Privacy Policy

1. Who are we?

PicEvent is a mobile app for sharing photos and videos between participants of the same event (wedding, birthday, trip, corporate event…). The publisher of PicEvent is the data controller.

2. What data do we collect?

• Profile: the first name (or nickname) you enter, an automatically generated username, an avatar colour or photo if you choose one, and the account creation date.
• Technical identifier: an anonymous identifier provided by Firebase Authentication. Joining an album and posting to it requires no email address, phone number or password.
• Permanent account: creating an album requires a durable account, either with an email address and password or through Google. We then store your email address; the password is handled by Firebase Authentication and is never accessible to us. This requirement protects your purchase: an anonymous account disappears on reinstall, and the album you paid for would go with it.
• Content: the photos, videos, comments and likes you post in albums, and the list of albums you create or join.
• Reports: if you report a photo or comment, we record the identifier of the reported content, the album identifier, the selected reason and any details you provide. Your account identifier is stored separately, out of reach of the organiser.
• Preferences: your chosen language (French/English), stored only on your device.
• Purchases: any transactions (album creation) are processed by Google Play. We never receive or store your payment details.

3. Why do we process this data?

Solely to operate the service: creating and joining albums, showing your content to the other members of the album, and managing your account. PicEvent shows no ads, never sells your data and does not use it for profiling.

Legal basis: performance of the contract (providing the service) and your consent, given when creating your account.

4. Who can see your content?

Photos, videos and comments posted in an album are only visible to people who have that album's invitation code. They are not public.

5. Where is your data hosted?

• Google Firebase (authentication and database);
• Cloudinary (photo and video storage).

These providers may process data outside the European Union; such transfers are covered by appropriate safeguards (the European Commission's standard contractual clauses).

6. How long do we keep your data?

• Every album automatically expires 5 months after its creation: its photos, videos and comments are then permanently deleted, including from the media storage servers.
• Your profile is kept for as long as your account exists. You can delete it at any time (see below).

7. Your rights (GDPR)

You have the right to access, rectify, erase, restrict and object to the processing of your data, as well as a right to data portability.

• Access and portability: the "My data" section of the app lets you view and export your data in JSON format.
• Erasure: account deletion, available in the app, genuinely removes your profile, photos, videos, comments and likes, from both our database and the media storage.
• For any other request: Piceventcontacte@gmail.com.

You may also lodge a complaint with your data protection authority — in France, the CNIL (www.cnil.fr).

8. Minimum age

In accordance with French law, PicEvent may only be used by people aged 15 or over, or under 15 with the consent of a parent or legal guardian. This condition is accepted when creating the account.

9. Security

Communications with our servers are encrypted (HTTPS) and access to data is restricted by strict security rules. As no system is infallible, please only post content you are comfortable sharing with the members of your albums.

10. Changes

This policy may be updated; the date at the top of the page indicates the latest version. You will be informed in the app of any significant change.

11. Reporting and moderation

Any guest can report a photo or comment they find inappropriate, directly from the app.

The album organiser is then notified and can view the reported content, the reason and any details, in order to decide whether to remove it. They have no way of knowing who submitted the report: your identity is accessible only to our internal systems, and is used solely to address misuse of this feature.

Reports are kept for the lifetime of the album, five months, and deleted along with it.

12. Hidden content

You can hide a photo or comment for yourself alone, without reporting it. That list is stored only on your phone and is never sent to our servers: neither the organiser nor other guests can tell what you have chosen not to see. It is removed if you uninstall the app.