Privacy Policy

1. Controller and contact

PlusOne is operated by Alessandro Licata, Kernerstr. 64, 74076 Heilbronn, Germany. You can contact us at support@plusone.cam or +49 1563 0133877. The same provider details are published in our Impressum.

2. How PlusOne works

A host creates a “film”, chooses its settings and reveal time, and shares a QR code. Guests join through the App Clip or browser and contribute photos. The shared album remains hidden until the film develops.

3. Data we process

Hosts

• Apple account identifier and, if Apple supplies it, your email address and name.
• Your display name and optional profile image.
• Film names, cover images, settings, capture and reveal times, and uploaded photos.
• Purchase and entitlement information, including product, price, transaction and receipt information, and a random correlation identifier. We do not receive full payment-card details.

Guests

• A display name shown beside contributed photos.
• A random identifier generated for that film and stored on the device to count shots and restore the guest session. It is not a hardware identifier and is not used for cross-service tracking.
• Photos contributed to the film.

Usage, technical and support data

• Limited first-party events such as opening the App Clip, joining a film, taking a photo, opening a developed album, creating a film and completing a purchase. These can include a film identifier, the random guest identifier, image dimensions, product identifier and price.
• Timestamps, IP addresses and random guest identifiers used for security and upload rate limiting, plus normal request and security logs produced by our hosting providers.
• Email address, message, attachments and replies when you contact support.

Uploaded photos may depict identifiable people. The person uploading a photo is responsible for having an appropriate basis to capture and share it.

4. Purposes and legal bases

• Providing PlusOne and processing purchases: performance of a contract or steps requested before entering one (Art. 6(1)(b) GDPR).
• Providing the guest experience requested by a host: our legitimate interest in operating the shared event service (Art. 6(1)(f) GDPR).
• Security, abuse prevention and reliability: our legitimate interests (Art. 6(1)(f) GDPR).
• Limited product analytics: our legitimate interest in understanding and improving PlusOne (Art. 6(1)(f) GDPR). You may object to this processing.
• Support and legal obligations: your request, our legitimate interests, or compliance with law (Art. 6(1)(b), (c) and (f) GDPR).

We do not sell personal data, show advertising or track people across other companies’ services.

5. Service providers and recipients

• Supabase: authentication, database, backend functions and private photo storage. The production database and origin storage are located in Frankfurt, Germany.
• Vercel: website, QR-link and guest-web hosting, delivery, request and security logs.
• RevenueCat: purchase and entitlement infrastructure. RevenueCat may receive the host account UUID, product, receipt and transaction history, the film correlation identifier, and limited device, operating-system, locale, currency and usage information.
• Apple: Sign in with Apple, App Store distribution and in-app payment processing. Apple processes Apple Account and payment information under its own privacy terms.
• Email providers: delivery and processing of support correspondence.

Providers may use subprocessors. We do not permit them to use customer content for advertising.

6. International transfers

Some providers and subprocessors may process limited data outside the EU/EEA, including in the United States. Where an adequacy decision does not apply, transfers rely on safeguards such as the European Commission’s Standard Contractual Clauses and the contractual protections in our providers’ data-processing terms.

7. Retention and deletion

• Films and photos remain available while the film exists. Hosts can remove photos or delete films.
• Guest data is tied to the film and removed from the active service when that film is deleted.
• Account and purchase information is retained while needed to provide the account and related films. Transaction records may be retained longer for tax, accounting, fraud prevention or legal claims.
• First-party analytics events are kept for no more than 12 months, then deleted or aggregated.
• Upload rate-limit records are kept for no more than 24 hours.
• Support messages are normally deleted within 24 months after resolution.

Restricted backups, caches and provider logs can retain residual copies for a limited period before they are overwritten or deleted.

8. Account deletion

Hosts can initiate permanent deletion directly in the app: Profile → Account → Delete account. This deletes the PlusOne account and associated films, photos and profile image from the active service, except records we must retain by law. You may also contact us for help with a deletion request.

9. Your rights

Subject to the GDPR’s conditions, you may request access, correction, deletion, restriction and data portability; object to processing based on legitimate interests; withdraw consent; and complain to a competent supervisory authority. Email support@plusone.cam. We may need to verify your identity.

10. Security, children and changes

We use private storage, access controls, server-enforced reveal rules, encryption in transit and restricted administrative access. No internet service can guarantee absolute security.

PlusOne is not directed at children under 16. Contact us if you believe a child has provided personal data. We may update this policy as the service changes and will publish a new effective date here.