Privacy Policy

The controller of your personal data is Mykhailo Yemchura, an individual entrepreneur registered in Ukraine (“we”, “us”, “our”). You can reach us at hello@bluehour.events. We have not appointed a data protection officer; privacy requests are handled by the operator directly.

We process data (i) you provide directly, (ii) we receive from Apple when you sign in or pay, and (iii) we collect automatically when you use the Service.

Data you provide

• Identifiers. The name you choose to show to others; the name a guest types when joining a film; your email address if you contact us.
• Film data. Film titles, dates, reveal settings, chosen looks, capacity settings and invitation settings.
• User content. The photos and short videos you take inside a film, together with who took them and when. The app uses the camera only when you press the shutter and never reads your photo library. Photos from the browser are stripped of embedded metadata (including location) before they are stored.
• Correspondence. Anything you include when you write to us, including survey answers if you choose to give them.

Data we receive from Apple

• Sign in with Apple. A stable user identifier and, if you choose to share them, your name and email address. Apple lets you hide your email, in which case we receive a relay address.
• Purchases. Apple’s transaction record for what you bought: product, price tier, time and a transaction identifier. We never receive your card details.

Data we collect automatically

• Device identifiers. A random key generated on your device that ties it to your account (we store only a one-way hash of it), a random guest token for each film a guest joins, and installation identifiers used by our crash-reporting and analytics tools. We do not collect the advertising identifier (IDFA).
• Device and usage data. Device model, operating system version, app version, language, time zone, which features are used and whether actions such as uploads succeed.
• Diagnostics. Crash reports and performance data. Crash reports are not linked to your identity.
• Activity in a film. When you join, when you take photos, when you open the gallery. This is used to run the film and to measure whether the Service works.
• Website. The website stores a guest token in your browser’s local storage so you stay inside the films you joined, and may use the cookies and similar technologies described below.
• Advertising identifiers. Where we run advertising campaigns, we and our partners may receive advertising identifiers or hashed identifiers from ad platforms to measure whether a campaign led to an install. In the app we do not request permission to track you across other companies’ apps and websites, and we do not read the advertising identifier (IDFA) without that permission.

Cookies and similar technologies. Our website and marketing pages may use cookies, pixels, software development kits and similar technologies. They fall into four categories:

• Strictly necessary — required for the Service to work: keeping you inside the films you joined, remembering your preferences, loading content quickly and keeping the Service secure. These cannot be switched off.
• Functional — remembering choices you made, such as language, so you do not have to make them again.
• Performance — measuring how the website and app are used: which pages are visited, where visitors come from, which features are popular. This helps us decide what to improve.
• Targeting — used by us and our advertising partners to show you relevant ads for Blue Hour on other platforms and to measure whether those ads work. If you decline these, you may still see our ads, but they will be less relevant.

Where the law requires it, non-essential technologies are used only with your consent, which you can give or withdraw through the cookie banner or privacy settings on our website. You can also limit tracking in your browser and device settings.

We process personal data for the purposes below. Where the GDPR or a similar law applies, the legal basis is shown for each.

Where we rely on legitimate interests, we have balanced them against your rights and concluded that the processing is what you would reasonably expect from a shared event camera and does not override your interests. You may object to processing based on legitimate interests (Section 5).

We do not sell your personal data. Some of the sharing with advertising partners described below may be treated as “sharing” for cross-context behavioural advertising under certain US state laws; you can opt out as described in Section 5.

People in your film. Your chosen name and the photos you take are visible to the host and to the other participants of that film, according to the settings the host chose. The host can remove a guest or a photo. Once a film reveals, participants may save and share its photos outside the Service; we do not control what they do with them.

Service providers. We use a small number of providers that process data on our behalf and on our instructions, under contracts that prohibit them from using the data for their own purposes. They fall into these categories:

• Cloud hosting and infrastructure for running the Service;
• Managed database for storing account, film and activity records;
• Object storage for photos and videos;
• Crash reporting and product analytics for diagnostics and usage data;
• Push notification delivery through Apple’s notification service;
• Apple for sign-in and payments, under Apple’s own privacy policy;
• Email and notification delivery for messages we send you;
• Analytics and attribution for understanding how people find and use the Service.

Advertising partners. Where we advertise, ad platforms and networks may receive limited data (such as an advertising identifier, a hashed email or the fact that an install happened) so that they can show our ads to relevant audiences and report on results. Each platform lets you control the ads you see in its own settings.

Apps you choose. When you tap to share a photo to another app on your phone, that photo is handed to that app and its privacy policy applies.

Legal reasons. We may disclose personal data to comply with a law, regulation, legal process or lawful request from a public authority; to enforce our Terms of Use; or to protect the rights, property or safety of users, the public or us.

Business transfers. If the business is sold, merged or reorganised, personal data may be transferred to the successor as part of that transaction, subject to this Policy.

California classification. For the purposes of California law, the service providers above are “service providers” or “contractors”. Advertising and analytics partners may be “third parties” to whom personal information is “shared” for cross-context behavioural advertising; we do not “sell” personal information for money.

In the app. You can change your displayed name, leave a film, delete a photo you took, turn notifications off in your device settings, and delete your account. Account deletion is described in Section 8.

By email. Write to hello@bluehour.events to:

• access the personal data we hold about you and receive a copy in a machine-readable format;
• correct inaccurate data;
• delete your data, subject to records we must keep by law;
• restrict or object to processing based on legitimate interests;
• withdraw consent where processing is based on consent, without affecting processing before withdrawal.

We respond within 30 days. To protect your data we may ask you to confirm the request from the email address linked to your account or from the device you use with the Service. You may authorise someone to act on your behalf; we may ask for proof of that authority.

EEA, UK and Switzerland. You have the rights above under the GDPR and equivalent laws, and the right to lodge a complaint with a supervisory authority, in particular in the country where you live or work. We would appreciate the chance to address your concern first.

United States. If you live in a state with a comprehensive privacy law (including California, Colorado, Connecticut, Texas, Virginia and others), you have the rights to know, access, correct, delete and obtain a copy of your personal data, and to opt out of sale, sharing and targeted advertising. To opt out of sharing for targeted advertising, use the cookie banner or privacy settings on our website where available, adjust ad settings on your device, or email us with “Do not share my personal information” in the subject line; we honour recognised opt-out preference signals where our website supports them. We do not engage in profiling with legal or similarly significant effects. We will not discriminate against you for exercising your rights. If we decline a request, you may appeal by replying to our decision with “Privacy appeal” in the subject line; we will respond within 45 days. California residents may also request, once a year, information about disclosures to third parties for their direct marketing purposes.

Advertising choices. On iPhone and iPad, you can limit ad tracking and reset your advertising identifier in Settings → Privacy & Security → Tracking and → Apple Advertising. You can also opt out of interest-based advertising from many networks at optout.aboutads.info and youronlinechoices.eu.

The Service is not intended for children under 13, or under the age set by the law of your country where that is higher. We do not knowingly collect personal data from children below that age. If you believe a child has provided us with personal data, contact us at hello@bluehour.events and we will delete it.

Our providers may process personal data in countries other than the one where it was collected, including countries whose data protection laws differ from those of your country. Where personal data of people in the EEA, the UK or Switzerland is transferred to such countries, we rely on safeguards recognised by law, such as the European Commission’s standard contractual clauses and the UK addendum, or on adequacy decisions where they exist. You may ask us for information about the safeguards used.

We keep personal data only as long as necessary for the purposes described in this Policy, then delete or anonymise it. In particular:

Deleting your account. You can delete your account in the app. Your access ends immediately. Within 30 days your identifiers, name and email are erased, the photos you took are deleted from storage, and your name is removed from the films you hosted. Those films stay with their guests: their photos are their data, not yours. If you sign in again within the 30 days, the deletion is cancelled. Records we must keep by law (such as purchase records) are retained for the required period and then deleted.

Data travels between your device and our servers encrypted, and is stored by providers that encrypt data at rest. Secrets such as device keys and guest tokens are stored only as one-way hashes, so a copy of our database does not open anyone’s film. Access to production systems is limited to what running the Service requires. No system is perfectly secure; if a breach affects your personal data we will notify you and the competent authorities as the law requires.

We may update this Policy from time to time. The date at the top tells you which version you are reading. If a change materially affects how we use your personal data, we will tell you in the app or by email before it takes effect. Continuing to use the Service after the change takes effect means you accept the updated Policy.

For any question about this Policy, our data practices or your rights, or to exercise a right, contact us at hello@bluehour.events. Earlier versions of this Policy are available on request.