The app does not send your photos anywhere, does not know who you are, and cannot see what you list. What follows says that at length, because a one-line privacy policy is easy to write and hard to trust.
The short version
Everything you put into Fripe stays on your iPhone. Photos come from the camera or the system picker, are processed on the device, and written back only where you tell them to go. Titles and descriptions are assembled on the device from templates bundled in the app, and land on your clipboard. Nothing is uploaded, backed up to us, or shared with a third party, because there is nowhere for it to be uploaded to.
The single exception is buying credits, which goes through Apple's own purchase system. We never see the payment, the card, or the Apple Account behind it.
What we collect
The app collects nothing. Fripe has no user database, no logging service, no crash reporter, and no advertising or attribution frameworks bundled into it. There is no email address to give us, no sign-in step, and no profile. If you delete the app, the only trace left is your purchase history inside Apple's records and any listing drafts you saved elsewhere yourself. This website is a different matter — see below.
Email you send us we hold, and delete on request.
Your photos
When you shoot a garment, the image is held in the app's own storage on the device while you work on the listing. The one thing done to it is separating the garment from its background, which happens on the phone through Vision, a framework built into iOS. We ship no model of our own, train nothing, and send nothing away to be looked at. No image, thumbnail, crop, or derived measurement leaves the device at any point, including while the app is in the background.
Photos come from the camera (camera permission) or from the system picker, which runs outside the app and hands over only the image you chose. Fripe never has photo-library read permission. The only Photos permission is add-only, to save finished listing images.
A discarded photo is deleted from the app container immediately. An in-progress or saved draft keeps its originals and renders until you delete that draft or delete the app. Finished images you Save stay in your camera roll and follow your iCloud Photos settings.
One qualification, because "never leaves the device" should mean what it says. Fripe sends nothing anywhere. Its container does sit inside your own device backup, so if you have iCloud Backup switched on, unfinished drafts are backed up along with every other app's data — encrypted to your Apple Account, restored only onto your own phone, and not visible to us. Switching iCloud Backup off for Fripe in Settings stops even that.
Network requests
Fripe makes no network requests of its own. It does not check for configuration, fetch remote content, ping an endpoint at launch, or phone home to count installs. The only network traffic the app can cause is Apple's purchase sheet when you buy credits. That is handled by iOS, and it does not pass through anything we run.
You can verify this. Put the phone in airplane mode and the app works end to end — shoot, compose, copy — up to the point where you would buy more credits.
Purchases and credits
Credit packs are consumable in-app purchases sold by Apple. When you buy one, Apple processes the payment and tells the app the purchase succeeded; we receive no card details, no name, and no billing address. Purchase records sit with Apple. Apple's own privacy policy covers what happens on their side of that transaction.
Your remaining balance is a file on the device. Delete the app and it goes with it, same as the drafts — the only trace left is Apple's purchase history. Restore on the credits screen only finishes StoreKit transactions that never completed; it does not recover a balance. A new phone or a reinstall starts at three free listings, unless you restore a device backup that still has the file. We cannot read it, cannot see how many credits you have left, and cannot adjust it.
Analytics, tracking, advertising
In the app, there are none. No session counting, no funnel events, no heatmaps, no A/B testing, no device identifiers, no fingerprinting, no crash reporter, no third-party SDKs of any kind. Fripe does not ask for tracking permission because it has nothing to track with. We find out whether the app is any good the slow way, from what people write to us.
This website
fripe.aline.sh is hosted on Vercel and uses Vercel Web Analytics. That records page views and click events on the App Store download controls — the app icon and the download pills — so we can see whether the site is sending anyone to the listing. It does not set advertising cookies, does not fingerprint you across sites, and is not connected to anything in the app. The app still has no analytics SDK and no crash reporter.
If you email us
Support runs on ordinary email, so when you write to us we have your address and whatever you chose to tell us, held in our mailbox for as long as the thread is useful and deleted when it isn't. Please don't send photos of your garments unless a question genuinely needs one. Nothing you send by email is connected to your app usage, because there is nothing on our side to connect it to.
Children
Fripe is a tool for selling second-hand clothes and is not directed at children. The App Store age rating is 12+, which is the rating that matches that — not 4+, which would read as if the app were for children. Purchases are controlled by Apple's parental settings on the device.
Changes to this page
If the app ever starts doing something this page does not describe, this page changes first and the date at the top changes with it. A change that affected what leaves your phone would be announced in the app before it shipped, not buried here.
Contact
Fripe is made by alineshell LLC. Questions about this page go to fripe@aline.sh, and are answered by a person.