Your footagestays in your hands.
WonderFilm is a local-first camera. This policy explains what stays on your device, what optional Sign in with Apple provides and how limited advertising measurement works.
Local by default.
- Your footage is not uploaded to us. Video, photos and imported LUTs stay on the destination you choose.
- A WonderFilm account is optional. The camera works without creating a profile.
- Purchases are handled by Apple. We do not receive your card or bank details.
- Advertising measurement is transparent and controllable. Meta App Events measures installs, app opens and purchases; the advertising identifier remains off unless you allow tracking through Apple's prompt.
Who is responsible.
This Privacy Policy applies to the WonderFilm iOS application and the wonderfilm.app website. WonderFilm is provided by Gloadi LLC ("Gloadi", "we", "us" or "our").
The policy describes the production app as it works today. WonderFilm's profile-sync backend is currently offline. If we later enable server-side accounts, cloud sync, additional analytics or another material data use, we will update this policy before that change takes effect and request consent where the law requires it.
Local media and permissions.
WonderFilm processes camera frames, audio and color adjustments on your iPhone to provide its recording features. We do not receive, upload, store or inspect the video and photos you capture.
What stays on your device
- Recorded video and photos.
- Imported LUT files and local look settings.
- Camera preferences, save destinations and other app settings.
- Optional local sign-in state while profile sync is offline.
Device permissions
- Camera and microphone: used to record image and sound.
- Photos: add-only access is used when you select Photos as the save destination. WonderFilm does not request permission to read your photo library.
- Files and external drives: used when you choose a folder or compatible drive for recording or LUT import/export.
- Location: optional. If enabled, WonderFilm can write capture coordinates to clip and photo metadata stored on your device. WonderFilm does not send that location to our servers.
Because we do not keep a cloud copy, we cannot recover a deleted or damaged recording. Back up important work and confirm that the selected destination has enough free space.
Optional Sign in with Apple.
You do not need to create a WonderFilm profile to use the camera. If you voluntarily choose Sign in with Apple, Apple may provide:
- An app-specific Apple user identifier.
- Your name, generally only on the first authorization, if you choose to share it.
- Your email address or an Apple private relay address, depending on your choice.
While profile-sync services are offline, WonderFilm keeps this information and sign-in state locally on your device. It is not sent to a Gloadi profile server.
Signing in does not subscribe you to marketing. We only send promotional email after a separate, clear opt-in. We may reply when you email us directly.
Purchases, measurement and support.
App Store purchases
Apple processes Wonder Pro subscriptions and lifetime purchases. Through StoreKit, the app receives the product and transaction status needed to unlock or restore Pro. We do not receive your card number, bank account or full payment credentials.
App Store purchases are associated with the Apple ID used to pay. They are separate from optional WonderFilm sign-in.
App Store information
Apple provides developers with sales, download and subscription reports in App Store Connect. Apple may also provide crash or performance diagnostics when a user has enabled sharing with developers in their Apple privacy settings.
Meta advertising measurement
WonderFilm includes Meta App Events to understand whether ads for WonderFilm lead to an installation, an app open or a purchase, and to improve those campaigns. The app does not contain Facebook Login and does not display third-party ads.
Depending on your settings and the event, Meta may receive app and device information, a device identifier, product interaction such as an app activation, purchase event information such as product, value and currency, and limited diagnostic or other technical data. Meta does not receive your footage, LUT files, Apple ID password or payment-card details from WonderFilm.
Advertising identifier collection is disabled by default. After onboarding, iOS may ask whether you allow WonderFilm to track activity across other companies' apps and websites. If you allow it, the Meta SDK may access the device advertising identifier for attribution. If you decline, the identifier remains disabled; limited App Events and privacy-preserving aggregate attribution from Apple may still be used to measure campaign performance.
Automatic purchase reporting is enabled so Meta can measure paid conversion. WonderFilm does not send a second manually logged purchase event. Meta processes information under its Privacy Policy and applicable business terms.
Support correspondence
If you email support, privacy or bug-report addresses, we receive the email address you used, the content of your message and any files you chose to attach. We use that information to answer the request and investigate the issue.
Services and sharing.
The current app relies on Apple system services for:
- App Store and StoreKit: distribution, payments, subscriptions, purchase verification and restoration.
- Sign in with Apple: optional authentication.
- iOS permissions and storage: access to camera, microphone, Photos, Files, location and connected storage only after you grant permission or choose a destination.
Apple processes information under its own privacy policies. Meta App Events is the only third-party advertising measurement SDK currently integrated. WonderFilm does not currently use third-party subscription management or a separate third-party crash-reporting SDK.
The website is static and does not currently use an advertising pixel, analytics or marketing cookies. Its hosting provider may process ordinary network data, such as IP addresses and request logs, to deliver and secure the site under that provider's terms. If a website pixel is enabled later, this policy and any required consent controls will be updated first.
We do not sell personal data. We may disclose information only when you direct us to, to service providers acting on our instructions, to protect users or our legal rights, or when required by valid law. We do not share optional Sign in with Apple information for advertising.
Retention and security.
- Local media, LUTs, settings and optional profile state: remain on the device until you remove them or delete the app, subject to iOS storage and backup behavior you control.
- Purchase records: are retained by Apple under Apple's policies. Gloadi may retain legally required business and transaction records made available by Apple.
- Advertising measurement events: are processed and retained by Meta under its policies and the controls available in Meta's services. Gloadi uses campaign reports for advertising measurement and optimization.
- Support correspondence: is kept only as long as reasonably needed to answer, troubleshoot, prevent abuse and meet legal obligations.
We use reasonable administrative and technical safeguards for information we control. No storage or transmission method is guaranteed to be completely secure.
Your choices and rights.
You can control WonderFilm's permissions in iOS Settings, including the Tracking setting, choose a different save destination, revoke Sign in with Apple from your Apple ID settings, remove local files or delete the app. Disabling Tracking prevents future access to the advertising identifier but does not erase aggregate reports already produced.
Depending on where you live, privacy law may give you rights to access, correct, delete, restrict or receive a copy of personal information we hold, and to object or complain to a privacy authority. These rights may be subject to legal exceptions.
Because current profile information is local, deleting the app removes that local WonderFilm state. It does not delete App Store purchase history held by Apple.
To ask what information Gloadi holds about you or to make a privacy request, email privacy@wonderfilm.app. We may need to verify the request before acting on it.
Children and policy updates.
WonderFilm is not directed to children under 13, and we do not knowingly send personal information about children under 13 to Meta or collect it for advertising. A parent or guardian who believes a child has sent us personal information can contact us to request its deletion.
We may update this policy when WonderFilm or the law changes. We will post the updated date here and provide additional notice when a change is material or consent is required. The current version applies from its stated effective date.
Contact Gloadi LLC.
Questions about this policy or WonderFilm's current data practices are welcome.