Privacy Policy.

Account data: name, email address, password (hashed), account type.
Photos: images uploaded by photographers, including metadata (dimensions, file size).
Biometric data: if you use facial recognition features, we process facial geometry data to match you in photos.
Payment data: processed by Stripe. We do not store card numbers.
Usage data: pages visited, searches performed, device information.

• To provide and improve the platform
• To process purchases and deliver downloads
• To match your face in photos (only with your explicit consent)
• To communicate with you about your account
• To prevent fraud and ensure platform security

We take biometric data seriously. When you use our "Find Me" feature:
• You confirm consent each time before your selfie is compared — nothing is scanned without it
• Your selfie is used only for that one search and is not stored
• Matches are shown to you first; only the photos you confirm are marked as yours
• To find matches, faces in uploaded session photos are indexed by our face-matching provider (AWS Rekognition)
• Facial data is not sold, shared, or used for advertising
• To remove a photo of you, or your matches, use "Report photo" on the photo or contact us — we act within 48 hours

We do not sell your personal data. We share data only with:
• Stripe — for payment processing
• AWS — for secure photo storage
• Law enforcement — only when legally required

Account data is retained while your account is active. Photos are retained as long as the photographer keeps them on the platform. Selfies are never stored. Face index data for a session is deleted when the session is deleted, and on request. You can request full data deletion by contacting us.

You have the right to:
• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Opt out of facial recognition at any time
• Export your data in a portable format
• Object to processing of your data

We use industry-standard security measures including encrypted storage, HTTPS, hashed passwords, and signed URLs for protected downloads. Photos are stored in private buckets with access controls.

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

CatchMyAction is not intended for users under 16. We do not knowingly collect data from children.

For privacy inquiries or data requests: [email protected]