Privacy Policy

This Privacy Policy explains how We ("We", "us", "our") collects, uses, shares, and protects your information when you use the We mobile app and website (the "Service"). We is a private photo sharing app for families and close friends. We built it to keep your memories private: there are no public feeds, no algorithms deciding what you see.

1. Information we collect

Information you provide

• Account information: your name, email address, and profile photo. You sign in through Firebase Authentication, which may use Apple or Google sign-in.
• Content you create: the photos and videos you upload, and the albums, events, categories, comments, and likes you create. Photos and videos may include metadata such as the date and time taken and, if enabled on your device, the GPS location where they were taken.
• Communications: messages you send us through in-app support (our chat is provided by Crisp) or email.

Information collected automatically

• Usage and device data: app version, device type and operating system, and in-app events (for example, screens viewed and features used), collected through Firebase/Google Analytics.
• Subscription and storage data: your current plan, storage usage, and entitlement status. Payment details are handled by the app stores, not by us (see Section 6).

Information from your photo library (on your device)

When you use Smart Albums, the app reads your photo library on your device to read photo dates and locations and suggest albums. This analysis happens on your device. Nothing from your library is uploaded to us unless and until you approve a suggestion (see Section 3).

2. How we use your information

• To provide the Service: store, organize, and let you share your albums and events with the people you invite and approve.
• To power features such as Smart Albums, the memories Map, "On This Day" memories, and Categories.
• To manage your account, subscription, and storage.
• To keep the Service safe: content moderation, preventing abuse, and enforcing our Terms.
• To provide customer support and respond to your requests.
• To understand how the Service is used and to measure our marketing (analytics and advertising conversion), so we can improve.
• To comply with legal obligations.

3. AI features and automated processing

We uses automated processing to help organize your photos. Here is exactly what happens:

• On-device scanning: Smart Albums reads the dates and locations of the photos on your device to group them into suggested albums. This runs on your device, and nothing is uploaded while you are only reviewing suggestions.
• Place names and titles: when you approve a suggested album, We may send the approximate geographic coordinates (and the date range) of that album, not your photos, to our servers to look up a place name and to generate a friendly album title. Title generation uses a third-party AI provider (Anthropic). We do not send your photos for this step.
• Image analysis: photos you upload may be automatically analyzed to detect labels (which help organize your photos) and to help with safety and moderation (for example, detecting explicit content). This runs on our own infrastructure and through Cloudflare (Workers AI).

These processes are used only to provide and protect the Service. They are not used to build advertising profiles.

4. Location data

If location is enabled for your camera, your photos may contain the GPS coordinates where they were taken. We uses this location to place your albums on the Map and to group and name Smart Albums by place. You can turn off location for your camera in your device settings at any time; existing photos may still contain location data they were captured with. We do not track your live location.

5. How we share information (service providers)

We do not sell your personal information. We share it only in these ways:

• With people you invite: your content is visible to the members and guests you approve for a given album or event. You control who is approved.
• With service providers ("sub-processors") who help us run the Service:
  • Cloudflare (media storage, delivery, and image analysis via Workers AI)
  • Anthropic (AI album titles)
  • RevenueCat (subscription management)
  • Apple and Google (app distribution and payment processing)
  • Google / Firebase (authentication, analytics, and advertising measurement)
  • Crisp (in-app support chat)
• For legal reasons: to comply with the law, enforce our Terms, or protect the rights and safety of users and the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

6. Payments and subscriptions

We offers a free tier and paid storage plans. All purchases are processed by the Apple App Store or Google Play, and subscription status is managed through RevenueCat. We do not receive or store your credit card or payment details. We store only your plan, entitlement status, and storage usage so we can provide the correct amount of space.

7. Data retention and deletion

We keep your information for as long as your account is active. You can delete your account at any time from the app (Profile, then delete account). When you delete your account, we delete your content and personal information from our active systems, except where we must keep certain records to comply with the law or resolve disputes. Backups and logs are retained for a limited period and then removed.

8. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS) and access controls. For added privacy, the app can block screenshots and screen recordings of private content. No method of transmission or storage is completely secure, but we work to protect your data and to notify you where required by law in the event of a breach.

9. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. If you are in the EEA/UK, these rights arise under the GDPR/UK GDPR. If you are in California or another US state with privacy laws, you may have rights to know, delete, correct, and opt out of "sale" or "sharing" of your information. We do not sell your personal information. To exercise any right, contact us (Section 13) or use the in-app account controls. We will not discriminate against you for exercising your rights.

10. Children's privacy

We is intended for adults (18+) to privately keep and share family memories, which may include photos of their own children, under their responsibility and control. The Service is not directed to children, and we do not knowingly create accounts for or collect personal information directly from children under the age of 13 (or under 16 where required). If you believe a child has created an account or that we hold a child's information without appropriate consent, contact us and we will remove it.

11. International data transfers

We and our service providers may process your information in countries other than your own, including the United States and the European Union. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised policy.

13. Contact us

If you have questions about this policy or your information, contact us at [email protected].