1. Information We Collect

We collect information you provide when creating an account (email address or phone number), event details (event name, date), and photos uploaded to your events by you or your guests.

2. How We Use Your Information

We use your information to:

• Operate and provide the EventShot service
• Send notifications about your events (e.g. guest uploads)
• Send transactional emails (e.g. photo archive download links)
• Improve and maintain the app

3. Photo Storage

Photos are stored securely in Google Firebase Storage. Access is controlled by our servers — photo URLs are not publicly guessable. Photos are automatically deleted when your event expires based on your subscription plan.

4. Guest Data

Guests who upload photos provide their name (entered voluntarily) and photos. This information is associated with the event and visible to the event host. Guests do not create permanent accounts.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Firebase / Google (hosting, storage, authentication)
• Resend (transactional email delivery)
• RevenueCat (subscription management)

All providers are bound by data processing agreements.

6. Authentication

EventShot uses Firebase Authentication. If you sign in with a phone number, your number is shared with Firebase for SMS verification. We do not store your raw phone number beyond what Firebase retains.

7. Data Retention

Your account data is retained as long as your account is active. Event photos are deleted automatically according to your plan's retention period (7, 30, or 90 days). You can delete your account at any time from app settings, which permanently removes all your data.

8. Security

We implement industry-standard security measures including encrypted data transmission (HTTPS), Firebase security rules, and access-controlled Cloud Functions. No system is completely secure, but we take reasonable precautions.

9. Children's Privacy

EventShot is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Export your photos before account deletion

To exercise these rights, contact us at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email.

12. Contact

For privacy questions or requests, contact us at [email protected].