Privacy Policy

Introduction

WholeStory ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application and related services.

We believe your memories belong to you. Our approach to privacy reflects this belief: we collect only what's necessary to provide the service, and we never sell your data.

Information We Collect

Information You Provide

• Account Information: When you create an account using Google or Facebook sign-in, we receive your name, email address, and profile picture from your chosen provider.
• Contact Information: If voluntarily provided for account recovery or specific features, we collect your phone number.
• Photos and Media: Photos you upload to albums are stored on our servers to enable sharing with album members.
• Album Information: Album names, dates, and membership information you create or join.

Information Collected Automatically

• Device Information: Device type, operating system, and app version for troubleshooting and compatibility.
• Usage Data: Basic app usage patterns to improve the service (not individual photo viewing).

How We Use Your Information

We use your information to:

• Provide and maintain the WholeStory service
• Enable photo sharing within albums you create or join
• Authenticate your identity and protect your account
• Send important service updates and account alerts
• Improve and optimize the app experience

How We Share Your Information

We do not sell your personal information.

We may share information in these limited circumstances:

• With Album Members: Photos and your display name are visible to other members of albums you join.
• Service Providers: We use trusted third parties for hosting (database and cloud storage), authentication (OAuth providers), and image processing. These providers are contractually bound to protect your data.
• Legal Requirements: We may disclose information if required by law or to protect rights and safety.

Data Storage and Security

Your memories are stored using high-level security measures. We implement industry-standard protections including:

• Dedicated Infrastructure: Your personal data is stored on professional, managed database servers using isolated virtual instances.
• Encryption at Rest: All personal data and media are encrypted at rest using AES-256 or equivalent industry standards.
• Encryption in Transit: All data transmitted between your device and our servers is protected via HTTPS/TLS.
• Secure Authentication: We utilize OAuth 2.0 to ensure your credentials never touch our servers.
• Regular Reviews: We perform periodic security reviews of our infrastructure and third-party partners.

Your Rights and Choices

You have the right to:

• Access: View the personal data we hold about you.
• Delete: Request permanent deletion of your account and associated data.
• Export: Download your photos and data.
• SMS Opt-Out: If you receive service-related texts, you may opt-out by replying "STOP" or contacting us.

To exercise these rights, contact us at the email address below.

Data Retention

We retain your data while your account is active. When you delete your account:

• Your profile and contact information are deleted immediately.
• Photos you uploaded are removed from active albums.
• Encrypted backup copies may persist for up to 30 days before permanent erasure.

Children's Privacy

WholeStory is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Your continued use of WholeStory after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@wholestory.app