Privacy Policy - Photoboo
PHOTOBOO

Privacy Policy

Last Updated: July 3, 2026

1. Data we collect

Operator account email address — when a booth operator creates a gallery account. Used to sign in, verify the account (a one-time code is emailed), and recover the password.

Account identifier — an ID we assign to each operator account to keep each studio's galleries separate.

Event photos — photos captured during an event are uploaded to our secure backend so event guests can view and download them from a private, per-event gallery link (QR code).

We do not collect operator or guest names, phone numbers, contacts, precise location, or payment details. In-app purchases are handled by Apple; we never receive your payment information.

2. How we use data

All data is used only to provide the app's functionality: authenticating the operator, running the online gallery, and protecting the service against abuse. We do not use your data for advertising, we do not track you across other apps or websites, and we do not sell or share your data with data brokers.

3. Storage, security and retention

  • Photos and account data are stored on Cloudflare infrastructure and transmitted over encrypted HTTPS connections.
  • Passwords are never stored in readable form — only a salted PBKDF2 hash.
  • For abuse prevention, sign-in attempts are rate-limited using a hashed network address that cannot be traced back to a person and is deleted within minutes.
  • Event galleries are automatically deleted after 30 days.

4. Guest access

Guests access an event's gallery only through the unique QR code / link shared at the event. No account or personal information is required from guests to view or download photos.

5. Your rights

Delete your account and all photos at any time, directly in the app: Setup → Output (Step 4) → Gallery account → "Delete account". This permanently removes your account and every gallery/photo tied to it.

Operators can also delete individual galleries or photos from the studio management panel.

To request access to or deletion of your data, contact us at the address below.

6. Children

The app is intended for professional booth operators (adults). Photos taken at events may include people of any age; those photos are controlled by the operator who runs the event and are deleted with the gallery.

7. Contact

Privacy requests: julioisraelcardoso@hotmail.com