Privacy Policy
Last updated: January 2025 · Effective immediately
Summary: Your selfie is NEVER stored. We use your phone number only to retrieve your photos. All biometric data is deleted after the event. We comply with India's DPDP Act and GDPR.
1. What data we collect
- →Phone number — used to identify you and retrieve your matched photos.
- →Name — used to personalise your experience.
- →Selfie — captured temporarily for face matching only. Never stored on any server.
- →Biometric face signature — a mathematical representation created by AWS Rekognition for matching purposes only.
2. How we use your data
- →Your selfie is processed in real-time to create a biometric signature, then immediately discarded.
- →The biometric signature is used to search the event photo gallery.
- →Your phone number and matched photos are saved so you can retrieve them on future visits.
- →We do not use your data for advertising, profiling, or any purpose other than photo matching.
3. Data storage & security
- →Photos are stored on Cloudinary's secure cloud infrastructure with industry-standard encryption.
- →Biometric signatures are stored in AWS Rekognition, a SOC 2 compliant service.
- →User data (name, phone) is stored in Google Firebase with strict access controls.
- →All data transmission is encrypted via HTTPS/TLS.
4. Data deletion
- →All biometric face signatures are permanently deleted when the event ends.
- →You can request deletion of your data at any time by contacting us.
- →We do not retain selfie images after the matching process is complete.
5. Your rights (DPDP Act & GDPR)
- →Right to access — you can request what data we hold about you.
- →Right to deletion — you can request your data be deleted at any time.
- →Right to correction — you can request corrections to inaccurate data.
- →Right to withdraw consent — you can stop using the service at any time.
6. Third-party services
- →AWS Rekognition — face detection and matching (Amazon Web Services).
- →Cloudinary — photo storage and delivery.
- →Google Firebase — user data and authentication.
- →All third-party services are GDPR compliant and operate under their own privacy policies.
7. Contact us
- →For privacy-related requests, contact us at: privacy@clicknshare.in
- →We will respond to all requests within 72 hours.
Request Data Deletion
Under India's DPDP Act, you can request we delete your data — your name, phone number, and matched photo references. Enter the phone number you used to search for photos, and we'll process your request.