Privacy Policy

Photographers and hosts who create an account; guests who open an event gallery, and those who add their own album to one; and clients who open a private album link. Kinetiq operates the service. For photos inside an event, the photographer who uploaded them decides who they are shared with and how long they stay.

• Photographer accounts: email address, username, display name, a profile photo if you add one, and a securely hashed password. If you sign in with Google, we receive your Google account ID, name, email address and profile photo.
• Event photos uploaded by photographers, with a smaller preview copy of each. Photos are delivered as the original files, so any information the camera recorded in them — such as time and, on some phones, location — stays in the file.
• Face data from event photos. To make face search possible, faces detected in uploaded event photos are converted into numerical representations (embeddings) and stored alongside those photos.
• Guest albums: photos a guest adds to an event, the album’s name and, for a guest without an account, the name they type. Guests who add an album with an account use the same account details as above. The event’s host can see, hide and remove every album in their event.
• Clients: if you sign in to an album with Google, your name, email address and profile photo; any name or photo you add yourself; and the photos you mark for your album.
• Support messages you send us, with the email address you give.
• Technical records: for each request to the service, the time, the page or action, the result, how long it took, the IP address and the browser type. We also keep a record of significant account actions such as sign-ins, password changes and deletions.

When a guest uses Find my photos, their selfie is processed in memory to compare against the event, and discarded as soon as the search finishes. It is not written to storage or to our database. Guests never need an account to view, search or download photos; an account is used only to add and manage an album.

• To run the service: store and deliver photos, find matching faces, and show clients their album.
• To secure it: authenticate people, limit repeated failed sign-ins, and investigate misuse.
• To operate it: measure storage and load, fix faults, and answer support requests.

• We do not sell personal information or use it for advertising.
• We do not use event photos or face data to train models, or for any purpose other than search within that event.
• We do not list a photographer’s events publicly. Galleries are reached by link and are marked so search engines do not index them.

Anyone holding an event’s link or QR code can view that event’s gallery, except for photos the photographer has hidden. A client album additionally requires its password or a Google sign-in.

A small number of Kinetiq staff can access accounts to provide support. Every such access is recorded, time-limited, and shown on screen while it happens.

Google provides the optional sign-in. When a page offers “Sign in with Google”, it loads Google’s sign-in script, and Google’s own privacy policy applies to that interaction. Photos on our public pages are served by Unsplash. We use hosting providers to store and serve the service.

We use your browser’s local and session storage to keep you signed in and to remember small preferences such as the colour theme and a guest’s favourite photos. We do not use advertising or cross-site tracking cookies.

• Event photos, their previews and their face data: until the photographer deletes them, or deletes the account.
• Request records: 30 days.
• Account activity records: kept for security and dispute resolution.
• Support messages: as long as needed to resolve them and keep a record of the outcome.

You can ask to access, correct or delete your information. If you appear in an event and want a photo removed or hidden, the quickest route is the photographer who shared it; you can also contact us and we will pass the request on.

Where it applies, we handle requests in line with data protection law, including India’s Digital Personal Data Protection Act, 2023.

Passwords are stored only as salted hashes. Sessions expire, staff access is separate from photographer access, and uploaded images are re-encoded, which removes embedded location data from profile and cover photos. No system is perfectly secure, and we will tell affected people promptly if a breach puts their information at risk.

Studio accounts are for adults running a photography business. Events often include children; photographers are responsible for having the consent needed to photograph and share them.

If we change this policy, we will update the date at the top and, for significant changes, tell account holders.

Write to [email protected], or use the Help button inside Studio or inside any client album.