Draft: this policy describes how the Maboothy prototype works and still needs review by a lawyer before public launch.
The short version
- Photobooth and ID photos are processed on your device and are never uploaded to us.
- LDR Couple Booth photos pass through our server only so your partner can see them, and are deleted within 3 hours.
- We never sell your data or use your photos for AI training or marketing.
- We don't require accounts and don't run advertising trackers.
Camera access
Maboothy asks for camera permission only when you tap a button to turn the camera on, and stops the camera when you leave the capture screen. You can always upload photos instead.
Photobooth Studio and ID Photo Maker
Photos you take or upload are processed in your browser with on-device code. The ID Photo Maker downloads a background detection model from Google's servers to your browser the first time you use it. Your photo is not sent with that request.
LDR Couple Booth
When you create a session, our server creates a random session ID, a one-time invite key, and a private token for each participant. Photos you add are compressed on your device and sent to the server so your partner can see them. They are kept in memory only, never written to disk, never shown publicly, and removed when either of you deletes the session, an hour after you have both left, or 3 hours after the session started, whichever comes first. Optional display names are stored the same way.
Anyone holding the invite link before your partner joins could join in their place, so share it only with them. To limit abuse, the server keeps your IP address in memory for up to one hour to rate-limit session creation.
While you have Maboothy open, the same server counts how many visitors are in each booth so it can show live totals. It keeps only which booth your connection is in, a random ID your browser makes up (so your open tabs count as one visitor), and your IP address (to limit connections per network), in memory, and forgets them as soon as you leave. Other visitors see only the number, never who you are.
Data stored on your device
Your browser stores the private token for LDR sessions you joined so you can reconnect. While a studio is open, it also keeps your photos and edits in that tab's session storage so a refresh doesn't lose your work; they stay on your device and are cleared when you close the tab. You can clear all of it anytime by clearing your browser's site data.
Your rights
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to be informed, to access, to object, to erasure and to correction. Because we keep almost no personal data, deleting an LDR session removes everything we hold about it.
Contact
Questions about privacy? Contact details will be published here before launch.