Privacy Policy

Face data (“photos of you”)

This feature is optional and off until you explicitly turn it on through a separate consent screen (current version 2026-06-28.v1). You can use every album fully without it.

What we collect

One selfie you take, and a mathematical face-geometry template (a “faceprint”) computed from it. The faceprint is a string of numbers — not a picture.

Why

Only to find the photos you’re in across the events you’ve joined, and show them under “photos of you”. Nothing else. We never sell it, share it, or use it to identify you anywhere outside your own albums.

Where it lives

On our own servers. Your selfie and faceprint never leave our infrastructure and are never sent to any third-party face-recognition service.

How long we keep it

Up to 12 months from when you enroll, then it’s destroyed automatically. You can delete it yourself at any time, sooner.

How it’s destroyed

Deleting your faceprint permanently erases the template, the stored selfie, and every match it produced — not just hidden, actually purged — and the deletion is logged.

Your choice

Opt in here, opt out whenever. Turning it off never affects your access to any album.

Retention & destruction. A faceprint is kept up to 12 months from enrollment and then destroyed automatically; you can delete it sooner at any time. Deletion permanently erases the template, the stored selfie, and every match it produced, and the deletion is logged. Your selfie and faceprint never leave our infrastructure and are never sent to any third-party face-recognition service.