Privacy Policy

This Privacy Policy explains how PicsMatch ("we", "us") collects, uses, and protects your personal information when you use our selfie capture and event-photo service (the "Service"). By using the Service you agree to the practices described below.

1. Information we collect

• Contact details — your name and phone number, provided when your registration link is created.
• Selfie images — the photo you capture with your device's camera, either manually or via blink detection.
• Technical data — basic request information (such as device/browser type) needed to operate and secure the Service.

2. Camera and face data

With your permission, the Service accesses your device's camera to capture a selfie. Blink detection (facial landmark analysis) runs entirely in your browser — the live video feed is never streamed to or stored on our servers. Only the single captured selfie image is uploaded. Uploaded selfies may be checked automatically for liveness (to detect spoofed photos) and may be used to match you with photos taken at the event you attended, so that your event photos can be delivered to you.

3. How we use your information

• To register you for an event and link your selfie to your phone number.
• To identify and deliver photos of you taken at the event.
• To prevent fraud and abuse (for example, liveness checks on selfies).
• To operate, maintain, and improve the Service.

We do not sell your personal information, and we do not use your selfies for advertising or unrelated purposes.

4. Storage and security

Selfies and event photos are stored in a private Amazon Web Services (AWS) S3 bucket and are only ever served through short-lived, signed links. Registration is protected by one-time access tokens that expire automatically (within about one hour if unused) and are destroyed once used. Access to the administration area is restricted to authorised staff with individual credentials.

5. Who we share data with

• The event organiser / photographer who invited you, so they can deliver your event photos.
• Service providers acting on our behalf, such as AWS (cloud storage and hosting) and our database provider. They process data only as needed to provide their services.
• Legal requirements — if required by law or to protect the rights and safety of users or the public.

6. Data retention

We keep your selfie and registration details for as long as needed to deliver your event photos and operate the Service. You may request deletion of your data at any time (see "Your rights" below), and we will remove it unless we are legally required to keep it.

7. Your rights

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, or to object to or restrict its processing. To exercise any of these rights, contact us using the details below and we will respond within a reasonable time.

8. Children

The Service is not directed at children under 13 (or the minimum age in your jurisdiction). If you believe a child has provided us personal information without appropriate consent, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above shows when it was most recently revised. Material changes will be communicated through the Service where practical.

10. Contact us

For questions about this policy or your data, contact us at [email protected].