Your privacy is important to us. ApnaMoment ("we", "us", or "our") operates the photo collection platform at app.apnamoment.com and the marketing site at apnamoment.com (together, the "Service"). This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have.
This Privacy Policy does not cover information you submit on third-party websites, apps, or platforms — even if we link to them or communicate with you there. For example, content you post on social media is governed by those platforms' privacy policies, not this one.
Our responsibilities
We determine how and why your data is processed when you use ApnaMoment. We only collect personal information that is reasonably necessary to provide the Service. We do not sell or rent your personal information to third parties for their marketing purposes.
Your responsibilities
Please read this Privacy Policy together with our Terms of Service. If you provide us with information about another person (for example, when uploading photos that include other people), you confirm that you have the right to share that information with us for the purposes described here.
Information we collect
Information we collect falls into two broad categories: information you provide voluntarily, and information collected automatically when you use the Service.
Host accounts
When you sign in with Google, we receive your Google account identifier, name, and email address. We store an encrypted refresh token so we can upload photos to your Google Photos albums on your behalf. We do not store your Google account password.
Guest uploads and user-generated content
Guests may provide a display name, email address (if signing in with Google), and the photos they choose to upload. Accepted formats include JPEG, PNG, HEIC, HEIF, and WebP (up to 50 MB per file). Upload metadata (timestamps, event association, contributor name) is stored in our database.
Content visible in a gallery or slideshow is accessible to anyone the host has shared the link or QR code with, and to anyone the host has granted access (including delegated moderators). Hosts control whether galleries are password-protected or moderated.
Photos
Uploaded photos are transmitted to Google Photos albums owned by the event host. We store photo metadata and references in our database to power galleries, moderation, slideshows, and the host dashboard.
Push notifications
Hosts and delegated moderators may optionally enable push notifications for moderation alerts. If enabled, we collect a device push token through Firebase Cloud Messaging. You can disable notifications in your browser or device settings at any time.
Technical and log data
We collect standard server logs (IP address, browser type and version, request timestamps, pages visited) for security, rate limiting, and troubleshooting. Session cookies are used to keep hosts signed in and to manage gallery access tokens.
While this information may not identify you on its own, it may be possible to combine it with other data to identify an individual.
How we use information
- Provide the photo collection, gallery, slideshow, and moderation features you request
- Sync uploads to the host's Google Photos account
- Authenticate users and prevent abuse or fraud
- Deliver push notifications to hosts and moderators who have opted in
- Improve reliability, security, and performance of the Service
- Comply with legal obligations and enforce our Terms of Service
Photo privacy and ownership
Event galleries are accessible only via QR codes, private links, or passwords the host shares. They are not intended to be publicly listed or discoverable without that access.
Hosts and guests retain ownership of the photos they upload. By uploading content, you grant ApnaMoment a limited license to store, process, display, and transmit that content solely to provide the Service — including syncing photos to the host's Google Photos albums and displaying them in galleries and slideshows the host enables.
Google services
ApnaMoment uses Google OAuth for authentication and the Google Photos Library API for album storage. Your use of Google services is also governed by Google's Privacy Policy. We request only the scopes needed to create albums and upload photos you authorize.
Third-party service providers
We share data with service providers who help us operate the Service, including:
- Google (authentication and Google Photos storage)
- Firebase / Google Cloud Messaging (optional push notifications)
- Email delivery providers (SMTP or similar)
- Stripe (payment processing)
- Cloud hosting and database providers
These providers process data on our behalf and only as needed to deliver the Service.
Data sharing
We do not sell your personal information. We share data only with the service providers described above, when required by law, to protect the rights and safety of users, or in connection with a business transfer (such as a merger or acquisition). Photos uploaded to an event are visible to the host and, when the host enables it, to other attendees via gallery or slideshow links.
International transfers
We may store and process personal information in the United States and other countries where we or our service providers maintain facilities. These countries may not have the same data protection laws as your country.
Data retention
We retain account and upload metadata while your moment is active. Hosts may delete moments and associated data from the dashboard. When we no longer need to retain information, we delete or anonymise it, except where we are required to keep it for legal, accounting, or security purposes.
Content synced to Google Photos remains in the host's Google account according to Google's retention policies. We do not guarantee that metadata or references in ApnaMoment will be preserved indefinitely.
Data breaches
If we become aware of a data breach that affects your personal information, we will take steps required by applicable law, which may include notification where legally required.
Security
We use measures such as encrypting Google OAuth tokens at rest, HTTPS for traffic, and access controls for event data. No method of transmission or storage is completely secure, and we do not guarantee that your information will be secure in all circumstances.
Cookies and similar technologies
We use cookies and similar technologies to keep you signed in and manage gallery access. You can turn off or delete cookies through your browser settings. If you disable cookies, some features (such as staying signed in) may not work as expected.
Your choices and rights
- Hosts can disconnect Google access by removing ApnaMoment from their Google account settings.
- Guests upload only the photos they choose; they are not required to create an account.
- You may request access to, correction of, or deletion of personal information we hold about you. We do not retain uploaded photo files — photos are stored in the host's Google Photos account — so we cannot delete photos once they have been uploaded. To remove a photo, contact the event host or remove it through Google Photos.
- You may object to or request restriction of certain processing, where applicable law provides those rights.
- We will not discriminate against you for exercising your privacy rights.
Choosing not to provide information
You are not required to provide personal information to us, but if you choose not to, some features may not be available — for example, hosts must sign in with Google to create moments and sync photos.
Complaints
If you have a complaint about how we handle your personal information, contact us at support@apnamoment.com with details of your concern.
Minimum age
ApnaMoment is not directed at anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided us data, contact us and we will delete it.
California privacy rights
If you are a California resident, you may have the right to know what personal information we collect, request deletion of your personal information, and not be discriminated against for exercising these rights. We do not sell personal information. To make a request, email support@apnamoment.com with "California Privacy Rights Request" in the subject line.
European privacy rights
If you are in the European Economic Area or United Kingdom, you may have additional rights under the GDPR, including the right to access, rectify, erase, restrict, or port your personal information, and to object to certain processing. Our lawful bases for processing include performing our contract with you, your consent (where required), our legitimate interests in operating and improving the Service, and compliance with legal obligations. Contact us to exercise these rights.
Changes
We may update this policy from time to time to reflect changes to our practices or applicable law. We will post the revised version on this page and update the "Last updated" date. If changes are significant, we may provide additional notice where required by law.
Contact
Questions about this Privacy Policy? Email support@apnamoment.com.