The short version
Your photos belong to you and stay inside your Circle. We don't sell data, we don't show ads, and we can't look at your photos except when you report one to us.
What we collect
- Account: your email address and the name you choose.
- Your Circle's content: photos, comments and reactions you add — stored so your Circle can see them, and for nothing else.
- Device tokens: so cues can reach your phone. No location tracking; a cue fires wherever you happen to be because it fires on every phone at once, not because we know where you are.
What we never do
- Sell or share your data with advertisers.
- Make anything public. There is no public anything.
- Use your photos for anything beyond showing them to your Circle.
Who can see what
Only members of a Circle see that Circle's photos and Stories. Hosts choose who's in. If someone is removed, they keep nothing they didn't take themselves.
Deletion
Delete your account in the app (Profile → Delete my account) and your photos, comments, reactions and hosted circles are deleted from our servers — deleted, not archived. Reports you filed are kept so moderation decisions still make sense.
Where your data lives
On Cloudflare's network, encrypted in transit and at rest. Payment is handled by Apple; we never see card numbers.
Contact
[email protected] — data questions answered by a person.