Privacy Policy

1. Information we collect

Account information. When you sign in with Apple, Google, or email we receive your name (if you share it), your email address, and an account identifier. We use this to create and secure your account and to link you to your trips.

Photos and videos. The photos and short videos you choose to add to a trip are uploaded to our servers and stored so your trip group can view and download them. Photo metadata may include the time of capture and, if you allow location access, the location where a photo was taken (used for trip map features).

Face data (opt-in). If you choose to enroll in person filtering, we process a selfie you provide to create a face signature, and we scan trip photos to find ones you appear in. Face data is used only to power the person filter inside your own trips. It is never used for advertising, never sold, and never shared across trips or with other users. You can delete your face signature at any time in Profile → Face signature (or by deleting your account), and it is removed from our systems.

Purchases. Payments are processed by Apple. We receive purchase receipts (not your payment details) to grant Trip Pass and Unframed Plus entitlements.

Device and usage data. Push notification tokens, basic device information, and logs needed to run and secure the service (e.g. rate limiting, abuse prevention).

2. How we use it

To provide the service: storing and delivering your group's album, running the reveal countdown, sending notifications your group expects (e.g. "the album is revealed"), powering the opt-in person filter, processing upgrades, and keeping the service safe. We do not sell your personal information, and we do not use your photos or face data for advertising or to train unrelated models.

3. Who can see your photos

Only members of the trip a photo belongs to. There are no public profiles, feeds, or search. While a trip's seal is on, uploaded media is locked for everyone — including the uploader — until the reveal moment set by the trip's admin. Trip admins can remove members and delete media reported by the group.

4. Service providers

We use Amazon Web Services to host the service, store media (Amazon S3), and run opt-in face matching (Amazon Rekognition). These providers process data on our behalf under data-processing agreements and do not use it for their own purposes. Sign-in is provided by Apple and Google when you choose those options.

5. Retention

Free trips remain accessible for 30 days after the reveal, after which media is deleted from our servers (save your album to your device first — it's one tap). Trips upgraded with a Trip Pass are stored indefinitely. Deleted photos, face signatures, and deleted accounts are removed from production systems promptly and purged from backups on a rolling schedule (within 30 days).

6. Your controls

You can, at any time, from the app or from this website after signing in:

• View and download every photo and video you have access to.
• Delete any photo or video you uploaded (admins can also delete within their trips).
• Delete your face signature and opt out of person filtering.
• Delete your account — this removes your account, your uploads, and your face data. Sign in to manage or delete your account.

7. Children

Unframed is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

8. Security

Media is transferred over encrypted connections and stored encrypted at rest. Access to trip media requires authentication and trip membership. No system is perfectly secure, but we design for least access and audit our practices regularly.

9. Changes & contact

We'll post any changes to this policy here and, for material changes, notify you in the app. Questions or requests: support@scientsolutions.ca.