Privacy
Privacy Policy
What we collect, why we need it, and how to get it deleted — in plain language, not legalese. The short version: your event photos belong to you, and we ask guests for almost nothing.
Last updated 26 May 2026
1. Introduction
This policy explains what data Flick collects, how we use it, and the rights you have over it. If anything here is unclear, ask us directly at hello@flickapp.in.
2. Data We Collect
From Hosts
- Email address for authentication and communications.
- Event details, including roll name, date, and settings.
- Payment information processed by Stripe or Razorpay. We never see card numbers.
- Device push notification tokens for reveal notifications, with your permission.
From Guests
- First name only, entered voluntarily before shooting.
- Photos captured during the event.
- Browser type and device type for camera compatibility, not stored long-term.
- IP address logged temporarily for security rate limiting, not stored as a profile field.
We do not collect
- Guest email addresses.
- Guest phone numbers.
- Guest location data.
- Any biometric data or facial recognition data.
3. How We Use Data
Host data
- To provide the Flick service, including creating rolls, payments, and notifications.
- To send transactional emails such as roll confirmation, gallery reveal, and expiry warnings.
- To improve the service using aggregated, anonymised analytics only.
Guest data
- Photos are stored privately and only accessible to the host and other guests after the host reveals the gallery.
- First names are displayed alongside photos in the gallery.
- We do not use guest photos for any purpose other than serving them back to the host and guests for that event.
4. Data Storage and Retention
- Host account data is retained while the account is active.
- Roll photos and contributor data are automatically deleted when the roll's storage period expires: 48 hours for Free, 30 days for Mini, 90 days for Party, 1 year for Wedding or Big Event, and 5 years if Archive upgrade is purchased.
- After deletion, data is permanently removed from our servers and cannot be recovered.
- Hosts can request early deletion by emailing hello@flickapp.in.
5. Data Sharing
We share data with these third parties only:
- Supabase for database and file storage. Data is stored in US-East servers.
- Stripe for international payment processing.
- Razorpay for India payment processing.
- Resend for transactional email delivery.
- Vercel for web hosting and serverless functions.
We do not sell data to third parties. We do not use data for advertising.
6. Cookies
We use minimal session cookies for authentication only. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
7. Your Rights
You have the right to:
- Access your personal data by emailing hello@flickapp.in.
- Delete your account and all associated data.
- Request a copy of your data in machine-readable format.
- Withdraw consent for marketing emails at any time through the unsubscribe link in emails.
Guests can request deletion of their photos by contacting the event host or emailing hello@flickapp.in with the roll URL and their first name.
8. Children's Privacy
Flick is intended for adult event hosts (18 and over) and is not directed at children. We do not knowingly collect personal data directly from children, and we never profile, track, or serve advertising to anyone.
Children may appear in photos taken by guests at an event. In that case, the host is responsible for obtaining the consent of everyone depicted, including parental or guardian consent for any minors, as set out in our Terms.
If you believe a child's data has been collected without proper consent, email hello@flickapp.in with the roll link and we will delete it promptly.
9. India — DPDP Act 2023
We comply with India's Digital Personal Data Protection Act 2023. Data of Indian users may be stored on US-based servers, including Supabase US-East. You may request data deletion at any time by contacting hello@flickapp.in.
10. International Users
If you are outside India, your data may be transferred to and processed in India or the United States. By using Flick, you consent to this transfer.
11. Changes to This Policy
We will notify you of significant changes via email with 7 days notice.
12. Grievance Officer (India)
In line with India's Digital Personal Data Protection Act 2023 and the IT Rules, you can raise any privacy complaint or data request with our Grievance Officer for Flick Camera, Bengaluru, India, at hello@flickapp.in. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
13. Reporting Illegal or Non-Consensual Content
To report illegal content, or a photo of you or a minor shared without consent, email hello@flickapp.in with the roll link. We remove confirmed violating content within 24–36 hours and may suspend the host responsible.
14. Contact
Data Controller: Flick Camera
Email: hello@flickapp.in