Privacy policy

What we collect

• Photos you take or add — stored so they can be shared with the members of the event you added them to. Nothing is public: only people who joined the event (via its invite) can see them.
• Your display name — the name you type when hosting or joining, shown next to your photos to other members of the event.
• Your email address — only if you sign in with Apple as a host, to identify your account.
• Device push token — if you allow notifications, so we can deliver event notifications (new photos, likes, reveal time).
• Purchase history — event size and Keep purchases are processed by Apple; we store which size an event has and whether Keep was granted, never your payment details.
• Optional survey answer — how you heard about WeWere, if you choose to answer.
• How the app is used — which screens and actions, so we can see what works and what doesn’t. Recorded against a random id, never your name or email. In the app this is on; on this website it happens only if you agree — see below.

Analytics

We use Amplitude (EU servers) to understand how WeWere is used and how people find us — how many events get created, where a flow goes wrong, whether a link we shared brought anyone here. It is our own product analytics and nothing more.

On this website we ask before storing anything on your device. Until you choose, we send only a one-off page view with no stored id and no IP. If you agree we keep a random id in your browser, along with how you arrived — the link you followed, and the site that referred you. If you decline we store only that decision, so we stop asking.

Until you allow it, we only send a single page view with no stored id and no IP — enough to see that someone landed, not to recognise you later. After you allow, we use your browser’s local storage rather than cookies. That is a technical difference and not a meaningful one: the law treats anything stored on your device the same way, which is exactly why we ask rather than assume. What it then holds is a random number, no name, no email, and nothing that identifies you anywhere else.

In the app analytics run without a banner. There is no advertising identifier, no other company involved, and nothing that follows you outside WeWere; you are identified by the same random account id the rest of the app already uses.

To change your mind on this website at any time, use Analytics choices at the bottom of any page.

What we don’t do

• No advertising networks, no ad identifiers, no tracking of you across other apps or websites, no sale of data.
• No profiling: we look at what happens in WeWere in aggregate, never at an individual to judge them.
• No public sharing: photos are only visible to event members (and, if the host enables the live wall, to people the host shares the wall link with).

Storage & deletion

Your account, events and photo records are stored with Supabase (hosted in the EU). The photo files themselves are stored with Cloudflare R2 (hosted in the EU). Both act only on our instructions and neither uses your photos for anything of their own.

Live albums stay online 45 days after the event, then the album goes dark: nobody can view it and nobody can take new shots. Guests should use Save all in the app to copy photos to their camera roll. That is free.

Keep is an optional one-time purchase that keeps that album online one more year. It is not a subscription, and it is not all of your albums.

Deleting a photo removes it from the album for everyone, immediately. Deleting an event removes the album for everyone, immediately. In both cases the app can no longer produce a link to the underlying image file, so nothing can reach it.

The file itself is erased within 30 days. We keep that short gap deliberately: an accidental deletion is recoverable during it, and a mistake on our side is something we can put right rather than explain. If you want yours erased sooner, email us and we will do it, and tell you when it is done.

You can delete your account in the app, under You → Account → Delete my account. It is immediate and cannot be undone: your sign-in is severed, so signing in again creates a new, empty account rather than returning you to the old one. Your name is removed from every photo you took, and your likes are deleted.

Two things deliberately survive, because they are not only yours. Events you hosted stay readable for the guests who were there until the 45-day clock, or until Keep on that album runs out — then they close like any other album. They are not destroyed the moment you delete your account. And the photographs you contributed to other people’s albums stay in those albums, with nothing left linking them to you — no name, no account, and no location data, which we never store in the first place. If you want a specific photo removed as well, email us.

Contact

WeWere — kostamouras@gmail.com