Privacy Policy

01Who is responsible for your data

[Bedrijfsnaam B.V.], [Straatnaam 1, 1234 AB Amsterdam, Nederland], Chamber of Commerce number [KvK-nummer], is the controller of the personal data described here. You can reach us about anything in this policy at hello@blitz.camera.

For the photos taken inside an event there are two roles. The host decides who is invited and what happens to the roll, and is the controller of that. We process those photos on the host's behalf, to run the service.

02What the app collects

• —Your account: the email address you sign up with, your password in hashed form, and the display name you choose.
• —Your events: the name, date, guest limit, shot limit and reveal time you set.
• —Purchases: a confirmation from Apple that a purchase succeeded, and the identifier of what was bought. Apple does not give us your payment details.
• —Device and diagnostic data: device model, iOS version, app version, and crash reports, so we can fix what breaks.
• —A push notification token, if you allow notifications, so we can tell you when your roll is ready.

03Permissions the app asks for

iOS asks you before the app can reach any of these, and you can change your answer at any time in the Settings app. Saying no only disables the part that needs it.

• —Camera: to take photos in your own event. We never open the camera without you pressing the shutter.
• —Photo library: only when you pick a photo yourself, and only the photo you pick. We do not read your library.
• —Notifications: to tell you when your roll is revealed or about to be removed. Nothing promotional.

We do not ask for your location, your contacts, your microphone or your health data, and we do not track you across other companies' apps or websites.

04What the website collects

• —From a guest joining an event: the photos you take, the name you type in if you type one, and a token in your browser so the event knows you are the same person as five minutes ago.
• —From every visitor: basic technical data such as IP address, device type, browser and the pages opened, which we need to deliver the site and keep it secure. An IP address says roughly which country and city you are in, so treat that as something we can see even though we never ask for your location.

That token is the only thing we put in your browser, and the site cannot work without it. We set no advertising cookies, no analytics and no third-party trackers, so there is nothing here to consent to and nothing to switch off.

Photos can contain more than they appear to. A photo taken at a party shows who was there, and may carry the time and place it was taken in its file. Treat a roll accordingly.

05Why we use it, and on what basis

• —To run the event you created or joined. Legal basis: performance of a contract with you.
• —To manage your account and support you when you write to us. Legal basis: performance of a contract.
• —To keep the invoice for a purchase. Legal basis: a legal obligation for the accounting records.
• —To keep the service working and secure, including logs, crash reports and abuse prevention. Legal basis: our legitimate interest in a service that stays up and is not misused.
• —To send you a notification about your own roll. Legal basis: performance of a contract, and your device permission.
• —To email you about your account and your events: a receipt, a reminder that a roll is about to be removed, a notice when these terms change. Legal basis: performance of a contract. We do not send marketing email unless you ask for it, and you can stop it at any time without losing the messages about your own events.

We do not build advertising profiles, we do not sell data to anyone, and we do not use your photos or your messages to train any model.

06Who we share it with

The people in your event, and a small number of companies that process data on our behalf and only on our instructions:

• —[hosting provider, country] for running the application.
• —[storage provider, country] for storing the photos.
• —[email provider] for sending you email about your account and your events.
• —Apple, for distributing the app and handling purchases. Apple is the seller of an in-app purchase and processes that payment under its own privacy policy, not ours.
• —[purchase validation service, if used] for checking with Apple that a purchase is valid and unlocking what it paid for.

Each processor is bound by a data processing agreement. We will also disclose data if a court or a competent authority requires it, and we will tell you when we are allowed to.

07Where your data is kept

We keep data in the European Economic Area wherever we can. If a processor moves data outside it, that transfer is covered by the European Commission's standard contractual clauses or by an adequacy decision, and we can show you which on request.

08How long we keep it

• —Photos and the roll they belong to: [12 months] after the event, then deleted.
• —Account and event details: [24 months] after your last event, or straight away if you delete your account.
• —Purchase records and invoices: seven years, because tax law requires it.
• —Technical logs and crash reports: [30 days].

Backups roll over on their own schedule, so something you deleted can survive in a backup for a short period before it is gone for good.

09Deleting your account

You can delete your account from within the app, under Settings, without writing to anyone. It removes your account details and any event that has not yet taken place, and it cannot be undone.

Deleting your account does not cancel a purchase, because Apple handles those; ask Apple for a refund at reportaproblem.apple.com. If you would rather we did the deletion for you, write to hello@blitz.camera.

10Security

Data is encrypted in transit and at rest. Access to production data is limited to the people who need it and is logged. An event roll is reachable only through its own link and is not indexed by search engines.

No system is perfect. If a breach happens that is likely to put your rights at risk, we will tell you and the supervisory authority without undue delay.

11Your rights

Under the GDPR you can ask us to:

• —Give you a copy of the personal data we hold about you.
• —Correct it if it is wrong.
• —Delete it, where we do not have to keep it.
• —Restrict what we do with it, or object to processing based on our legitimate interest.
• —Hand it over in a portable format, or send it to someone else.
• —Withdraw a consent you gave, at any time, without it affecting what we did before you withdrew it.

Write to hello@blitz.camera and we will respond within one month. If you are unhappy with how we handled it you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), or to the authority in the country you live in.

12Children

Blitz is not aimed at children and you must be 18 to create an event. Children do appear in photos at family events, which is normal, and the host is responsible for that being appropriate. If you believe we hold data about a child that should not be there, write to hello@blitz.camera and we will remove it.

13Changes to this policy

We update this policy when the app or the service changes. The date at the top says when it last changed, and we will email account holders about any change that materially affects them.