from its screen. You can turn off alerts in your phone’s Settings.

To delete everything at once, open Settings and tap Delete my data. All your photos and this device’s ID are removed from our servers immediately, and the app starts over with a new ID.

If you uninstall LastFrame instead, any photos still on our servers are deleted when their timers run out, and the device ID and notification token within 30 days after that.

Your rights

You can ask us for access to your data, its correction, erasure or restriction, a portable copy of it, or object to processing based on our legitimate interests. Because LastFrame has no accounts, we can’t look up your data by name or email. Instead, you can erase your data yourself: open Settings in the app and tap Delete my data. Step-by-step instructions are at https://eskey.tech/lastframe/delete-data. For any other request, email [email protected]. You also have the right to complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or to the data protection authority where you live.

Children

LastFrame isn’t directed at children under 13, and we don’t knowingly collect their data.

Changes and contact

If this policy changes, we’ll update this page and the date above. For questions or requests, email [email protected] or use the support contact on LastFrame’s App Store or Google Play page.