Cambler · Privacy
Privacy Policy
August 29, 2026
Cambler is an iPhone camera made by Trappist. This policy explains what data Cambler processes, why it is processed, and the choices available to you.
Camera media stays on your device
Camera and microphone input is processed on your iPhone to provide the finder and create photos and videos. Looks, lenses, LUTs, and Y2K effects are applied on-device. Cambler does not upload your captures or imported LUT files to our servers. A capture is added to your Photos library only after you grant Photos permission. Deleting Cambler does not delete media already stored in Photos.
Data we process
- On-device settings: camera preferences, presets, feature state, and imported LUT references stay on your iPhone so the app remembers your setup.
- Anonymous identifier (User ID): Cambler has no sign-in and no account. If you turn on notifications, Firebase Authentication creates an anonymous identifier so the notification token has an owner. It carries no name, email address, or provider profile, and it is created only when you opt in.
- Device ID: if you enable notifications, we store a Firebase Cloud Messaging token against that anonymous identifier so we can deliver messages. Cambler does not create this token until you opt in. Turning notifications off deletes the token, the stored server record, and the anonymous identifier.
- Crash diagnostics: Firebase Crashlytics processes crash traces, installation identifiers, app and OS versions, device model, and related technical diagnostics so we can find and fix failures. We do not attach photos, videos, or audio to crash reports.
- Paid download: Apple handles payment for the paid App Store download. Cambler has no in-app purchases or subscriptions and does not read transaction or entitlement status.
Why we process data (legal bases)
- Contract / requested feature: operate the camera and deliver notifications you turned on.
- Legitimate interests: process crash diagnostics so the app stays reliable. We do not use this for advertising.
- Consent: notification delivery. You can withdraw it in Cambler Settings or iOS Settings.
We do not sell personal data, do not share it for cross-context advertising, and do not use your captures for advertising or AI training.
Service providers and international processing
Apple provides App Store distribution and device permissions. Google provides Firebase anonymous authentication, Cloud Messaging, Cloud Firestore, and Crashlytics. These providers may process data in countries outside your own, including the United States, under their terms and safeguards. Firebase describes its processing in its privacy documentation.
Retention and deletion
Notification records are kept while notifications stay on. Firebase Crashlytics applies its documented retention period. In Cambler, open Settings → Notification settings → Turn off notifications to delete the messaging token, the server-side record, and the anonymous identifier.
Your rights
Depending on where you live (including the EU/EEA/UK, California, Korea, Japan, and other regions with similar laws), you may request access, correction, deletion, restriction, portability, or an objection to processing. Email hello@trappist.app. We do not operate a “Do Not Sell or Share” toggle because we do not sell or share personal information for advertising. You can also deny Camera, Microphone, Photos, and Notifications in iOS Settings; related features will stop working.
Children
Cambler is not directed to children under 13, or under 14 where that is the local age of digital consent (including Korea). We do not knowingly collect personal data from children below those ages.
Changes and contact
We may update this policy as the product or law changes. The effective date above changes when we publish a material update. Questions: hello@trappist.app. Trappist is based in the Republic of Korea.