Privacy Policy

Last updated: April 2026

1. Information We Collect

We collect only the information strictly necessary to provide our photo sharing and storage services:

  • Account Identity: Email address and profile metadata (managed securely via Supabase).
  • Media Assets: Uploaded images, videos, and their associated EXIF metadata to ensure original-quality delivery.
  • Transaction Data: If you upgrade to Premium, payment processing is handled by Stripe. We do not store your credit card details on our own servers.
  • Technical Meta: IP addresses and basic telemetry used for security, bot prevention, and analytics.

2. How We Use Your Information

Your data is used solely to facilitate group sharing. We do not sell your personal information, nor do we use your private photographs for training machine learning models or internal data mining.

3. Strict Data Retention Schedule

ShareThePic is a transitory service. We do not store your memories indefinitely:

  • Active Trips: Data is retained for the duration chosen during Trip creation or until manual deletion.
  • Automated Purge: Once a Trip expires, it enters a 48-hour recovery window. At the end of this window, our background workers perform a hard-delete of all media from Cloudflare R2 and all metadata from Supabase.
  • Account Deletion: If you delete your account, all associated personal data and active Trips are purged immediately.

4. Sub-Processors and Partners

We partner with industry-leading infrastructure providers to ensure your data stays secure and fast:

  • Supabase: Primary database and user authentication.
  • Cloudflare R2: Secure, encrypted temporary object storage.
  • Stripe: Secure SSL-encrypted payment processing.
  • Resend: Transactional email delivery for trip lifecycle notifications.

5. Data Security

We use industry-standard encryption and security protocols (provided by Supabase and Cloudflare) to protect your information. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Cookies & Local Storage

We use essential cookies and browser local storage to maintain your authentication session and cache trip data for faster performance. These are strictly functional and are not used for cross-site tracking or targeted advertising.

7. Your Rights

You have the right to access, export, or delete your data at any time through your account settings. For specific GDPR or CCPA inquiries, or if you believe your personal data has been handled incorrectly, please contact us.

8. Contact Us

For privacy-related concerns or data inquiries, please email us at contact@sharethepic.app.