Privacy Policy

picpocket("we", "us", or "our") provides a browser-based event photo sharing service. This Privacy Policy explains how we handle personal information when you use our website and services.

Contact: privacy@picpocket.app

Account information. If you sign in, we collect your email address and, when provided by your sign-in provider, your name and profile image (for example, via Google sign-in or email magic link).

Event participation. When you join an event, we may collect a display name you provide, photos you capture or upload, and technical metadata associated with uploads (such as timestamps and processing status).

Camera and device access. With your permission, we access your device camera only while you use capture features. Photos are uploaded to our service; we do not continuously record or monitor your camera outside those actions you initiate.

Live video. When an organizer starts a live stream, video is delivered in real time through Amazon Interactive Video Service (IVS). Viewers can watch without signing in.

Facial feature data. To help you find photos you appear in, we use automated image analysis (including AWS Rekognition) to detect and index facial features in uploaded event photos. In some jurisdictions this may be considered biometric or sensitive personal data. We use this data only to provide photo discovery and event gallery features described at the time of consent.

Cookies and similar technologies. We use essential cookies to maintain guest sessions, authentication, and optional face-match preferences within an event. See Section 6 for details.

Usage and technical data. Our hosting and infrastructure providers may process IP addresses, browser type, and request logs for security, performance, and reliability.

Payment information. If you buy a paid plan, our payment processor (Stripe) collects your payment details directly; we receive limited information (such as your Stripe customer ID, payment status, and purchase history) and do not store your card number.

We use personal information to:

• authenticate you and maintain your account;
• enable photo capture, upload, storage, and sharing within events;
• let organizers manage events and control which photos are shared publicly;
• help guests find photos they took or appear in;
• prevent abuse, enforce our Terms, and protect the service;
• comply with legal obligations.

We do not sell your personal information. We do not use your photos for third-party advertising.

Event organizers control whether photos are shared with all event guests. Photos you upload may be visible to the organizer and, when published, to other event participants. If you choose a one-time contribution without signing in, your photos are tied to a temporary browser session and are not linked to a lasting account unless you later sign in through the registered participation flow.

We share data with service providers that help us operate picpocket, including cloud hosting (for example Vercel), database hosting (for example Neon), object storage, image analysis, and live video (Amazon Web Services, including S3, Rekognition, and IVS Real-Time), authentication and email delivery providers (for example Google and Resend), background job processing (Inngest), and payment processing (Stripe). These providers process data on our behalf under contractual safeguards.

We retain account information while your account is active. Event photos and related face index data are retained until the event organizer deletes the event or individual photos, or until we delete data in accordance with our Terms and applicable law. Temporary guest session data may expire when you close your browser or after a limited period, depending on how you participate.

Photo retention also depends on the event's plan: Essentials events keep photos for 30 days, Plus events for 90 days, and Pro events for 1 year. We may email the organizer before photos are automatically removed at the end of this window.

You may request deletion of your account by contacting us. Organizers may delete events and photos from their dashboard, which removes associated guest and image data from our systems subject to backup retention cycles.

We use strictly necessary cookies for:

• sign-in sessions (authentication);
• guest participation sessions at an event;
• remembering face-match results you request within an event.

We do not use non-essential advertising cookies. You can control cookies through your browser settings, but disabling essential cookies may prevent the service from working.

Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal information, or to object to certain processing. To exercise these rights, contact us at privacy@picpocket.app. We may need to verify your identity before responding.

You can decline camera access in your browser, but you will not be able to capture photos through the service. You can choose not to sign in and instead contribute photos as a one-time guest, with the limitations described in the product.

picpocket is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

We and our service providers may process information in countries other than where you live. Where required, we rely on appropriate safeguards for cross-border transfers.

We use reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Material changes may require renewed consent where legally required.