Privacy

What we collect

• Photos and short motion clips you take at an event, plus the small details attached to each one: the frame number, the time it was taken, and which event it belongs to.
• The display name you sign when you join a roll. It is shown on the border of your photos.
• An anonymous device session. Guests never make an account to shoot. Under the hood, your device gets an anonymous identifier so your shots stay yours for the night. It is not tied to your real identity.
• A host account email, if you are a host. Hosts sign in with Apple or Google, and we receive the email address tied to that sign-in.
• An optional email, if you ask us to send you the developed album. You choose to give it; we do not require it to shoot.
• A push token, if you allow notifications, so we can send roll notifications.
• A purchase record, if you are a host who unlocks a larger event. Apple processes the payment; we store only the transaction id, the product you bought, and the guest count it unlocks. We never see your card.

That is the whole list. We do not collect your contacts, your location, your browsing, or anything for advertising.

Why we collect it

Every piece of data above exists to make one thing work: a shared wall of photos for an event, and the album afterwards.

• Photos, clips, and names build the shared wall that everyone at the event sees.
• An optional email lets us deliver the finished album when it is ready.
• A push token lets us send roll notifications: messages written by the host, a last-hour warning, and an album-ready update.

Where it lives

Your photos, clips, and account data are stored with Supabase, our hosting provider, on servers in the European Union (Frankfurt, Germany). A few narrowly-scoped providers help deliver specific features, and nothing else:

• Resend sends the album email, if you gave us an address. It processes only the recipient address and the album link on our behalf.
• Apple Push Notification service delivers the notifications you opt into.
• Apple processes any in-app purchase and charges you; we receive only the transaction id, never your payment details.

We do not sell, rent, or hand your data to anyone else, and we use no advertising or analytics providers.

Who can see your photos

Photos and clips are visible to the members of that event — the people who joined the same roll — and to the host, who receives the developed album. That is the point of a shared wall.

An event’s code and QR are a shared invitation, not a secret password. Anyone who has the code — from the table card, the QR, or a link someone forwards — can join that roll, and on an instant-reveal event can see the photos as they land. That is how a guest joins with no account and no wait. So share the code with the people you want in the room, and treat it like the invitation it is.

The host stays in control of the room: a host can remove a guest or take down any photo from their own event at any time. And for a sensitive event, pick the darkroom (reveal at the end) when you set it up — nothing shows to anyone until after the party, so a code that gets around early can never surface a photo mid-roll.

Beyond that: we never sell your data. We show no ads. And today there is no third-party tracking and no analytics — we do not follow you around the internet or measure you for advertisers.

How long we keep it

For v1, an event and its photos and clips are kept until they are deleted — there is no automatic expiry date. They stay available as the album for the host and the guests who asked for it, and they go when the host deletes the event or their account. We will revisit this as the product grows, and we will update this page before any change.

Hosts can delete their account — and every party, photo, and album it holds — directly in the app: the account sheet on the shelf, then “delete account”. It takes effect immediately.

You can also ask us directly. Email support@tada.camera to have your photos, an event, or your whole account deleted, and we will take care of it.

Reports and moderation

Any photo can be reported from the "…" menu on it. We review reports, and hosts can remove content from their own event. See our support page for how reporting works and our response time.

Children

Tada is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has used Tada, contact us and we will remove the data.

Your rights

You can ask us for a copy of the data we hold about you, or ask us to delete it. Email us and we will take care of it.