Privacy Policy

PhotoAura is made by Rad Soft (“we”, “us”). Photographers use it to deliver galleries, and their clients view those galleries in the PhotoAura iOS, Android and web apps. This policy covers those apps and the PhotoAura service we run, including galleries delivered at aura.reactiveshots.com.

If you connect the app to a different studio’s own server (a “custom studio”), that studio runs the server, and its privacy policy covers what it stores.

• Account details

  Your name, username and email addresses. Your photographer creates your account when they share a gallery with you, and you can change your name and username in the app.

• Sign-in

  One-time sign-in links sent to your email, which expire after 30 minutes. If your account uses a password, we only store a salted hash of it.

• Your galleries

  The photos, videos and files your photographer uploads for you.

• Favourites

  The photos you heart, so your photographer can see which ones you picked.

• Face grouping

  So you can filter a gallery to one person, our servers detect faces in gallery photos and store a numerical description of each face. It's only used to group photos of the same person within that studio's galleries. It is never used to identify you anywhere else, and never shared or sold.

• Technical data

  Our servers log basic request details such as IP address, device type and time, to keep the service secure and fix problems.

• Analytics

  The web app uses Vercel Web Analytics, which counts page views without cookies and without identifying you. The iOS and Android apps have no analytics, no ads and no tracking.

Only to run PhotoAura: showing you your galleries, signing you in, sending sign-in and “your gallery is ready” emails, letting your photographer see your favourites, and keeping the service secure. We don’t show ads, sell your data, or build profiles about you.

• Your photographer

  The studio that shared a gallery with you can see your account details and favourites.

• Service providers

  Companies that run parts of the service for us and may only use the data to do that: Amazon Web Services (photo storage and delivery), Vercel (web app hosting and analytics) and Resend (email delivery).

• When the law requires it

  If we're legally required to, for example to answer a valid court order.

Everything is sent over encrypted connections (HTTPS). A gallery is only visible to the accounts your photographer shares it with, and to anyone they send a share link. No system is perfectly secure, but we work to protect your data and fix problems quickly.

We keep your account details while your account is active. When you delete your account, your sign-in links, email addresses, gallery access and favourites are removed straight away, and your name and username are replaced with an anonymous placeholder.

Photos and videos belong to your photographer’s studio, so they stay in the studio’s galleries until the studio removes them. Server logs are kept only as long as needed for security and troubleshooting.

You can delete your account in the app, or ask us to do it. The steps are on the delete your account page.

You can ask for a copy of your data, ask us to correct or delete it, or ask a question about it at any time. Depending on where you live (for example the EU, UK or California) you may have further rights under local law. We reply within 30 days.

PhotoAura is for people 16 and over, such as the clients who book a shoot and teens receiving their own senior portraits. It isn’t made for younger children, though they may appear in photos a photographer shares with their parent or guardian. If you think a child under 16 has an account, contact us and we’ll remove it.

If we change this policy we’ll post the new version here and update the date at the top. For significant changes we’ll also let you know in the app or by email.