Privacy Policy

Account information. RepicLa uses Sign in with Apple as its only sign-in method. When you sign in, we receive your name and email address from Apple. In the app you can set a display name, a username (which is your Instagram username), a profile picture (uploaded avatars are stored on our servers), and links to your social profiles.

Photos. Photos a photographer uploads during a session — both a thumbnail and the full-resolution original — along with the capture time and filename, and any retouched versions a coser sends back.

Your public page. Anything you add to your page at repicla.com — a tagline, links, up to six photos (your own uploads, or copies of photos you received), and a Spotify or Apple Music link. Photos are re-encoded before they are stored, which removes embedded metadata such as GPS coordinates.

Session records. Who photographed whom, when a session started and ended, the event it belongs to, and any claim or join requests you make or handle.

Location. When a photographer scans a pass to start a session, the app records the location at that moment, if you have allowed it, to match the session to an event taking place there. That location is stored with the session. We do not track your location in the background.

Push notification tokens. If you enable push notifications, we store your device token on our servers so we can deliver them. The token is removed when you sign out.

Camera and Bluetooth. The app uses the camera to scan QR codes, and Bluetooth and Wi-Fi to talk to your Sony camera. Those connections stay on your device; we do not collect data from your camera.

• to provide the Service: opening sessions, delivering photos, and showing your albums and profile;
• to deliver each photo to the coser and photographer who belong to its session;
• to match sessions to events so your photos stay organized;
• to deliver push notifications, such as new photos, join requests, and claims;
• to keep the Service safe through content moderation and enforcement of our Terms of Service;
• to respond when you contact us.

Uploaded profile pictures, session photo thumbnails, and retouched versions are scanned on our own servers by an automated moderation system for inappropriate content. The scan runs in the background and never blocks an upload; flagged content is held for human review. Photos are not sent to any third party for this. Violations can lead to content removal or account suspension.

We do not sell your personal data, and we do not share it with advertisers — the Service has no third-party advertising. Your information is shared only in these cases:

• With other users. Photos in a session are visible only to that session’s photographer and cosers. Your display name, username, profile picture, and social links are public: other users, and anyone who scans your pass, can see them.
• Your public page. The QR code on your pass, and the address repicla.com/@yourname, open a page that is always public. It shows your display name, username, profile picture, social links, and whatever you chose to add to it. Session photos never appear there unless you put them there. The page asks search engines not to index it.
• Photos you publish from a session. You can add photos you received as a coser to your public page; each one is shown with its photographer’s username. If the photographer deletes the photo, removes you from the session, or deletes their account, the copy on your page is removed as well.
• Embedded music. If a page includes a Spotify or Apple Music player, that player is loaded from Spotify or Apple, who receive the visitor’s IP address and may set their own cookies.
• With service providers that host the Service on our behalf. Our database is hosted on MongoDB Atlas. Photo files are stored on a server we operate ourselves. Traffic is carried by Cloudflare. Apple delivers push notifications to your device.
• If required by law, such as in response to a valid legal request.

Full-resolution session photos are kept for 30 days from upload and then deleted automatically — save them to your device in time. Photos on your public page are separate copies and stay until you remove them. Thumbnails are kept until the photo, session, or account is deleted. Account data and session records are kept while your account is active. When you delete your account, your data is handled as described in Section 6.

You can delete your account in the app under Settings. Deletion is immediate and permanent: your profile, profile picture, public page and its photos, device tokens, every session and photo you shot as a photographer (including the files), and any retouched versions you sent back are removed, and the cosers involved lose access to those photos straight away. Deleted data cannot be recovered.

Photographers can also delete individual photos at any time; a deleted photo disappears for the coser too.

RepicLa is not directed at children under 13, and you must be at least 13 (or older where required by local law or the Apple App Store) to use the Service. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has an account, contact us at [email protected] and we will delete it.

• Location: location access is optional and controlled through iOS Settings. Without it the Service still works; sessions simply aren’t matched to an event automatically.
• Notifications: turn push notifications off in the app or in iOS Settings.
• Uploads: choose in the app to upload over Wi-Fi only.
• Access and deletion: edit your profile in the app, and delete your account as described in Section 6. For other requests about your data, email [email protected].

Depending on where you live, you may have additional legal rights over your personal data, such as the rights of access and correction under Hong Kong’s Personal Data (Privacy) Ordinance. We honor such requests sent to the address above.

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date at the top of this page and take reasonable steps to notify you, such as a notice in the app.

Questions about privacy at RepicLa? Email us at [email protected].