Privacy Policy
Photogether is built to know as little about you as possible. This is the whole truth about what we handle, for how long, and why.
Who runs Photogether
Photogether is operated by We Remagine One AB (org. nr 559316–0228), Sandbäcksgatan 20 C, 653 48 Karlstad, Sweden — the data controller for the data described here.
No accounts, no profiles
You never have to register. Your name in an album is something you type yourself; it's visible only to the others in that album, and it's deleted with the album. Photogether doesn't know who you are.
Photos
Photos you share are stored securely in the EU and shown only to the album's participants. When the album expires or is ended, everything is deleted — the photos, the names, all of it. Deleted means removed from storage, not hidden.
Location and photo metadata
The app never uses your device's location services — it doesn't even ask. If your camera embeds GPS in a photo, we reduce it to an approximate area (about a kilometre) and never keep exact coordinates. That rough area stays with the photo — so a copy you download carries it, and it can place the moment on a map — but never anything more precise. A shared photo also keeps its technical details — such as camera and capture settings; device-identifying metadata is removed.
Identifier
The app uses an anonymous identifier to understand how the product is used in aggregate (for example, how many people come back). It can't be linked to your name or identity, and it resets if you reinstall the app.
Push notifications
If you allow notifications, a push token (via Apple or Google) is stored in your album session. It is deleted when the session or the album is deleted.
Purchases
Paid unlocks are bought through the App Store or Google Play. Payment is handled entirely by Apple or Google — Photogether never sees your card details, your store account, or your identity. To confirm a purchase we receive an anonymous transaction reference from the store, which we verify and keep as a bookkeeping record.
What survives a deleted album
Anonymized statistical records of how the wave grew and ebbed, and equally anonymized service-level tallies — how many albums of each kind were active over time. No names, no photos, no photo IDs, no album identities — nothing that can be linked to a person or a specific gathering.
If an album was paid for, the purchase record also remains — the store's transaction reference, the product, and the level it unlocked — because bookkeeping and refund handling legally outlive the album. Its link to the deleted album is severed, and it contains nothing about the people or the photos.
Children
Photogether isn't aimed at children — it's a tool for people organizing and attending real-world gatherings. If a child does end up in an album (a family party, say), nothing changes: there's nothing here a parent would need to consent to — no accounts, no advertising, no profiling, no tracking. The same minimal handling described above applies to everyone, whatever their age.
Your rights (GDPR)
You have the right to access, rectification, and erasure. The honest answer to most requests: Photogether holds no identified personal data about you — that is the architecture, not a policy claim. Contact: hello@photogether.one. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), the supervisory authority for data protection in Sweden.
Where and with whom
Your data is processed in the EU by third-party infrastructure providers acting on our behalf — for hosting, storage, and delivery. They process it only to provide their service to us, under their own data-protection obligations. We don't transfer it elsewhere, and we never sell it. The one exception is push notifications, which by their nature are delivered through Apple's and Google's notification services.
Photos are stored with Cloudflare R2 in the European Union, deleted when the album expires, and never linked to your name.
The website
This site counts page views, so we can see which pages are actually read. It sets no cookies, stores nothing on your device, and cannot follow you to other sites — there is no profile, no advertising, and so nothing to opt out of. The fonts and images come from our own domain, so reading this page doesn't quietly tell anyone else that you were here.
Changes
We may update this policy from time to time. The date above shows when it last changed.