Privacy notice

• When you sign up: your email address, name, country, what you photograph most, your Instagram name (optional), how you found us (the campaign tags in the link you used) and whether you asked for launch news.
• Duplicate check: when you sign up we also store a scrambled code (a keyed hash) made from your IP address, and one made from your browser type and language. We don’t store the IP address itself; the codes only let us see whether several sign-ups came from the same connection or device.
• If we remove someone from the beta for misuse, we keep their email address on a block list so they can’t sign up again.
• When you use the app: your invite code, when you uploaded photos, which mode you used, and the feedback you send us.
• Technical data: our servers record your IP address and basic request data (time, page, errors) to keep the service secure and working.
• Your photos: each photo is sent to our AI provider to be processed. We only keep a copy if you tick “Let the FotoGusto team look at my photo”.

Your email address and name are needed to take part in the beta. Everything else is optional unless the form says otherwise.

• To run the closed beta – your access link, reminders, the end-of-test email, the waitlist and the daily photo limit. Basis: performing our agreement with you (the Beta terms), Art. 6(1)(b).
• To keep and look at your photos – only if you ticked the box. Basis: your consent, Art. 6(1)(a). You can withdraw it at any time.
• To improve FotoGusto using your feedback, and to see which of our ads work (campaign tags). Basis: our legitimate interest in improving the service and our marketing, Art. 6(1)(f). You can object at any time.
• To keep the service secure (technical data). Basis: our legitimate interest in running a safe service, Art. 6(1)(f).
• To keep the beta fair – one place per person (the duplicate check and the block list). Basis: our legitimate interest in preventing misuse, Art. 6(1)(f). We only flag possible duplicates for a person to review; nobody is removed automatically.
• To tell you about the FotoGusto launch – only if you ticked that box. Basis: your consent, Art. 6(1)(a). You can unsubscribe at any time.

We never sell your data, never publish your photos and never make decisions about you by purely automated means.

• Render – hosting (servers in Frankfurt, Germany).
• OpenAI – AI processing of your photos (USA). OpenAI may keep the photo and the result for up to 30 days to detect abuse, then deletes them, and does not use them to train its models.
• Resend – sends our emails; it handles your email address and name (EU region, Ireland).
• Forpsi – hosts our mailboxes hello@ and support@fotogusto.app (EU).
• Google (Gmail) – emails that reach these mailboxes are forwarded to our team’s Gmail inbox.
• Google Fonts – delivers the font used on our pages.

OpenAI, Render and Google are US companies. Where your data leaves the EU, the transfer is protected by the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework, under each provider’s data processing terms.

• Photos you let us keep: up to 90 days, then deleted automatically.
• Sign-up details and feedback: until the end of the beta, and at most 12 months after your last activity.
• Launch-news subscription: until you unsubscribe or the launch has happened.
• Technical data: at most 30 days.
• Duplicate-check codes: together with your sign-up details (deleted when they are).
• Block list: until the end of the beta.
• If you leave the beta and ask us to delete your data, we delete it straight away.

You can ask to see your data, correct it, delete it, restrict its use, receive it in a portable format, object to its use, or withdraw your consent – at any time. Every email we send has a “Leave the beta and delete your data” link, or write to hello@fotogusto.app. We reply within one month.

You can also complain to a data protection authority: in Hungary NAIH (naih.hu); in Australia the OAIC (oaic.gov.au); in New Zealand the Office of the Privacy Commissioner (privacy.org.nz).