Privacy Policy

1. Information We Collect

Account and guest information

When you sign in through Apple or Google, we receive the name, email address, and account identifier supplied by the sign-in provider. Apple may provide a private relay email address instead of your personal email address.

Guests joining through the website or App Clip provide a name without needing to provide an email address. We also use identifiers necessary to associate accounts or guest participation with events and contributed photos.

Event information

We collect information supplied when an event is created or managed, such as its title, dates, settings, and participant limits. We associate guest participation and contributed photos with the relevant event.

Photos

We collect photos you take and contribute through the Service. Users can take new photos within dearday but cannot upload existing photos from their device’s photo library.

Photos may show people, places, and activities, including people who do not use the Service. We receive this information from the person contributing the photo.

We do not retain embedded GPS location, camera details, or original capture-time metadata with uploaded photos. We maintain the information needed to associate a photo with its uploader and event.

Purchase information

Apple processes in-app payments. We receive purchase-related information necessary to verify transactions and provide purchased features, such as transaction identifiers, purchased products, and purchase status.

We do not receive your full payment-card details from Apple.

Support and other communications

When you contact us, we receive your email address, message, and any information or attachments you provide. This includes support requests, privacy requests, reports of inappropriate content, and other inquiries.

Please provide only the information needed to address your request.

2. How We Use Information

We use personal information to:

• Authenticate users and recognize guest participation.
• Create and manage events and shared albums.
• Upload, store, display, and provide access to photos.
• Apply event settings, participant limits, and photo-reveal timing.
• Verify purchases and provide paid features.
• Respond to support and privacy requests.
• Investigate reports and address misuse.
• Protect the Service and enforce our Usage Agreement.
• Comply with applicable legal obligations.

We do not sell personal information or uploaded photos. We do not use uploaded photos for AI-model training, facial recognition, or advertising.

3. Who Can See Your Information

Event hosts and participants

Hosts can view contributed photos as they are uploaded. Before an event ends, guests can view their own photos. After the event ends, guests can view the shared album.

The uploader’s name is displayed with their photos. We do not display account email addresses to hosts or other guests.

Hosts may end events early, which brings forward the shared album’s reveal.

People who receive a forwarded invitation link or code may be able to join the event. Hosts should distribute invitations only to intended participants.

Downloaded and shared copies

Hosts and authorized participants may download or save photos through the available features. Once a photo has been saved or shared outside dearday, we cannot retrieve or delete that copy.

Our Usage Agreement restricts how participants may use photos. Access to an album does not give someone unrestricted permission to use another person’s image.

Service providers

We use Supabase to provide backend services, including authentication, database services, and photo storage.

We also use Apple and Google for supported sign-in functions and Apple for in-app purchases and app distribution. These companies process information under their own applicable privacy policies.

Our email service provider processes communications sent to our support address.

Authorized personnel and service providers may access information as necessary to operate the Service, provide support, address abuse, or comply with legal obligations.

Legal requirements and business transfers

We may disclose information when reasonably necessary to comply with applicable law or valid legal process, protect people’s safety, investigate unlawful conduct, or protect our legal rights.

Information may also be transferred as part of a merger, acquisition, reorganization, or sale of business assets, subject to applicable privacy obligations and any required notice.

4. Photo Retention

We retain event photos for one year after the event ends, unless they are deleted earlier.

If a host ends an event early, the one-year retention period begins on that earlier end date.

Photos may be deleted sooner when:

• A guest deletes their own photo.
• A host removes a photo.
• A host deletes their account, causing their hosted events and albums to be deleted.
• We remove content to address a violation, a safety concern, or a legal requirement.
• We fulfill an applicable privacy or removal request.

When a photo becomes due for deletion or an authorized photo-deletion action is completed, we remove the photo from our live storage and backups within one hour, subject to the limited legal-retention exception below.

Download photos you want to keep before the retention period expires. dearday is not a permanent archive.

5. Account Deletion and Retained Contributions

You may initiate account deletion using the account-deletion controls in the Service.

Events you host

Deleting your account deletes the events you host and their albums, including photos contributed by guests.

Photos contributed to other hosts’ events

Deleting your account does not automatically delete photos you contributed to events hosted by others.

Those photos remain until the applicable event’s photo-retention period expires, unless deleted earlier. We remove your name and profile association from those contributions and display “Deleted user” as the uploader.

Removing attribution does not alter the photo itself. People, places, or other identifying details visible in the photo remain visible.

If you want to remove your contributions, use the photo-deletion controls before deleting your account. If you need assistance afterward, contact [email protected]. We may need information to verify your request and locate the relevant photos.

Deletion timing and exceptions

Account information and hosted event data designated for deletion are removed from our live systems and backups within one hour after you complete the account-deletion process.

This timeframe does not apply to:

• Photos retained in other hosts’ events as described above.
• Purchase records and support communications retained as described below.
• Information we are legally required to preserve.

Uninstalling the app or removing the App Clip does not, by itself, delete information stored by the Service.

6. Purchase Records and Support Communications

Purchase records

We retain purchase records while your account is active and for six months after you delete your account. We use these records to verify purchases, resolve payment questions, and administer purchase-related matters.

After that period, we delete the records unless applicable law requires us to retain specific information longer.

Support communications

Support messages are stored separately in our support email account. We currently have no fixed retention period for these messages. They remain until we delete that email account, unless removed earlier in response to an applicable legal obligation or a valid privacy request.

Deleting your dearday account does not automatically delete your support-email history.

Legally required retention

If applicable law requires us to preserve certain information beyond the periods described in this policy, we retain only the information required for that purpose and restrict its use accordingly.

Deletion from our systems does not control records independently maintained by Apple, Google, or other participants under their own responsibilities.

7. Device Permissions

We request camera permission so you can take photos within the Service.

The Service does not provide a feature for uploading existing photos from your device’s photo library. Saving or sharing photos may involve device permissions or system controls.

You can manage device permissions through your device settings. Revoking permission prevents future access covered by that permission but does not automatically delete photos already contributed.

8. Cookies, Analytics, and Marketing

Our website does not currently use cookies, analytics tools, or advertising pixels, and it does not offer an email marketing signup form.

We do not currently use third-party analytics or advertising SDKs in the app or App Clip. Identifiers used to operate accounts and guest participation are used for providing the Service.

We do not sell personal information or share it for cross-context behavioral advertising.

We do not currently send marketing emails. If we introduce marketing communications, we will provide appropriate notice, obtain consent where required by law, and include an unsubscribe option in each marketing email.

We may respond to support inquiries and communicate with you about privacy or account-related requests.

9. Storage and Security

Our primary application database, photo storage, and backups are located in Oregon, United States.

This describes our application-storage location; it does not mean that every sign-in, payment, email, or service-provider operation takes place in Oregon.

We use reasonable technical and organizational safeguards designed to protect personal information. No method of transmission or storage can guarantee absolute security.

Keep your account credentials and event invitations secure. Report suspected unauthorized access to [email protected].

If a security incident requires notification, we will notify affected individuals and authorities as required by applicable law.

10. Your Choices and Privacy Rights

You can:

• Delete your own photos using the available controls.
• Initiate account deletion through the Service.
• Manage camera and other device permissions through your device settings.
• Contact us to request access to, correction of, or deletion of personal information.
• Report a photo involving you, even if you do not have an account.

Depending on where you live and which laws apply, you may also have rights to obtain a portable copy of information, restrict certain processing, or appeal a decision about a privacy request.

Send requests or appeals to [email protected]. Include enough information for us to locate the relevant account, event, photo, or communication. Do not initially send identity documents or sensitive photos.

We may request reasonable verification before acting on a request. Authorized representatives may submit requests where permitted by law.

We respond within applicable legal deadlines and will explain a denial where required. We will not unlawfully discriminate against you for exercising privacy rights.

Nothing in this policy limits rights that applicable law does not allow us to waive.

11. Children and People Appearing in Photos

The Service is not directed to children under 13, and children under 13 may not use it.

Hosts must be at least 18 years old and have reached the age of majority where they live. Guests who are under the age of majority must have a parent or legal guardian accept the Usage Agreement on their behalf.

If we learn that we have collected personal information from a child under 13 using the Service in violation of applicable law, we will take appropriate steps to delete it.

Event photos may depict children or other people who do not use dearday. Contributors must have any permissions required to share those photos.

People depicted in photos, or parents and guardians acting for children, may contact [email protected] with privacy or removal concerns without creating an account.

12. Changes to This Policy

We may update this Privacy Policy as our practices or the Service change. We will post the revised policy with an updated effective date.

For material changes, we will provide additional notice as required by law and obtain consent where required. Updating this policy does not, by itself, authorize a new use of information that requires consent.

13. Contact Us

For privacy questions, requests, or concerns, contact:

dearday

Orta Interactive Studio LLC

4620 Henry St

Pittsburgh, PA 15213

United States

[email protected]