Privacy Policy

1. Information we collect

The information we collect depends on how you use PhotoTrail.

1.1 Account information

When you create or use a PhotoTrail account, we may collect information such as:

• Name
• Username
• Email address
• Profile photograph
• Authentication identifiers
• Account preferences
• Subscription or account-plan status

If you use a third-party authentication provider, such as Google, we may receive basic account information authorized by you and provided by that service.

1.2 Photos, videos and other user content

PhotoTrail is designed to allow users to create events and share memories with other people. We therefore process content you choose to upload or create through the Services, including:

• Photos
• Videos
• Photo and video thumbnails
• Captions
• Comments
• Event names and descriptions
• Event cover images
• Event dates and related information
• Other content you voluntarily provide

Uploaded media may contain information contained within the files themselves, including metadata. Depending on the file and your device settings, this can potentially include information such as the date or location where media was created.

You are responsible for ensuring that you have the appropriate rights or permissions to upload and share content through PhotoTrail.

1.3 Event and membership information

When you create, join, or interact with an event, we may process information including:

• Events you create or join
• Event membership
• Invitations and invite codes
• Event owners and members
• Public or private event status
• Photos or videos you contribute
• Likes, comments, reports, and other interactions
• Event access and membership activity

1.4 Location information

Certain PhotoTrail features may use location information, such as displaying memories or events on a map. Depending on the feature and permissions you provide, we may process:

• Approximate location information; and
• Precise device location when you explicitly grant location permission.

You can control device location permissions through your device settings. Disabling location access may prevent certain location-based features from functioning correctly.

1.5 Device, technical and security information

When you use PhotoTrail, we may automatically collect certain technical information, including:

• IP address
• Device type
• Operating system
• App version
• Browser information
• Device or installation identifiers
• Authentication and session information
• Request timestamps
• Crash or diagnostic information
• Security events
• Information relating to suspected abuse, fraud, automated activity, or unauthorized access

We use this information primarily to operate, troubleshoot, secure, and improve PhotoTrail.

1.6 Support communications

If you contact us for support or otherwise communicate with us, we may retain:

• Your contact information
• The contents of your message
• Attachments you provide
• Technical information relevant to your request
• Our responses and related support history

1.7 Subscription and purchase information

PhotoTrail may offer free and paid plans, including plans intended for individual users, event organizers, photographers, or other customers.

Purchases may be processed through third-party platforms or payment services such as Google Play or subscription-management providers. PhotoTrail does not need to receive your complete payment-card information when payment is handled directly by these providers.

We may receive information necessary to manage your subscription, such as:

• Subscription plan
• Purchase status
• Transaction or subscription identifiers
• Renewal status
• Expiration date
• Cancellation status
• Entitlement information

Payment providers process payment information according to their own privacy policies and terms.

2. Google Sign-In and authentication data

If you choose to sign in using Google, Google may provide us with information authorized by you, such as your:

• Name
• Email address
• Profile photograph
• Google account authentication identifier

We use this information to authenticate you, create and maintain your PhotoTrail account, prevent abuse, and provide the Services.

• We do not sell Google user data.
• We do not use Google user data for personalized advertising.
• We do not share Google user data with third parties except where necessary to operate or secure the Services, where you direct us to do so, or where disclosure is required by law.

Your use of Google services remains subject to Google's own privacy policies and terms.

3. How we use your information

We may use personal information to:

• Create and maintain your PhotoTrail account
• Authenticate users
• Provide PhotoTrail features and functionality
• Create and manage events
• Allow users to upload and share photos and videos
• Display event content to authorized users
• Maintain public and private event access controls
• Process invitations and event memberships
• Provide location and map-related features
• Manage subscriptions and paid features
• Generate and deliver media, previews, and thumbnails
• Respond to support requests
• Send important service or security communications
• Diagnose technical problems
• Improve performance and reliability
• Detect spam, fraud, bots, abuse, and unauthorized activity
• Investigate reports and violations of our policies
• Protect PhotoTrail, our users, and others
• Comply with applicable laws and legal obligations
• Enforce our Terms of Service and other policies

We may also use aggregated or de-identified information to understand how the Services are used and improve PhotoTrail, where such information can no longer reasonably identify you.

4. Public and private events

PhotoTrail allows event owners to control the visibility of their events.

Private events

Content in a private event is intended to be available only to users who are authorized to access that event. Event owners may invite, add, remove, or otherwise manage event members according to the functionality available through PhotoTrail.

Users should nevertheless be aware that authorized members may be able to view, save, download, screenshot, or otherwise reproduce content they are permitted to access. PhotoTrail cannot control what an authorized recipient does with content after accessing it.

Public events

Content shared in an event designated as public may be visible to other PhotoTrail users and, depending on the functionality of the Services, may be accessible more broadly.

You should not upload information to a public event that you do not want others to see.

Changing an event's visibility can affect future access to its content, but it cannot undo copies or screenshots previously made by people who had legitimate access.

5. How we share information

We do not sell your personal information. We may disclose information in the following circumstances.

Other PhotoTrail users

Information and content may be shared with other users according to the event's privacy settings and the actions you take within PhotoTrail. For example, members of an event may be able to see information about other event members and the content they contribute.

Service providers

We use third-party providers to operate and secure PhotoTrail. These providers may assist us with services such as:

• Cloud infrastructure
• Database hosting
• Authentication
• Media storage
• Content delivery
• Subscription management
• Notifications
• Security
• Error monitoring
• Customer support

These providers may process information only as necessary to perform services for us and subject to their applicable agreements and privacy practices.

PhotoTrail's infrastructure may include providers such as Amazon Web Services for secure cloud storage and content delivery, Supabase for database and authentication infrastructure, Google for authentication and platform services, and subscription or app-store providers for managing purchases and subscriptions. The particular providers used by PhotoTrail may change as our infrastructure evolves.

Legal requirements and safety

We may preserve, access, or disclose information if we reasonably believe doing so is necessary to:

• Comply with applicable law or a valid legal process
• Respond to lawful requests from authorities
• Protect the rights, property, or safety of PhotoTrail or others
• Investigate fraud, abuse, security incidents, or illegal activity
• Enforce our agreements and policies

Business transfers

If PhotoTrail is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, information may be transferred as part of that transaction, subject to applicable law.

6. Cloud storage and media delivery

PhotoTrail uses cloud infrastructure to store and deliver user content.

Uploaded photos and videos may be stored in private cloud storage. PhotoTrail may use temporary or controlled URLs and content-delivery infrastructure to make media available to authorized users.

Technical safeguards are designed to prevent unrestricted access to private media. However, no internet-based system can guarantee absolute security.

Users should only upload content they are comfortable storing and sharing through an online service.

7. Cookies and similar technologies

Our website and Services may use cookies, local storage, device storage, or similar technologies to:

• Maintain sessions
• Remember preferences
• Provide functionality
• Prevent fraud or abuse
• Measure performance
• Diagnose technical problems
• Improve the Services

Your browser or device may allow you to control certain cookies and storage technologies.

8. Security and abuse prevention

We use administrative, organizational, and technical measures designed to protect personal information. These measures may include:

• Authentication controls
• Access controls
• Private cloud storage
• Secure media-delivery mechanisms
• Encryption in transit
• Database security policies
• Security logging
• Session monitoring
• Automated abuse and fraud detection
• Device or installation verification
• Measures designed to detect suspicious or automated account activity

We may process device, account, network, installation, and security information where reasonably necessary to protect users and the Services.

No security system is completely secure, and we cannot guarantee that unauthorized access, loss, misuse, or alteration will never occur.

9. Content reports and moderation

Users may report content, events, or other users. When a report is submitted, we may collect and retain information concerning:

• The reporting user
• The reported user or content
• The reason for the report
• Relevant event or content identifiers
• Supporting information
• Our investigation and actions taken

We use this information to investigate potential violations, protect users, enforce our policies, and comply with applicable legal obligations.

We may remove content, restrict access, suspend accounts, or take other appropriate action where permitted under our Terms or required by law.

10. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining security, resolving disputes, enforcing agreements, and complying with legal obligations.

Retention periods may vary depending on the type of information and why it is processed. When information is no longer reasonably required, we may delete or anonymize it, unless applicable law requires or permits us to retain it for longer.

Some information may remain temporarily in backups or security systems after deletion from active systems.

We may also retain limited information where necessary to prevent fraud, abuse, repeated violations, or unauthorized account creation, provided such retention is permitted by applicable law.

11. Account and data deletion

You may request deletion of your PhotoTrail account and associated personal information. Where account deletion is available directly through the PhotoTrail app, you may use that functionality. You may also contact us at support@phototrail.app with the subject "Account Deletion."

We may need to verify your identity before processing a deletion request.

When an account is deleted, we will delete or anonymize associated personal information as required by applicable law, subject to information we must or are permitted to retain for reasons such as:

• Legal obligations
• Fraud prevention
• Security
• Dispute resolution
• Enforcement of our agreements
• Protection of other users

Deleting your account may not remove content that another user independently owns or controls, information that has been legally preserved, or copies another user previously downloaded or saved.

12. Your privacy rights

Depending on where you live, applicable privacy laws may give you certain rights regarding your personal information. These may include the right to:

• Request access to personal information we hold about you
• Correct inaccurate information
• Request deletion
• Request restriction of certain processing
• Object to certain processing
• Withdraw consent where processing is based on consent
• Receive a portable copy of certain information
• Lodge a complaint with an applicable data-protection authority

These rights may be subject to legal exceptions.

To exercise a privacy right, contact support@phototrail.app and please specify the request you are making. We may need to verify your identity before completing the request.

We will not discriminate against you for exercising privacy rights provided by applicable law.

13. EEA, United Kingdom and similar privacy laws

Where laws such as the General Data Protection Regulation ("GDPR") or equivalent privacy laws apply, PhotoTrail processes personal information under one or more appropriate legal bases.

Performance of a contract

We process information where necessary to provide the Services you request, including maintaining your account, managing events, storing media, and providing subscriptions.

Legitimate interests

We may process information where necessary for legitimate interests such as:

• Protecting the security of PhotoTrail
• Preventing fraud and abuse
• Improving the Services
• Troubleshooting
• Protecting users
• Enforcing our policies

We consider the potential impact on users when relying on legitimate interests.

Consent

Where required, we process information based on your consent. For example, certain device permissions such as precise location may require your permission. You may withdraw consent through the applicable device settings or by contacting us where appropriate.

Legal obligations

We may process or retain information where necessary to comply with applicable laws, legal proceedings, or lawful government requests.

14. Privacy rights for U.S. residents

Certain U.S. states provide residents with additional privacy rights. Depending on your state and whether the applicable law applies to PhotoTrail, these may include rights to:

• Know what categories of personal information are collected
• Access personal information
• Correct inaccurate information
• Delete personal information
• Obtain certain information in a portable format
• Opt out of certain types of data processing

PhotoTrail does not sell personal information.

Where applicable, requests can be submitted to support@phototrail.app. We may verify your identity before fulfilling a request and may decline or limit a request where permitted by applicable law.

15. International data transfers

PhotoTrail is available to users in multiple locations, while our service providers and infrastructure may operate in different countries.

As a result, your information may be stored or processed outside the country where you live. Those countries may have privacy laws different from those in your jurisdiction.

Where required by applicable law, we take appropriate steps designed to provide safeguards for international transfers of personal information.

16. Children's privacy

PhotoTrail is not intended for children under the minimum age required to independently use online services in their jurisdiction.

We do not knowingly collect personal information from children in violation of applicable law.

Because PhotoTrail allows users to upload photographs and videos from events, uploaded content may sometimes depict children. Users uploading such content are responsible for ensuring that they have any permissions or consent required by applicable law.

If you believe a child has created an account or that personal information relating to a child has been collected or shared inappropriately, contact us at support@phototrail.app so we can investigate.

17. Third-party services and links

PhotoTrail may contain links to, or integrate with, third-party services.

When you interact directly with a third-party service, that provider may process information according to its own privacy policy and terms.

PhotoTrail is not responsible for the privacy practices of independent third-party services.

18. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect:

• Changes to PhotoTrail features
• Changes to our infrastructure or providers
• Legal or regulatory developments
• Security or privacy improvements
• Changes to our business practices

When we make changes, we will update the "Last Updated" date at the top of this Policy. If changes are material, we may provide additional notice where appropriate or required by law. We encourage you to review this Privacy Policy periodically.

19. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or how PhotoTrail handles personal information, contact us at:

• Email: support@phototrail.app
• Company: PhotoTrail
• Website: phototrail.app
• Country: Pakistan