Privacy

Privacy policy

Effective date: To be set before launch

PhotoCandy turns your photos into artwork. That means you trust us with your pictures, and this page is the honest account of what happens to them. The short version is at the top; the detail follows.

In short

Your photos are stored in a private bucket, never public, and are only opened through short-lived links issued to you.
To make the artwork, your photos are sent to third-party AI image providers that do the rendering. They are the one place your pictures leave our storage.
We never sell your photos or personal information, and we do not use your photos to train our own models.
You can delete a collection, an album or your account, which removes the images behind them from storage.
Payment card details are handled entirely by the payment processor. We never see or store your card number.

Who we are

PhotoCandy (“PhotoCandy”, “we”, “us”) provides the photo restyling service at this website. We are the controller of the personal information described here. You can reach us any time by email at support@photocandy.app.

What we collect

We collect only what the product needs to work:

Account detailsYour email address, and a name if you provide one, handled through our authentication provider so you can sign in.
Photos you uploadThe images you add to a collection, and the artwork rendered from them.
Albums and collectionsThe titles, styles, page layouts and any story text you write for an album.
Payment recordsWhich pack you bought, the amount, the currency and the processor's reference, so your credits and history are correct. Your card number is handled by the payment processor and never reaches us.
Basic usage and device dataStandard technical information such as your browser type and approximate region, used to keep the service running and secure.

How your photos are used

Your photos are used for one purpose: to produce the artwork you asked for. To do that, each photo you submit is sent to a third-party AI image provider, which renders it in the style you chose and returns the result. This is the only point at which your images leave our own storage, and it happens because the rendering cannot be done without it.

Before a batch is rendered, images are checked by an automated moderation step to keep disallowed content off the service. We do not use your photos to train any model of our own, and we do not use them for advertising.

Who processes your data

We rely on a small set of specialist providers to run the service. Each receives only what it needs for its part:

Authentication providerManages sign-in and stores your login credentials, so we never handle your password.
Application and database platformRuns the app and stores your account, album and credit records.
Object storageHolds your uploaded photos and rendered images in a private bucket that is not publicly reachable.
AI image providersPerform the actual rendering. Your source photo is sent to them per render and the result comes back to us.
Payment processorsTake your payment securely and handle all card details. We receive only the outcome and a reference.
Email providerSends transactional email, such as letting you know a large batch has finished.

These providers process data on our behalf under their own terms and security commitments. Some of them operate outside your country, so your information may be processed in other regions.

How long we keep it

Your photos and the artwork made from them are kept for as long as the collection or album exists in your account. When you delete a collection, an album or a shared layout, the images behind it are removed from storage. Your credit history and payment records are kept as long as needed for accounting and to prevent abuse. If you close your account, we delete or anonymise the associated data, except where we are required to keep certain records.

Sharing is off by default. If you turn on a share link for an album or collection, anyone who has that link can view the finished artwork on it, but not your original photos and nothing about your account. Turning sharing off makes the link stop working. We do not sell or rent your personal information to anyone, and we do not share it for anyone else’s advertising.

Your choices

You can view and delete your albums and collections from within the app at any time, which removes the images behind them. You can ask us to access, correct or delete the personal information we hold about you, or to close your account entirely, by emailing support@photocandy.app. Depending on where you live, you may have additional rights under local law, and we will honour them.

Security

Photos are stored in a private bucket that is not publicly browsable, and are only served through short-lived links issued to a signed-in owner. Payments run through established processors so card details never touch our systems. No service can promise perfect security, but we design the product to keep your images private by default.

Children

PhotoCandy is not intended for children. You must be old enough to enter a binding contract in your country to use it, and you should only upload photos of other people, including children, where you have the right and their consent to do so.

Changes to this policy

If we change how we handle your information, we will update this page and the effective date above. Significant changes will be made clear before they take effect.

Contact us

Questions about your privacy, or a request about your data? Email us at support@photocandy.app and we will reply within a day.