Privacy Policy

1. Introduction

SharePix is a private way to create and share photo albums with the people you choose. It is operated by Coral Orca Limited.

This policy explains what we collect, why we collect it, and what you can do about it. It is meant to be read — if anything here is unclear, email support@sharepix.app and we'll explain it.

2. What We Collect

We collect as little as we can. Specifically:

a. Photos and videos you upload

• The photos and videos themselves
• Technical details we generate in order to display them — file size, dimensions, upload time, and a blurred placeholder image
• Captions, comments and reactions you write

b. Your account

• An anonymous account identifier, created the first time you open the app
• The display name and profile picture you choose
• Your email address — only if you choose to link one so you can recover your account. We use it to send you sign-in links, and for nothing else
• A record of the storage packs you buy: which pack, when, and the App Store transaction identifier

c. Device and usage information

• Device type, operating system version, and app version
• Counts of albums created, albums joined, and photos uploaded
• How much storage your account is using against its quota
• Crash and error reports, if the app malfunctions — what went wrong, the screen it happened on, device type, operating system version, app version, and your anonymous account identifier. These reports never include your photos, your email address, or the private links used to display your media
• If you enable notifications: a device push token, plus the device’s language and time zone — used only to deliver and localize notifications, and deleted when you sign out or delete your account

We never receive your payment card details — purchases are handled entirely by the App Store. We do not access your contacts or your location, and we do not read your photo library beyond the items you pick to upload.

3. What We Never Do

• We do not show ads in SharePix, and we do not share your data with advertising networks
• We do not sell, rent or trade your personal data or your photos — to anyone, for any price
• We do not use your photos, videos, captions or comments to train artificial intelligence models, and we do not hand them to anyone else to do so
• We do not track you across other apps and websites, and we do not build advertising profiles
• Nobody at SharePix browses your albums. We access the content of an account only when you ask us to for support, or where the law requires us to act on a report

SharePix is paid for by one-time storage purchases. That is the entire business model. Your photos are not the product.

4. How We Use Your Data

• To let you create albums and share them with people you invite
• To store your photos and videos and deliver them to members of that album
• To measure storage against your quota, and to credit the packs you buy and the referral bonuses you earn
• To answer you when you contact support
• To detect abuse, enforce our Terms, and comply with the law

Where the law requires a legal basis, we rely on: performing our contract with you for the core service; your consent where you give it, such as linking an email address; and our legitimate interest in keeping the service safe and working.

5. Invite Links and Who Can See Your Albums

Albums are private. Only the person who created an album and the people who join it through an invite can see what's inside.

• An invite link covers a single album and expires 48 hours after it is created. A link created by the album's creator can be used at most 10 times; a link created by any other member, at most 3 times
• Any member of an album can create an invite link for it, unless the album's creator has set that member to view only. The album's creator can see and revoke every link; other members can revoke the links they created. Links created by someone who leaves or is removed from an album stop working. Revoking stops new people from joining; it does not remove people who already joined
• Anyone holding a link that hasn't expired can join, so treat a link like a key and send it only to people you want in the album

Opening a link in a web browser shows the album's name, the display name of the person who invited you, how many people are in the album, the profile pictures of a few of them, and a few small preview thumbnails — enough for someone to decide whether to install the app. A member with no profile picture is shown as the first letter of their name instead. It never shows member names beyond the person who invited you, full member lists, comments, or anything beyond those thumbnails, and these pages are not listed or indexed publicly.

6. Data Storage and Security

• Photos and videos are stored in Cloudflare R2. Album and account data is stored in Google Firestore
• Our storage is private: the app never loads your media from a public address. Every image and video is delivered through a short-lived signed link, issued only to a member of that album
• Server-side rules restrict every read and write to the account entitled to it, and clients cannot reach the storage system directly
• Data is encrypted in transit and at rest by our providers

No system is perfectly secure, and a link you forward yourself is outside our control.

7. Data Retention

• Your photos and albums are kept for as long as you keep them
• A deleted photo disappears from the album immediately and its space is returned to the album owner's quota at once. A copy is held on our servers for up to 30 days as a recovery net in case of mistakes, and is then permanently erased
• Invite records are deleted 30 days after the invite expires. Records of who joined through an invite are kept for 90 days
• Deleting your account is scheduled 14 days ahead, on a date shown to you, and can be cancelled until then. On that date we remove the albums you created together with everything in them, your comments, your reactions, and your profile. Photos and videos you added to other people's albums stay in those albums, unless you chose to remove them when scheduling the deletion.

8. Your Rights

Depending on where you live — the GDPR in the EU and UK, the CCPA in California, and comparable laws elsewhere — you may have the right to access, correct, export or delete your data, to withdraw consent, and to complain to your data protection authority.

• You can delete everything yourself, at any time: Settings > Profile > Delete Account. To also remove the photos you added to other people's albums, use the option in the deletion flow, or delete them in the album first.
• For anything else, email support@sharepix.app. We aim to answer within 30 days

Our providers (Google and Cloudflare) operate infrastructure in several countries, so your data may be processed outside the country you live in, under those providers' data-transfer safeguards.

9. Children's Privacy

SharePix is intended for people aged 13 and over. If you are under 13, please do not use the service. A parent or guardian who believes their child's data was collected should contact us and we will delete it.

10. Third-Party Services

We rely on these providers to run SharePix:

• Google Firebase — sign-in, database and server functions
• Cloudflare R2 — photo and video storage
• Apple App Store — processing purchases of storage packs
• Sentry — crash and error reporting, so we can find and fix defects
• Expo — relaying push notifications to Apple’s notification service

We do not use any third-party advertising or analytics SDK in the app. The only diagnostic tool we use is the crash reporter above, and the only usage figures we look at are aggregate counts produced by our own backend. Each provider above has its own privacy practices, which we encourage you to review.

11. Changes to This Policy

We may update this policy from time to time. The effective date at the top always tells you which version you are reading, and we will let you know in the app or on the website when a change is significant.