Privacy Policy

1. Information We Collect

Account information: email address, business/display name, and profile image. Sign-in uses a verification code sent by email, so we do not collect passwords.

Content: photos and videos uploaded by Users (photographers) and accompanying information (file names and metadata such as capture date). Photos may contain personal information such as the likeness of photographed subjects.

Usage: activity records for share links, such as views and saves (time and device type). We do not collect Recipients' names or contact details.

IP address: only when a viewing-PIN entry fails, we temporarily record the IP address to prevent brute-force attacks. These records are automatically deleted within 24 hours.

Cookies etc.: we use cookies necessary to maintain sign-in state and PIN verification state. We also record the “saved” display state in the Recipient's browser storage (localStorage). We do not use advertising cookies or tracking.

2. How We Use Information

To provide the Service (storing photos and videos, delivering them through share links, and providing the save feature).

To show Users usage insights (such as how many times a gallery has been opened or saved).

For identity verification, preventing misuse, responding to inquiries, and improving the Service.

3. Disclosure and Processors

We do not provide collected information to third parties except as required by law. We never share your information with third parties for advertising purposes, and we do not “sell” personal information.

We entrust storage and processing to the following providers to the extent necessary to operate the Service. Each processor handles information under its own privacy policy and its agreement with us.

・Vercel Inc. (US) — website hosting ・Supabase Inc. (US) — database and authentication (data stored in the Seoul region) ・Cloudflare, Inc. (US) — storage of photo and video data ・Resend (US) — sending emails such as sign-in verification codes

4. Data Location and International Transfers

Service data is stored on servers managed by the processors above. All processors are US companies; database and authentication data are stored in the Republic of Korea (Seoul region), and photo/video data and other information may be stored and processed on servers outside Japan, including the United States.

These countries may not have data protection regimes equivalent to Japan's Act on the Protection of Personal Information. In accordance with that Act, we verify each processor's safeguards (encryption in transit and at rest, access controls, etc.) and permit processing only within the purposes described in this Policy.

5. Retention and Deletion

When a User deletes a gallery or photo, the original and derived files (thumbnails and lightweight versions) are deleted from storage.

After a gallery's retention period expires, Recipients can no longer view or save it, but the data is retained until the User deletes it.

To request account deletion, please contact us using the details below. We will delete the account and related data within a reasonable period.

6. Security

All communication is encrypted (HTTPS). Photo and video storage is private, and delivery uses signed URLs with expiration times. Share links are issued as hard-to-guess random strings, and a 4-digit PIN can be set as needed.

7. Your Rights

You may request notification of the purpose of use, disclosure, correction, addition or deletion, suspension of use or erasure, and suspension of third-party provision of your personal information held by us. Please contact us using the details below. We may ask for information to verify your identity.

If you appear in a photo as a subject and wish to discuss it (for example, to request deletion), contacting the photographer directly is usually the fastest resolution. If you cannot reach the photographer, please contact us using the details below.

We will never treat you disadvantageously for exercising your privacy rights.

8. Children's Information

Account registration is intended for persons 18 years of age or older. If you are under 18, please obtain the consent of a legal guardian.

Gallery content may include photos of children as subjects. Consent for capturing and sharing these photos (including parental consent) is the responsibility of the photographer (Terms of Service, Article 4).

9. Changes to This Policy

We may revise this Policy in response to legal changes or changes to the Service. For material changes, we will announce them in advance on the Service or by email, specifying the effective date, and update the date at the top of this page.

10. Language

The Japanese version of this Policy is the authoritative text. This English translation is provided for reference only; if there is any discrepancy, the Japanese version prevails.