Privacy policy

1. What we process

Account: your Dropbox account id, name, email address, profile picture and language, and the access and refresh tokens Dropbox gives us (stored encrypted).

Your photos, only from the folders you choose: file names, paths, sizes and dates; the camera, lens, capture time and GPS position stored in each photo's EXIF data, read from the first bytes of the file; a thumbnail of at most 512 px; and a crop of each detected face. We do not store your full-size originals.

Derived data: for each face a numerical vector (an embedding) used to recognise that the same person appears in several photos, plus estimated age, gender and head pose; for each photo a content vector (CLIP embedding), a perceptual hash, sharpness and brightness figures, and a place name derived offline from the GPS position.

What you add: the names you give to people, merges and corrections you make, and your settings.

Billing: when you subscribe, Paddle collects your payment details and acts as merchant of record. We receive only your plan, subscription status and renewal date, never your card number.

Usage: a few product events (for example that you connected Dropbox, named a first person, ran a search, or clicked upgrade) sent to PostHog in the EU without cookies. They contain a random user id and plain counts, never your photos, face data, names, file names or search text.

2. Face data is biometric data

Grouping the same person across photos requires face embeddings, which are biometric data. We process them only if you give your explicit consent, which we ask for before you connect Dropbox, and only to build your own private People view and search.

We never sell or share face data, use it for advertising, use it to train models, match it across different users, or use it to identify you or anyone else to third parties.

You can withdraw consent at any time by using “Disconnect and delete everything” in Settings. Photos of other people, such as family and friends, appear in your library: you are responsible for having the right to process them.

3. Why we may process it

To provide the service you asked for (contract), on the basis of your explicit consent for biometric data, and on our legitimate interest in keeping the service secure and preventing abuse. If you use the optional translation of search words, the text of your search (nothing else) is sent to our language-model provider to translate it.

4. Where it is stored and who helps us

We process and store data in the European Union. Our processors are: Dropbox (the source of your photos), Vercel (web application), our hosted PostgreSQL provider and Cloudflare R2 (database and thumbnails), Hostinger (analysis servers, Frankfurt), Paddle (payments), PostHog EU (product analytics) and, if enabled, Sentry (error reports without photo content). [Final list and regions to be confirmed at launch.]

Each processor is bound by a data processing agreement. We do not transfer your data outside the EU except where a processor’s safeguards (such as standard contractual clauses) apply.

5. How long we keep it

We keep your data while your account is connected. If you delete a photo in Dropbox, its thumbnail, crops and face data are deleted at the next sync. If you remove a folder, everything derived from it is deleted. “Disconnect and delete everything” erases all your data from our systems and revokes our access to your Dropbox immediately; backups roll off within [30] days.

6. Your rights

Under the GDPR and, where it applies, the Israeli Protection of Privacy Law, you can ask for access to your data, correction, erasure, restriction, portability, and object to processing, and you can lodge a complaint with your data protection authority. Most of this you can do yourself in the app; for anything else write to [support@your-domain].

7. Security

Dropbox tokens are encrypted at rest, connections use TLS, every request is checked against the signed-in account, and storage is private. No system is perfectly secure; we will notify you and the authorities of a breach as the law requires.

8. Children

Folkpix is for adults. Your photos may include children; the face data of every person is treated the same way and deleted the same way.

9. Changes and contact

We will tell you about material changes before they apply. Questions: [support@your-domain].