PRIVACY

Privacy and terms

Durpin is a disposable camera for a small group of friends. It runs on a server one of us keeps at home, not on a company's cloud.

Last updated October 23, 2026

What Durpin keeps

Your account. The Apple or Google account you sign in with, your name, username, bio and photo. Signing in with Apple or Google shares your name, email and profile photo with Durpin, nothing more.
Your shots. Photos and clips you take in Durpin or pick from your photos to post, their notes, and when they were taken. Durpin reads only the photos you pick, never the rest of your library, and leaves their location and other details behind.
Your friends. Who you are friends with, requests, vibes, comments and the photos and GIFs you attach to them, instants, shared rolls, and people you block or mute. A photo or GIF you attach from your phone is kept on the same home server as your shots, with its location and other details left behind.
Your settings. Your time zone, so the daily roll and monthly recaps follow your day. Which notifications you want and your quiet hours. If you turn notifications on, a token that lets the server reach your phone.
Crash reports. If the app crashes or something fails, a report of what broke goes to the same home server. It has no name, email, IP address or photo in it.
Your contacts, only if you ask. When you tap Find friends in your contacts, Durpin reads the email addresses and phone numbers in your contacts and sends a one-way scrambled copy (a hash) of each, never names, to check which belong to people on Durpin. The server keeps none of them, only a count of how many you checked that day. Inviting a contact opens your own Messages or Mail with the invite written in; Durpin never sends it for you.
Being found. People who have the email you signed in with in their contacts can find you, and so can people who have your phone number, if you add it in Settings, Privacy, Your number. The server keeps only a scrambled copy (a keyed hash) of each to match against, and the last two digits of your number so Settings can show which one you added. Neither is kept in a readable form. Remove your number there any time; it's also deleted with your account. Turn being found off in Settings, Privacy, Friends can find me from their contacts.
Reports. If you report something, the report goes to the person who runs the server, with a copy of what it's about as it was then (a comment's words, or a shot and its files). The copy is deleted when the report is closed, or when the account it came from is deleted.
Problem reports. If you send one from Settings, Report a problem, your message goes to the person who runs the server, with the app version, your phone's model, its system version and which of its cameras was in use (for example the back ultra-wide).

Who sees what

A shot on your own roll comes back face down. Until you share it, nobody but you can open it, and the server enforces that.
A shot on a shared roll is seen by everyone on that roll as soon as it's in, and by nobody else.
Shots you share are seen by your friends only. Private shots are seen by you only. A ready shot you don't decide on within 7 days is kept private.
An instant is seen once by the friend you sent it to, then its file is deleted.
Notifications pass through Expo, Apple and Google on the way to your phone. They carry a friend's name, a count and a link into the app, never a photo, note or comment.
Cloudflare carries the connection between the app and the server.
Photos and GIFs you attach to comments from your phone stay on Durpin's server. Durpin has no GIF search, so no GIF service sees what you look for or post.
Durpin itself has no ads, no analytics and no trackers, and sells nothing. Besides the services above that carry notifications and the connection, nothing reaches anyone outside Durpin's server.

Your copy, and deleting things

Settings, Download everything makes a zip of every shot you have, any time.
A shot you delete stays in Recently deleted for 30 days, then it and its files are removed.
Deleting a comment deletes the photo or GIF on it.
Settings, Delete account removes every photo, friend and comment within 30 days. Signing in before then cancels it.
If you sign in with Apple, deleting your account also removes Durpin from your Apple ID. Durpin keeps nothing from Apple to do it.
The server keeps nightly backups for up to 8 weeks, so something you delete is gone from the backups within 8 weeks too.
Questions or a request to delete: ask the friend who invited you, or the person who runs the server.

Terms

Durpin is for people you know. Be decent: no harassment, no nudity of anyone without their consent, nothing illegal.
Anyone can block, mute or report. Accounts that break these rules can be removed.
Durpin is a personal project offered as is, without a guarantee that it will always be available or that nothing will ever be lost. Save the shots you care about.