Legal

Privacy Policy

Last updated 5 September 2026

Reeveel (“Reeveel”, “we”, “us”) runs a face-matched event photo-sharing service at reeveelme.com and in our mobile apps. This policy explains what we collect, why, how long we keep it, and the choices you have. Because our service uses facial recognition, please read the sections on faces and children carefully.

The short version

To find your photos, you take a quick live selfie. We use it to match your face and then discard it — we do not keep your selfie.
Faceprints created from event photos are stored only to power matching for that event, and are deleted when the event expires or when a photo is removed.
For events involving children, face search is turned off entirely — no faceprints of minors are ever created.
You can delete your account and all its data, or export a copy, at any time from your settings.

What we collect

Account information

If you create an account (to host events or upload photos), we store your email address, and any name, phone number, or profile details you provide. Photographers may add studio branding details (studio name, logo, brand colour, Instagram, website, contact number).

Biometric data (faces)

When photos are uploaded to an event, we detect faces in them and create numeric faceprints (mathematical templates) using Amazon Rekognition. When a guest asks to find their photos, they complete a live-camera check and we generate a faceprint from the reference image to compare against the event’s photos. We do not use faces to identify you by name, build a cross-event profile, sell biometric data, or share it for advertising.

The verification selfie is used only for that match and is then discarded. Event faceprints exist only for the life of the event and are deleted when it expires, when the underlying photo is deleted, or when the account is deleted.

Photos and event content

We store the photos uploaded to an event, generated thumbnails, and basic event details (name, date, retention window). Hosts choose how long an event’s photos are kept.

Contact details you share

A guest may optionally provide a name, email, or phone number to be notified when more photos are added, or a phone number to receive their photos over WhatsApp. This is optional and never required to view or download your own photos.

Usage and device data

We record basic, mostly anonymous product analytics (for example, that an event link was opened or a download happened) to understand and improve the service, and we keep security logs and rate-limit counters tied to network addresses. We use only essential cookies — a signed session cookie to keep you logged in and short-lived cookies that remember a verified match. We do not use advertising or cross-site tracking cookies.

How we use your data

To match guests to the photos they appear in, and to deliver those photos.
To operate accounts, events, uploads, downloads, and studio branding.
To confirm a live person during the selfie check and prevent impersonation and abuse.
To process payments for paid plans.
To send transactional messages you request (login codes, photo links).
To keep the service secure, debug problems, and improve it.

Our legal bases (where applicable) are your consent (for the biometric face match, which you initiate by taking the selfie), performance of a contract (running events you create or join), and our legitimate interests (security and improving the service).

Children’s privacy

Reeveel is not directed to children, and accounts are intended for adults. For any event that a host marks as involving children, face search is disabled: no faceprints are created and guests cannot run the selfie match — the host shares those photos directly. If you believe a child’s biometric data has been processed, contact us and we will delete it promptly.

Who we share data with

We do not sell your personal data. We share data only with service providers that help us run Reeveel, under contracts that limit their use of it:

Amazon Web Services — facial recognition and the live-selfie check.
Cloudflare R2 — photo and file storage.
Turso — our application database.
Railway — application hosting.
Resend — sending login-code and notification emails.
Payment processors — Stripe (global), and Safepay, JazzCash and Easypaisa (Pakistan). Card and payment details are handled by them, not stored by us.
Google and Microsoft — only if you choose to sign in with Google, or export your photos to Google Drive or OneDrive.
A WhatsApp messaging provider — only if you ask to receive photos over WhatsApp.

We may also disclose data if required by law, or to protect the rights and safety of our users.

International transfers

Reeveel is operated with providers that may process data in different countries, including the United States, the European Union, and India (facial-recognition processing). By using the service you understand your data may be processed in these locations, with appropriate safeguards where required.

How long we keep data

Event photos and faceprints — until the event’s retention window ends, then automatically deleted. A deleted event keeps only a small record (name and a photo count) for the host’s history.
Verification selfies — not retained; discarded after matching.
Account data — until you delete your account.
Analytics and security logs — for a limited period to run and protect the service.

Your rights and choices

Access & export — download a copy of your data from Settings.
Deletion — delete your account and all associated events, photos, and faceprints from Settings. Guests can have their photos removed by contacting the event host or us.
Sign out everywhere — end all sessions from Settings.
Withhold the face match — the selfie check is voluntary; if you don’t take it, we simply can’t match you to photos.

Depending on where you live, you may have additional rights (access, correction, deletion, objection, portability). Contact us to exercise them.

Security

Photos are served only through short-lived, signed links scoped to the specific photos you’re allowed to see. Sessions are signed, transport is encrypted, and access is rate-limited. No system is perfectly secure, but we work to protect your data and delete it when it’s no longer needed.

Changes to this policy

We may update this policy as the service evolves. We will change the “last updated” date above and, for material changes, take reasonable steps to let you know.

Contact

Questions or requests about your privacy: privacy@reeveelme.com.