Privacy Policy

Data we collect

Account & identity: a guest joins with just a display name and an anonymous account; hosts sign in with an email address. We store your display name, whether you choose to show your name on your photos, and your acceptance of these terms.

Photos & event content: the originals and rendered versions you capture, a small blurred placeholder used before the reveal, and event details (title, dates, reveal time, settings). Photos may include a city or place name if you allow location — never your precise GPS coordinates.

Purchases: a record that an event's capacity or add-ons were bought. Payments are handled by the App Store or our payment provider — we don't receive your full card details.

Website & waitlist: if you join the waitlist, we store your email plus basic acquisition info (your language and the referring page).

Technical data: limited information needed to operate, secure, and debug the service, such as connection data and error logs.

Cookies & local storage

We use only essential and functional storage — no advertising, no analytics, and nothing that tracks you across other sites.

Strictly necessary: when you sign in as a host or join as a guest, an authentication cookie keeps you signed in for that session — the service can't run without it.

Functional (your choices): small cookies and local-storage entries remember preferences you set, such as your language, light or dark theme, and whether you've hidden the 'try it' card. They're saved only when you make those choices, and you can clear them anytime from your browser settings.

How we use it

To run your event: store and deliver photos, enforce the reveal time, count shots, show the album to members, and let guests join. Photos stay sealed — unreadable to everyone, including the author — until the host's reveal time.

To communicate: send essential service messages and, if you joined the waitlist or opted in, launch and update emails.

To keep the service safe: handle reports and remove content or participants that break the rules, and detect abuse.

We do not sell your personal data, and we don't use your photos for advertising or to train AI.

How we share it

With event members, according to the host's visibility setting (everyone, or host-only).

With service providers acting on our behalf: Supabase (database, file storage, and authentication), Vercel (website hosting), Resend (waitlist and transactional email), and Apple or our payment provider for purchases. They may use the data only to provide their service to us.

For legal reasons: when required by law, or to protect people's rights, safety, and the service itself.

Reveal, visibility & branded events

Before the reveal, photos are sealed: members see only blurred placeholders, and even the photo's author can't view the finished shot until the reveal.

The host chooses who can see the album. At a branded or corporate event you're told at join time that the event's photos become the host's assets — you can still download your own photos.

Data retention

Event albums are kept until the host deletes them or an optional auto-expiry date is reached, after which photos and related data are purged from storage.

If you delete your account, we erase your identity and remove you from events you joined as a guest; events you host enter a short grace period before deletion. Backups are cleared on a rolling basis.

Waitlist emails are kept until you ask us to remove them or the waitlist is retired.

Security

Data is encrypted in transit and at rest, access is role-restricted (our database enforces per-event access rules), and photos stay sealed until the reveal. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authorities of a breach where required.

Your choices & rights

From Settings you can edit your display name, choose whether your name appears on your photos, request a copy of your data, and delete your account. You can leave events you joined.

Depending on where you live (for example the EU/UK, California, or Mexico), you may have additional rights to access, correct, delete, port, or object to the processing of your data. Contact us to exercise them — we won't discriminate against you for doing so.

Children

Konfetti Camera isn't directed to children under 13 (or the minimum age in your country), and we don't knowingly collect their data. If you believe a child has provided us information, contact us and we'll delete it.

International transfers

We work with providers that may process your data in other countries, including the United States and the European Union. Where required, we rely on appropriate safeguards for these transfers.

Changes & contact

We may update this policy; we'll post the new version here with a new date and, for material changes, give notice. Questions or requests? Contact us at hello@konfetticamera.app.