Privacy policy

Who this covers

Event owners, who have an account and run events. Photographers, guests and photo editors, who take part through a personal link the owner shares. And visitors to swipick.app.

For your account, Swipick decides how your data is used. For an event, the owner decides which photos go in and who is invited; Swipick handles them on the owner's behalf.

What Swipick collects

• Owners: your email address and password (stored only as a salted hash), and the events you create. If you connect Google Drive, the Google account's email and a Drive access key, which is stored encrypted.
• Photographers: the name the owner gave your link, the files you send, and their names, sizes, checksums and upload times.
• Guests: the name the owner entered for you, and which photos you keep or skip.
• Photo editors: the email address the owner entered, if any, and which photos you mark as editing or done.
• Photos: the original files, the previews made from them, and details stored inside them such as when the photo was taken and its size.
• Every visit: your IP address and browser details reach Swipick's servers and Cloudflare, which delivers the site. They are used to serve pages, keep the service secure and limit abuse.
• Website statistics: Cloudflare Web Analytics counts visits without cookies and without following you across other sites.

How it's used

Only to run Swipick: to store and show an event's photos, count everyone's choices, give the final cut to the editor, and keep accounts secure.

Swipick doesn't sell personal data, doesn't show ads, and doesn't use your photos to train AI models.

Who can see what

• The owner sees everything in their event, including who kept each photo.
• Guests see only the photos the owner chose to share, and only their own choices.
• Photographers see only the files they sent through their own link.
• The photo editor sees the final-cut photos, their original files and the owner's notes.
• Nothing in an event is public. Every link is personal and can't be guessed.
• The person who runs Swipick looks at stored data only when needed to keep the service running, fix a problem, or when the owner asks for help.

Where it's kept

• Accounts, events and choices: in Swipick's own database.
• Photos in Swipick storage: on Cloudflare R2, Cloudflare's file storage. Cloudflare also hosts the website and carries all traffic.
• Photos in Google Drive events: in the owner's own Drive. Swipick keeps only file names, sizes and links to them.
• Cloudflare and Google may process data outside India, as the Act allows.

How long it's kept

• An event and its photos are kept until the owner deletes the event. There is no automatic deletion.
• Deleting an event removes its photos and previews from Swipick storage, along with its links, guests and choices. Photos in a Google Drive event stay in the owner's Drive, where the owner can delete them.
• When the owner removes a guest, that guest's choices are deleted too.
• To close an account, write to [email protected]. The account and all of its events are then deleted.

Your rights

You can ask for a summary of the personal data Swipick holds about you, have it corrected or completed, have it erased, and name someone to act for you if you can't. Write from the email address on your account, or tell us which event and link you took part through.

Guests and photographers can also ask the event's owner, who can remove a guest, turn off an upload link or delete the event.

Every request gets a reply. If you aren't satisfied with the answer, you can complain to the Data Protection Board of India.

Children

Owner accounts are for adults (18 and over). Event photos often include children; the owner is responsible for being allowed to share every photo with the people they invite.

Changes

When this policy changes, this page and its date are updated. Owners are told by email before any change that affects how their data is used.