Privacy Policy

1. The short version

• Guests can take photos without an account. We don't ask a guest for a name or an email.
• A camera's album is shared by default:anyone with the camera's link or QR code can see every photo in it, without signing in. The camera's owner can turn sharing off, and Event cameras can add a password.
• We remove location and other hidden data (EXIF) from every photo when it's saved.
• We don't sell personal information, show ads, or track you across other websites or apps.
• You can delete your photos and your account at any time.

2. What we collect

Photos. The photos you take with a Dispo88 camera, or pick from your photo library when the camera's owner allows it, with the time they were taken. Location and other EXIF data are removed when a photo is saved; before that, we read only its capture date, to tell a library photo from a new one.

If you sign in (to make cameras, or to keep the photos you took):

• your email address, the name you choose, and a profile photo if you add one or sign in with Google (Google gives us your name and photo);
• with Sign in with Apple, the name and email Apple shares; if you choose “Hide My Email”, we get a private relay address;
• your language, and the cameras you've made and joined.

If you take photos without signing in: a random guest ID, kept in a cookie on your browser (see section 7). If you ask us to “Email me when they're ready”, the email address you give for that camera.

Camera details: its name, settings, the time zone of the phones taking photos (so the “photos are ready” email arrives at a sensible hour), how many photos each person took (as a count, not shown to anyone), and any photos reported, hidden or blocked.

Payments: camera upgrades are paid on our website through Stripe. Stripe handles your card; we receive the amount, the date, the camera and your email, never your card number.

Messages: what you send through the contact page or by email.

iOS app notifications: if you allow them, your device's push token, linked to your account.

Technical data: your IP address (to limit uploads and sign-in attempts, and to block abuse), basic device and browser information, error reports, and visit statistics that don't use cookies or identify you (Cloudflare Web Analytics), plus a count of visits to the upgrade page.

3. Why we use it

• To run Dispo88: signing you in, storing photos and showing them in albums, developing them, making reels and exports, and processing upgrades.
• To send the emails and notifications you'd expect (section 6).
• To keep it safe and fair: upload and sign-in limits, reporting and blocking, and stopping abuse.
• To fix and improve it: error reports and overall usage numbers.
• To meet legal obligations, such as keeping payment records.

We make no automated decisions about you that have legal or similar effects.

4. Who can see your photos and information

• The camera's owner sees every photo on their camera, with the name of whoever took it if they were signed in. The owner can hide, delete or download any photo, and block a guest.
• Album sharing on (the default): anyone with the camera's link sees every developed photo, can save photos and can share them further. Whether to share the link, and with whom, is the owner's choice.
• Album sharing off: guests see only their own photos.
• Each photo has its own web address. Anyone who has that address can open the photo until it's deleted.
• Your name (and profile photo) shows next to photos you take while signed in, to the people who can see them.
• We don't share personal information with anyone else, except the service providers in section 5, when the law requires it, or to protect someone's safety.

5. Service providers, and where data is stored

These companies run parts of Dispo88 for us, and may use the data only to do that:

• Google Cloud / Firebase (United States): accounts, database and photo storage
• Google and Apple: sign-in, if you choose them; Apple also delivers iOS notifications
• Netlify (United States): website hosting
• Cloudflare (worldwide network): delivery, security and visit statistics
• Stripe (United States and Canada): payments
• Mailjet (European Union): emails
• Sentry (United States): error reports

So your information is stored and processed outside Quebec and Canada, mostly in the United States, where the law may give authorities access on different terms. Before sending it there, we assessed these providers' privacy and security, and we use their contractual commitments to protect it.

6. Emails and notifications

• Account emails: sign-in codes, a welcome email, confirmation of an upgrade, and notice when someone reports a photo on your camera.
• “Your photos are ready”: after an event, to the camera's owner and to signed-in guests, at most once a day per camera. It may mention a plan or feature that fits the camera, such as upgrading or turning on album sharing.
• Guests without an account get one only if they asked, about the photos they took, with a link that signs them in.

Every email except sign-in codes has an unsubscribe link that works without signing in. We don't send newsletters or advertising emails; if we ever do, we'll ask first. iOS notifications can be turned off in your phone's Settings.

7. Cookies and storage on your device

• Sign-in: a secure cookie that keeps you signed in for up to 14 days, or until you log out.
• Guest ID: a random ID in a cookie, kept for a year from your last visit. It recognises the photos you took without an account, so you can delete them, get them emailed, and keep them when you sign in; it also applies upload limits and blocks fairly. It isn't linked to your name unless you sign in or give your email.
• Unlocked cameras: a cookie that remembers you entered a camera's password.
• On your device only: your language, cameras you've opened, the IDs of your photos, and photos waiting to upload when the signal drops (deleted from the device once sent).

All of these are needed for the features they serve. We don't use advertising or tracking cookies.

8. The iOS app and App Clip

• Camera: used only while you take photos for a Dispo88 camera.
• Photo library: only the photos you pick are read, and only when the camera allows library uploads. Photos are saved to your library only when you choose to.
• Lock Screen card: shows the camera's name and your photo count; it's made and kept on your phone.
• The app doesn't track you and has no advertising.

9. How long we keep it

• Photos: until they're deleted, by the person who took them, the camera's owner, or when the camera or the owner's account is deleted. Photos on the demo camera are deleted after 12 hours.
• Your account: until you delete it.
• “Email me when they're ready” addresses: until the camera is deleted, or you ask us.
• Sign-in codes and links: they work for 10 minutes (links in “photos are ready” emails, 30 days) and are deleted once used or expired.
• IP addresses used for limits: a few minutes to a day.
• Error reports: up to 90 days.
• Payment records: 6 years, as tax law requires.

10. Deleting your photos and your account

• You can delete any photo you took from the album or from My photos; signed out, from the same browser you took it with.
• Deleting your account (on the Accountpage) permanently deletes your profile, your cameras with every photo on them, and everything linked to your account. Photos you took on other people's cameras stay in their albums, without your name; delete them first in My photos if you want them gone. Payment records are kept as section 9 says.
• Deleted photos can't be recovered.

11. Your rights

Wherever you live, you can ask us to:

• tell you what personal information we hold about you, and give you a copy, in a common format if you ask;
• correct it;
• delete it, or stop sharing it (for example, a photo of you on someone's camera);
• withdraw a consent you gave, such as reminder emails or notifications.

Write to [email protected]. We answer within 30 days, free of charge, and may ask you to confirm who you are. If you're not satisfied, you can complain to the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, or your local authority.

In the European Union and the UK, we rely on our contract with you (accounts, photos, purchases), our legitimate interests (security, limits, error reports and overall statistics), your consent (reminder emails and notifications) and legal obligations (payment records). You can also object to uses based on legitimate interests, and complain to your data protection authority.

12. Children

You must be 14 or older to make an account. Children under 14 may take photos as guests only with a parent's or guardian's permission. If you believe we hold information about a child without that permission, write to[email protected]and we'll delete it. Hosts and guests are responsible for having permission to photograph the people in their photos, especially children (see the Terms of Use).

13. Security and incidents

We protect your information with encryption in transit, access limited to what's needed, and reputable providers. No system is perfectly secure. If a privacy incident creates a risk of serious harm, we'll tell you and the authorities as the law requires, and we keep a record of every incident.

14. Changes

If Dispo88 is sold or transferred, personal information may move to the new owner, who must follow this policy, and we'll tell you first. If we change this policy, we'll update the date above and, for significant changes, tell you by email or on the site before they apply. We won't use your information for a new purpose without asking you.

15. Contact

Kevin Nam, person in charge of protecting personal information: [email protected].