Privacy Policy

Effective July 20, 2026

Phomo is an invite-only photo app for real events. You join with a code or link from someone in that event. There is no public feed and no way to browse strangers’ photos.

This policy explains what we collect, why we collect it, and what choices you have. If something here does not match what you see in the app, the app wins — and you should email us so we can fix the docs.

What we collect

Account and device

• A server-generated user ID and session tokens so the app can sign you in.
• An installation ID on your device so we can keep your account tied to that install and deliver push notifications.
• A username you pick, and an optional profile photo.
• A push token if you allow notifications (event start, unlock, that kind of thing).

We do not ask for your email or phone number to use Phomo. If you write to support, we will see whatever you put in that message.

Events and photos

• Event details you or a host create: name, start and end times, timezone, optional location text, cover image, who is in the event.
• Photos you upload, plus basic metadata we need to store and show them (which event, who uploaded, when).
• Which events you joined or are hosting.

During an active event you only see your own shots. After the event ends, participants get a shared gallery for a limited window so everyone can save what they want. Other people in that event can see what you uploaded according to those rules.

Once someone can view a photo, they can screenshot or save it outside Phomo. Do not upload anything you are not okay sharing with everyone in that event.

Technical logs

Like most apps, we keep server logs (requests, errors, security events) to run and protect the service. Push delivery goes through Expo and Apple/Google as applicable. Our backend runs on Amazon Web Services in the United States (us-east-1).

What we do not collect

• Advertising IDs or cross-app tracking profiles.
• Continuous GPS location (optional event location is text a host types in).
• Payment or government ID for normal use.

How we use your information

• Run Phomo: sessions, events, uploads, galleries, profiles, notifications.
• Keep the service secure and fix things when they break.
• Handle support requests and enforce our Community Standards.
• Comply with law when we have to.

We do not sell your personal information. We do not use your photos for ads.

Who sees your information

• Other people in your events — per the event rules above.
• Service providers — mainly AWS for hosting and storage, and push providers to deliver notifications. They process data on our instructions.
• Law enforcement or safety — if required by law, or when we reasonably believe someone is at risk.

How long we keep things

Event photos are meant to be temporary. After an event ends there is a wait period, then a shared unlock window, then scheduled cleanup deletes the event and its photos from our systems.

Your account data (profile, sessions, installs) stays until you delete your account. Account deletion removes your identity and wipes non-expired event data you are tied to, per our deletion flow. Backups and logs may hang around a bit longer before normal rotation.

Safety reports may be kept longer when we need them for abuse investigations.

Your choices

• Change your username or avatar in Profile.
• Delete photos you uploaded where the app allows it.
• Leave events or end ones you host.
• Delete your account in Profile.
• Turn off camera, photos, or notification permissions in iOS Settings.

Depending on where you live, you may have additional rights (access, correction, deletion, export). Email us and we will help.

Children

Phomo is not for anyone under 13. If you are under 13, do not use the app. If we learn an account belongs to someone under 13, we will delete it.

Security

We use HTTPS, authenticated APIs, and access-controlled storage. No system is perfectly secure, but we take reasonable steps for an app our size.

International users

If you use Phomo outside the United States, your data may be processed in the U.S. where our servers live.

Changes

We may update this policy. When we do, we will change the date at the top. Material changes may also get a notice in the app.