What the app collects.

Norteira, Lisboa, Portugal, is the controller for the app. Each country market — Portugal, Spain, Italy, Greece, France, Austria, Iceland and Japan — runs its own service and its own database; your account lives on the market you signed up to, not in a shared pool. Write to [email protected] about any of it.

To sign up we need a name, an email address and a password, or a Google or Apple sign-in. With Apple you may hide your email; we then only ever see the relay address.

Clients add a phone number, so a photographer can reach you on the day, and may add a photo. Photographers add the things a profile needs: a tagline, a biography, languages, the kinds of shoot they do, years of experience and where they cover.

Photographers in some markets enter bank details — an IBAN and the account holder’s name — so they can be paid. These are stored by that market for payouts and are not used for anything else.

Your sign-in token is kept in the phone’s secure keychain, one per country, and is removed when you sign out.

The app does not know which country your account is on until it finds it. When you sign in with an email and password, it asks every market in turn whether that account exists there. Your address and password therefore reach the servers of markets you may have no account with. They are checked and discarded; no market keeps a record of a failed lookup.

The app can open your photo library so you can pick images: a profile or cover photo, portfolio work, a picture in a message, or photos with a review. It never opens the camera to take a picture — the camera and microphone are used for one thing only, video calls between a photographer and their client, and only while a call is running.

What you pick is uploaded to your market’s own storage. Files a photographer delivers are uploaded as they are, at full quality, so any camera metadata inside them — which can include where the photo was taken — travels with the file. If that matters to you, strip it before uploading.

The app never scans your library, and never reads photos you have not chosen.

No location. No contacts. No calendar. No advertising identifier. There is no analytics SDK, no crash-reporting SDK, no advertising SDK and no attribution SDK in the app — if it crashes, the error is shown to you on the screen and stays on your phone unless you copy it to us yourself.

Google and Apple, if you use their sign-in. They tell us the email address on the account and nothing more.

Push notifications go through Expo’s push service, and on Android through Firebase Cloud Messaging, which is how a notification reaches a phone at all. They carry the message you see, not your data.

Video calls run on LiveKit. The call is between you and the other person; we do not record it.

App updates are checked with Expo when the app starts.

Money never moves inside the app. Payments happen on the market’s website in your browser, and the payment processor there handles the card — the app never sees it.

Messages between a client and a photographer are stored by the market so both sides keep the thread. If you use the helper that translates or tidies a draft, that text is sent to our own server to do it.

You can delete your account from inside the app — Settings, then delete, then confirm. It removes the account and its data from that market. If you hold accounts in more than one country, delete in each, or ask us and we will do it.

Step by step, and what is kept afterwards.

Under the GDPR you can ask what we hold, get a copy, correct it, delete it, or object to our using it. Write to [email protected] and we will answer. This page covers the app; the website has its own.