Privacy Policy

Last updated: 1 October 2026

This translation is provided for convenience. If there is any discrepancy, the Portuguese version prevails.

This policy explains what personal data Fotosfy processes, why, who it is shared with and what your rights are. It applies to the fotosfy.com website, the app at app.fotosfy.com, the Android apps (phone and TV) and the Fotosfy bot on Telegram.

1. Who is responsible

Fotosfy is run by Neto Ribeiro, a private individual resident in Brazil, who is the controller of the personal data processed in the service under the LGPD (Brazil’s General Data Protection Law, Law no. 13,709/2018).

Contact for any privacy matter, including exercising your rights: fotosfy.admin@gmail.com.

2. What data we process

Data	Where it comes from	Why
Email address, display name and password (stored only as a hash)	Sign-up	To create and protect your account
Photos, descriptions, albums and memories	You send them through the app or via Telegram	To store, organise and show your photos
Photo metadata (date, time zone, GPS location, orientation)	Read from the photo file itself	To sort by date and by place. The app does not show the location on the TV or in shared albums — but see the note below
ID and name of whoever sends via Telegram, and the time of the message	Telegram bot	To know who may send photos to your account and which album they go into
Transcribed text of voice notes	Telegram bot	To become the photo’s description. The audio is transcribed on our own server in Brazil and is not stored — only the text
Name and PIN of party guests, and the photos they send	Party page	To let guests without an account send photos to the party
IP address of party PIN attempts	Party page	To block anyone trying to guess PINs. Deleted after 30 days
Connected TVs (name and a secret code stored only as a hash)	TV pairing	To show your photos on the TV and let you disconnect it
Plan, subscription status and Stripe customer identifiers	Payment	To charge for and unlock the plan you chose. Card details never pass through Fotosfy: they stay with Stripe

Note about the original file: we store the photo exactly as you send it. If your phone saved the location inside the file, anyone with the link to a shared album can download the file and read that information. If you don’t want that, turn off location in your phone’s camera or remove it before sending the photo.

We do not use advertising or tracking cookies. The fotosfy.com website does not use cookies. The app stores in your browser only what is strictly necessary for it to work: your login session, display preferences, the session of anyone joining a party as a guest, the TV pairing and, in full-screen display mode, a copy of the album’s photos so it can work offline.

3. Legal bases

Performance of a contract (LGPD, art. 7, V): account, photos, albums, parties, TVs, Telegram and billing.
Compliance with a legal obligation (art. 7, II): payment records required by tax law.
Legitimate interest (art. 7, IX): security and abuse prevention, such as logging the IP addresses of PIN attempts.

We do not sell personal data, we do not use it for advertising and we do not use your photos to train artificial intelligence.

If in future we start using an artificial intelligence service to pre-screen photos sent by party guests, this policy will be updated beforehand, naming the provider and what it receives.

4. Photos of other people and of guests

Photos may show other people, including children. Whoever sends a photo is responsible for having the right to do so and, where necessary, the consent of the people shown (or of their parents or guardians).

At a party, guests’ photos go into the account of the person who created the party, who decides which ones appear on the TV and can delete them. A guest can ask the party’s creator, or us at the email above, to remove their photos.

Supabase — database, file storage and login, on servers in São Paulo (Brazil).
Stripe — payment processing (United States).
Telegram — if you choose to use the bot, messages pass through Telegram, which handles them under its own policy.
Anyone with the link to a shared album — sees the photos in that album and can download the files (see the note about the original file in section 2).
Authorities, when required by law or a court order.

6. Where the data is kept

The data is kept in Brazil: the database and the files are in São Paulo, and the audio transcription server is also in Brazil. There is an international transfer only to Stripe (payments) and to Telegram (if you use the bot). These transfers rely on art. 33 of the LGPD, with the contractual safeguards those providers offer.

7. How long we keep it

Account, photos and albums: for as long as the account exists. After deletion, everything is removed from live systems within 15 days, and backups are overwritten within 30 days.
IP addresses of PIN attempts: 30 days.
Payment records: for the period required by tax law, at Stripe.
Record of deleted accounts: when an account is deleted, we keep a minimal record for 5 years — email address, display name, the dates the account was created, last accessed and deleted, the IP address of the deletion request, the plan, the subscription status, the Stripe customer ID, the version of the terms accepted, the storage used and the number of albums, photos, parties, guest photos, memories, TVs and Telegram chats. We never keep photos, captions or any other content. This record exists to comply with legal obligations and to respond to requests from authorities (LGPD, art. 7, II and VI, and art. 16, I), and it is deleted automatically at the end of that period.

8. Your rights

Under the LGPD (art. 18) you can ask for: confirmation that we process your data; access to it; correction; anonymisation, blocking or deletion of unnecessary data; portability; deletion; information about who we share it with; and withdrawal of consent, where consent is the basis for processing. You can also complain to the ANPD (Brazil’s data protection authority).

To exercise any right, write to fotosfy.admin@gmail.com from your account’s email address. We reply within 15 days.

9. Children and teenagers

Accounts are for people aged 18 or over only. Photos of children and teenagers sent by an adult are handled in their best interests (LGPD, art. 14) and only for the purposes in this policy.

10. Security

We use an encrypted connection (HTTPS), access control in the database so that each account sees only its own data, passwords and TV codes stored only as hashes, and attempt limits against PIN guessing. No system is infallible: if an incident occurs that could put you at risk, we will notify you and the ANPD, as the LGPD requires (art. 48).

11. Users in the European Union and the United Kingdom

If you are in the European Union or the United Kingdom, the General Data Protection Regulation (GDPR) and the UK GDPR also apply.

Controller: Neto Ribeiro, fotosfy.admin@gmail.com.
Legal bases: performance of a contract (art. 6(1)(b)), legal obligation (art. 6(1)(c)) and legitimate interest in security and abuse prevention (art. 6(1)(f)).
Record of deleted accounts: kept for 5 years on the basis of a legal obligation and legitimate interest (art. 6(1)(c) and (f)), as described in section 7.
Your rights: access, rectification, erasure, restriction of processing, portability and objection. You can complain to the data protection authority in your country — in Spain, the Agencia Española de Protección de Datos (AEPD); in the United Kingdom, the Information Commissioner’s Office (ICO).
Where the data is kept: in Brazil. For the provider in the United States (Stripe), transfers use standard contractual clauses.

We have not yet appointed a representative in the European Union or the United Kingdom. In the meantime, please contact us directly at the email above.

12. Changes to this policy

When this policy changes, we update the date at the top. If the change is significant, we will let you know in advance by your account’s email or within the app.