Privacy policy

1. Who we are

Capturit is a private, event-based photo and video sharing app. "Capturit", "we" and "us" mean Scott Hutcheson, trading as Capturit (ABN 13 859 501 565), New South Wales, Australia. This policy covers the Capturit app and the website capturit.app.

2. What we collect

When you create an account

• your first and last name, username and email address
• your date of birth, to check you're 16 or older
• a password, which we store only in scrambled (hashed) form, or, if you continue with Google or Apple, your name, email address and an account ID from them. If you use Apple's "Hide My Email", we receive Apple's private relay address instead.
• a profile photo, if you add one

What you create and share

• events: name, dates, details, location (if you add one), cover photo and settings
• photos and videos you add, and their captions
• comments, likes, reactions, tags, chat messages, and photos and GIFs sent in chats
• friends, guests, co-hosts, people you block, and favourite events
• reports you make, and anything you tell us when you email us

What others add about you

Other people can invite you to events, tag you in photos and videos, mention you, and report content. You can remove a tag of you at any time.

From your phone

• your time zone and whether you use iPhone or Android, so times show correctly and the app works on your phone
• a notification token, so we can send you notifications
• technical information such as your IP address, app version and error reports, to keep Capturit running, secure and fixed

The app only uses your phone's features when you ask it to:

• Photos: to add the photos and videos you pick, and to save media you choose to your phone.
• Camera: to take a photo, for example a new profile photo.
• Location: only while you're creating an event, if you choose to use your current location for it. We don't track where you are.
• Notifications: only if you allow them.

When we store your photos and videos, we save new copies that don't include location details from your phone. Your recent searches are kept on your phone only.

3. How we use it

• to run Capturit: your account, events, albums, chats and notifications
• to show your media and messages to the people you share them with
• to keep Capturit safe: checking age, handling reports, removing content that breaks our rules, banning accounts and preventing abuse
• to email you about your account, such as confirming your email, resetting your password and confirming a deletion
• to fix problems and improve the app
• to meet our legal obligations

We don't sell your information, use it for advertising, or use it to train AI.

4. Who can see what you share

• Private events: only the people in the event can see its album, guest list and chat.
• Public events: anyone with a Capturit account can find the event and see its photos and videos.
• Your profile: other people on Capturit can see your name, username and profile photo. If you turn on Private account, you won't appear in search and only your friends can see your list of events.
• Saving and sharing: anyone who can see an album can save its photos and videos to their phone or share them outside Capturit. That includes sharing a link to a single photo, which anyone with the link can open.
• Event links: anyone with an event's invite link can see its name, cover photo, date and general location, even for a private event.
• Moderation: when something is reported, our moderators can see it, including content in private events, to decide what to do.

5. Who we share it with

We use these service providers to run Capturit. They handle your information only to provide their service to us:

• Laravel Forge (server management) and our server host, to run our servers and database
• Cloudflare (R2 storage), to store photos, videos and backups
• Ably, to deliver chat messages live
• Google Firebase Cloud Messaging and Apple Push Notification service, to deliver notifications
• SendGrid (Twilio), to send emails
• Sentry, to collect error and crash reports, with sign-in tokens removed
• Google and Apple, if you sign in with them
• Google Places, to suggest places when you search for an event location
• GIPHY, which receives your GIF searches directly from the app
• Netlify and Google Analytics, for our website (see section 11)

When a comment includes a link, your phone fetches a preview directly from that website. We may also share information if the law requires it, to protect someone's safety, or with law enforcement as set out in our child safety standards.

6. Information stored overseas

Some of our service providers store or process information outside Australia, including in the United States. We choose providers that protect information securely.

7. How long we keep it

• Your account: until you delete it. Deleting takes effect 30 days after you ask, and signing in before then cancels it. See Delete your account for what's deleted.
• Photos and videos: until you delete them, the event is deleted, or your account is deleted.
• Cancelled events: deleted with all their media 30 days after they're cancelled.
• Backups: up to about 3 months, then overwritten.
• Reports and moderation records: kept as long as we need them to keep Capturit safe and meet our legal obligations.

8. Security

Information travels between the app and our servers encrypted (HTTPS). Chat messages and comments are encrypted in our database, passwords are stored hashed, and in the app, photos and videos can only be opened by signed-in people who are allowed to see them (apart from a single photo someone shares by link). No system is perfectly secure, but we work to protect your information and will tell you if a breach is likely to cause you serious harm.

9. Your choices and rights

• edit your profile, and delete your photos, videos, comments and messages
• make your account private, and remove tags of you
• block people, and choose which notifications you get
• delete your account in the app, or by email
• ask us for a copy of the information we hold about you, or to correct it, by emailing support@capturit.app

Depending on where you live, you may have other rights, such as objecting to how we use your information. Email us and we'll help.

10. Age

Capturit is for people 16 and over. If we find out an account belongs to someone under 16, we delete it.

11. Our website and cookies

The Capturit app doesn't use advertising or tracking cookies. Our website, capturit.app, is hosted by Netlify and uses Google Analytics to count visits and see which pages are used. Google Analytics uses cookies and receives information such as the pages you visit, your browser and device, and your approximate location. You can block these cookies in your browser settings, or use Google's opt-out add-on.

12. Changes to this policy

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect.

13. Contact and complaints

For questions, requests or complaints about privacy, email support@capturit.app. We'll reply within 30 days.

If you're not happy with our reply, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or to the privacy regulator where you live.