Privacy Policy

1. Information We Collect

When you create an account and use PicsOfLife we collect:

• Account data — your email address and password (stored hashed).
• Profile data — display name and avatar you choose to add.
• Memory content — titles, notes, dates, and photos you upload.
• Usage data — page views and feature interactions, collected anonymously to improve the service.

2. How We Use Your Data

• To provide and operate the PicsOfLife service.
• To send transactional emails (account confirmation, password reset).
• To process payments and manage your subscription via our payment provider.
• To improve and debug the application using aggregated, anonymous analytics.

We do not sell your personal data or use it for advertising.

3. Photo Storage

Photos you upload are stored securely via Cloudinary and Supabase Storage. Only you can access your photos. Public share links (if you choose to share a memory) generate a read-only view — no account is required to view them. You can delete your photos at any time from within the app.

4. Third-Party Services

We use the following third-party services:

• Supabase — database, authentication, and file storage.
• Cloudinary — image hosting and optimisation.
• Dodo Payments — subscription billing. We never store card details.
• Vercel — application hosting and edge delivery.

Each service has its own privacy policy. We only share the minimum data necessary for them to function.

5. Data Retention

Your data is retained as long as your account is active. When you delete your account, all your memories, photos, and personal data are permanently deleted within 30 days. Aggregated, anonymous analytics data may be retained indefinitely.

6. Security

All data is transmitted over HTTPS. Your memories are protected by Supabase Row Level Security, meaning database queries are enforced at the database level — only you can read or write your own records.

7. Your Rights

You have the right to:

• Access a copy of all personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your account and all associated data.
• Export your memories (available from account settings).

To exercise these rights, email us at privacy@picsoflife.app.

8. Cookies

We use only essential cookies required for authentication (session tokens). We do not use tracking or advertising cookies.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Reach us at privacy@picsoflife.app.