Privacy Policy
Last updated: November 21, 2025
This Privacy Policy describes how Indius LLC ("We" or "Us") collects, uses, and protects personal information when you use our mobile and web-based app PhotoJournal (the "Service").
We are the data controller responsible for your personal data under this Privacy Policy. You can contact us at privacy@photojournal.app for any questions related to data protection.
This policy applies to all users of the Service, regardless of platform or device, and is governed by the laws of the State of California, USA.
What We Collect
-
Personal Identification Information
When you sign up to use the Service, we collect your name and valid email address to create and manage your account. Your name is used only within the app interface (for example, to display greetings such as "Welcome, Bubba!") and is not shared with third parties.
We also collect server-side inferred coarse location (country or region) derived from your IP address for security, fraud prevention, and aggregate analytics. We do not request or collect precise GPS location.
-
User Generated Content
When you use the Service, you may create journal entries that include text, photos, videos, and location data ("User Content").
We collect and store this content so that you can access, organize, and share it through the Service. If your photos or videos include embedded metadata such as timestamps, device information, or geotags, that information may also be stored as part of your User Content.
We do not access, analyze, or share your User Content except as necessary to provide the Service (for example, to display your entries across your devices, back them up securely, or generate maps and timelines that you request). We do not manually review your User Content except when required for technical support and only with your explicit permission.
You remain the owner of all User Content you upload to PhotoJournal.
-
Shared Pages and Visitor Information
When you choose to share a journal entry or a collection of entries, PhotoJournal generates a private, unlisted webpage ("Shared Page") containing only the content you select. You may share the link to this page with others. Shared Pages are not discoverable by search engines unless you choose to make them public.
When someone visits a Shared Page, we automatically receive standard web server logs, which may include:
- IP address
- Approximate location inferred from IP address (country or region only)
- Browser or device User-Agent
- Date and time of the visit
This information is collected solely for:
- Security and fraud prevention
- Abuse monitoring (e.g., rate limiting)
- Basic, aggregate engagement metrics (e.g., number of views)
We do not use this information to identify visitors, profile them, or track them across other websites. We do not place cookies, tracking pixels, or third-party analytics on Shared Pages.
If you delete your Shared Page, it becomes immediately inaccessible, and associated visitation logs are removed from our active systems within a reasonable period.
How We Collect Data
When you sign up to use our Service, you directly provide us with the personal identification information we collect, such as your name and email address.
Our servers automatically receive IP address, inferred coarse location, and User-Agent information when you log in to the Service or when people view content you share (for example, on Shared Pages).
How We Use Your Data
We use your personal information to:
- create, manage, and secure your account
- display your name within the app interface (e.g., greetings)
- sync and display your User Content across devices
- communicate with you about your account and updates to our Service
- monitor engagement with Shared Pages in aggregate form
- prevent fraud, abuse, or unauthorized access
- provide customer support when requested
We do not access or use the content of your journal entries, photos, or videos for advertising, analytics, or AI-training purposes. Your media and text remain private unless you choose to share them.
We do not sell, rent, or share your personal data with third parties.
If you are located in the European Economic Area (EEA), we process your personal data based on one or more of the following legal bases:
- performance of a contract (providing your PhotoJournal account and sync capabilities),
- legitimate interests (such as preventing fraud, maintaining security, and improving the Service), and
- compliance with legal obligations.
We rely on consent only where explicitly requested for an optional feature.
How We Store Your Data
We store your data on secure and firewalled servers at Amazon Web Services. We have put into place policies and procedures to safeguard and secure access to your data. Be aware, however, that no transmission of data over the Internet can be guaranteed to be 100% secure.
We retain your User Content and account information (including your name and email address) as long as your account remains active or as needed to provide the Service. Login logs (including IP-derived coarse location) are retained for a limited period for security and fraud prevention. When you delete your account, we permanently remove your personal data and associated User Content from our active systems within a reasonable period, except where retention is required by law.
Your Data Protection Rights
You have the following rights:
- Access Right You can request us for copies of your personal data. (We may charge a nominal administrative fee for this service.)
- Rectification Right You can request us to correct any information that you believe to be incorrect, and to complete any information that you believe to be incomplete.
- Right to Erasure You have the right to request that we erase your personal data. Note that we may be unable to comply if we are legally restricted from doing so.
- Right to Restrict Processing You have the right to request that we restrict the processing of your personal data. Note that doing so will make your data unavailable to users.
- Right to Object to Processing You have the right to object to our processing of your personal data. You must provide the specific reasons for your objection.
- Right to Data Portability You have the right to request that we transfer your personal data to another organization, or directly to you. This right only applies to data that you have provided us directly.
- Right to Withdraw Consent Where we are relying on your consent to process your personal data, you have the right to withdraw your consent at any time.
If you would like to exercise any of these rights, please send your request to privacy@photojournal.app. We have one month to respond to you.
Children's Privacy
Our Service is not intended for children under the age of 13. If you believe a child under 13 has provided us with personal data, please contact us so we can delete it promptly.
Changes to Our Privacy Policy
We regularly review our privacy policy, and we will keep this page up to date. If we make any material changes to this privacy policy, we will notify you by email or through a notice on our website or in the app.
How to Contact Us
If you have any questions about this privacy policy, please contact us at privacy@photojournal.app.