Privacy Policy

Last updated: March 2026

1. Information We Collect

Account data: name, email address, password (hashed), account type.
Photos: images uploaded by photographers, including metadata (dimensions, file size).
Biometric data: if you use facial recognition features, we process facial geometry data to match you in photos.
Payment data: processed by Stripe. We do not store card numbers.
Usage data: pages visited, searches performed, device information.

2. How We Use Your Information

• To provide and improve the platform
• To process purchases and deliver downloads
• To match your face in photos (only with your explicit consent)
• To communicate with you about your account
• To prevent fraud and ensure platform security

3. Biometric Data (Facial Recognition)

We take biometric data seriously. When you use our "Find Me" feature:
• Facial data is processed only with your explicit opt-in consent
• Data is used solely for matching you in session photos
• Facial data is not sold, shared, or used for advertising
• You can delete your biometric data at any time via Settings
• We comply with GDPR, CCPA, and BIPA requirements for biometric data

4. Data Sharing

We do not sell your personal data. We share data only with:
Stripe — for payment processing
AWS — for secure photo storage
Law enforcement — only when legally required

5. Data Retention

Account data is retained while your account is active. Photos are retained as long as the photographer keeps them on the platform. Biometric data is deleted when you opt out or delete your account. You can request full data deletion by contacting us.

6. Your Rights

You have the right to:
• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Opt out of facial recognition at any time
• Export your data in a portable format
• Object to processing of your data

7. Security

We use industry-standard security measures including encrypted storage, HTTPS, hashed passwords, and signed URLs for protected downloads. Photos are stored in private buckets with access controls.

8. Cookies

We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.

9. Children

CatchMyAction is not intended for users under 16. We do not knowingly collect data from children.

10. Contact

For privacy inquiries or data requests: [email protected]