Privacy Policy

Last Updated: September 2026

1. Introduction

AllShare ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at allshare.co.uk (the "Service").

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Registration: When you create an account, we collect your email address, password (encrypted), and gallery name/couple name.
• Payment Information: We collect billing information through Stripe, including card details. We do NOT store card data—Stripe handles all payment processing securely.
• Uploaded Content: We store photos and videos you upload to your gallery, along with metadata (file names, sizes, upload dates, file types).
• Feedback: We accept optional feedback and suggestions from users.

2.2 Information Collected Automatically

• Device Information: Browser type, device type, operating system, and user agent string (for technical troubleshooting).
• Usage Analytics: Via Google Analytics 4 (GA4), we collect page views, user interactions, and session duration to understand how users engage with our Service.
• Timezone: Your device timezone for better user experience.
• Log Data: Server logs including IP addresses, access times, and error messages (retained for 30 days).

2.3 Information from Third Parties

• Stripe: Payment processor provides confirmation of successful transactions.
• Firebase: Google's backend services provide authentication and hosting infrastructure.

3. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our photo sharing platform.
• Account Management: To authenticate users, manage accounts, and enforce terms of service.
• Billing & Payment: To process payments and send billing confirmations.
• Analytics & Improvement: To understand user behavior, optimize our Service, and develop new features.
• Communication: To respond to user inquiries and send service updates (if applicable).
• Legal Compliance: To comply with legal obligations and enforce our terms.

4. Data Sharing & Third-Party Services

4.1 Third-Party Processors

We share data with the following third parties:

Firebase (Google Cloud)

• Hosts our database and stores user accounts, photos, and videos.
• Provides authentication services.
• Location: United States
• Google Privacy Policy

Stripe

• Processes all payments securely.
• We only share: email, plan type, and transaction confirmation.
• We never store credit card data.
• Stripe Privacy Policy

Google Analytics 4 (GA4)

• Tracks usage patterns and user engagement.
• Anonymous data only (no personal identifiers sent).
• You can opt-out via browser extensions or Google's opt-out tools.
• Google Privacy Policy

4.2 Data Sharing Restrictions

We do NOT share your personal information with unaffiliated third parties for marketing purposes. We do not sell or rent your data.

4.3 Guest Uploads

When you share a gallery link with guests for photo uploads, guests provide their photos to YOUR gallery. We do not retain guest information beyond what is necessary to accept their upload.

5. Data Retention & Deletion

5.1 Active Accounts

We retain your account data and media files as long as your account is active.

5.2 Expired Accounts

When your plan expires:

• Grace Period: Your media is retained for 30 days after plan expiry.
• Automatic Deletion: After the 30-day grace period, all photos and videos are permanently deleted from our servers.
• Account Metadata: Basic account records (email, name) may be retained for legal/billing purposes for 1 year.

5.3 User-Initiated Deletion

You can request account deletion at any time by contacting us. Upon deletion, your data will be removed within 30 days (except where legally required to retain).

5.4 Server Backups

Firebase maintains automatic backups. Deleted data may persist in backups for up to 30 days before being purged.

6. Your Privacy Rights

6.1 GDPR (EU Residents)

If you are in the European Union, you have the right to:

• Access: Request a copy of all data we hold about you.
• Rectification: Correct inaccurate information.
• Erasure: Request deletion of your data ("right to be forgotten").
• Portability: Receive your data in a structured format.
• Withdraw Consent: Opt-out of analytics and marketing communications.

To exercise these rights, email us at the contact address below.

6.2 California Privacy Rights (CCPA)

California residents have the right to:

• Know what personal information is collected.
• Delete personal information (with exceptions).
• Opt-out of sale or sharing of personal information.

6.3 Cookies & Tracking

We use minimal cookies—only those necessary for Firebase authentication and session management. We do not set marketing or advertising cookies.

7. Security

We implement industry-standard security measures to protect your data:

• HTTPS encryption for all data in transit.
• Firebase Security Rules restrict unauthorized access.
• Passwords are hashed and never stored in plain text.
• Stripe handles all payment data with PCI-DSS compliance.

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

AllShare is not intended for children under 13. We do not knowingly collect data from children under 13. If we become aware that a child has provided information, we will delete it promptly and notify the parent/guardian.

9. International Data Transfers

Your data is stored on Google Firebase servers in the United States. If you are outside the US, please note that your information may be transferred, stored, and processed in the US under US law. By using AllShare, you consent to this transfer.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify users of significant changes via email or a prominent notice on our website. Your continued use of the Service constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

AllShare
Email: support@allshare.co.uk
Website: allshare.co.uk

For GDPR inquiries, you also have the right to lodge a complaint with your local data protection authority.