Privacy Policy

The information we collect depends on how you use Uvuli.

Account information

When you create or use a Uvuli account, we may collect:

• Your name
• Your email address
• Your Uvuli user or account ID
• Authentication information required to sign you in
• Your account preferences
• Your plan or account status

If you sign in using a third-party authentication provider such as Apple or Google, we receive the information that provider makes available to us based on your settings and permissions.

Event information

When you create or manage an event, we may collect information such as:

• Event name
• Event type
• Event dates
• Event location
• Event cover images and appearance settings
• Event access and sharing settings
• Collections and other event organisation information

Photos, videos and other user content

Uvuli is designed around user-generated content.

Hosts and guests may upload:

• Photos
• Videos
• Event-related media
• Names or display names associated with an upload
• Other information submitted as part of an event

Uploads may be associated with the person who submitted them where that person is signed in or otherwise identifiable.

Guests may also contribute to an event without creating a Uvuli account.

Guest information

When a guest joins or contributes to an event, we may collect information needed to provide the guest experience, such as:

• A guest or uploader name
• Photos or videos they upload
• The event they joined
• Technical and usage information relating to their visit or upload

Guest information may be visible to the event host and, depending on the event's settings, other people who have access to the event.

Purchase information

If you purchase a paid Uvuli feature or plan, we may collect information about the purchase, such as:

• The product or plan purchased
• Purchase status
• Transaction identifiers
• Purchase date
• Price and currency
• The event associated with the purchase

Payments may be processed by third-party payment providers such as Apple or Stripe.

We do not receive or store your full payment card details when those details are handled directly by the payment provider.

Usage and analytics information

We may collect information about how Uvuli is used, including:

• App launches
• Screens or features used
• Buttons, taps and interactions
• Event creation
• Guest joins
• Upload activity
• Collection creation
• Downloads
• Uvuli Live usage
• Upgrade and purchase events
• Device or account identifiers
• Approximate location such as country, region or city

We use this information to understand how Uvuli is used and improve the product.

We do not use this information to track you across unrelated apps or websites for third-party advertising.

Device and technical information

We may collect technical information such as:

• Device identifiers
• Device type
• Operating system
• App version
• Browser or platform
• IP-derived approximate location
• Error and diagnostic information

Crash and diagnostic information

We use error-monitoring tools to help identify and fix technical problems.

Diagnostic information may include:

• Crash information
• Error messages
• App version
• Device or platform information
• Technical context surrounding an error
• A Uvuli user ID where available

We take steps to reduce the personal information sent with diagnostic reports and to remove or redact sensitive information where reasonably possible.

Safety and abuse reports

If you report inappropriate content, misuse, abuse or another safety issue, we may collect information about:

• The report
• The event or content involved
• The reporting user
• The reported user or content
• Actions taken in response

We may retain records of safety or abuse reports where reasonably necessary to protect users, investigate misuse, enforce our terms or comply with legal obligations.

Where we no longer need to identify the people involved, safety records may be retained in anonymised or de-identified form.

We may use personal information to:

• Create and manage your Uvuli account
• Authenticate you and keep your account secure
• Create and operate events
• Allow guests to join events
• Receive, store and display photos and videos
• Associate contributions with the correct event
• Allow hosts to approve, hide, organise or remove uploads
• Create and manage collections
• Provide Uvuli Live
• Generate event downloads
• Process paid features and purchases
• Send service-related emails and notifications
• Provide customer support
• Respond to privacy, safety and content-removal requests
• Detect abuse, fraud or security problems
• Diagnose crashes and technical issues
• Analyse product usage
• Improve Uvuli
• Comply with legal and regulatory requirements

We do not sell your personal information to advertisers or data brokers.

Depending on the circumstances, we process personal information because:

• It is necessary to provide Uvuli and perform our agreement with you.
• It is necessary for our legitimate interests, such as operating, securing and improving Uvuli.
• You have given us consent.
• We need to comply with a legal obligation.
• It is necessary to establish, exercise or defend legal claims.

Where we rely on consent, you may withdraw that consent where applicable.

Uvuli events are controlled by the person or organisation that created or manages the event.

When you contribute a photo or video to someone else's event, that contribution becomes part of that event's shared media.

The event host may be able to:

• View your upload
• Approve or reject it
• Hide or remove it
• Add it to collections
• Download it
• Display it through Uvuli Live
• Make it visible to other authorised event participants

You should only upload content that you have the right to share.

You can request deletion of your Uvuli account.

Deleting your account does not necessarily delete every contribution you have made to events owned by other people.

When your account is deleted:

• We will delete or de-identify account information that we no longer need to retain.
• Content belonging to events you own may be deleted or handled according to the applicable event and retention rules.
• Photos or videos you contributed to events owned by another person may remain part of those events.
• Where reasonably possible, we will remove the connection between those contributions and your deleted Uvuli account.
• A name or uploader name stored with an existing contribution may remain associated with that upload.
• Safety, abuse or enforcement records may remain where necessary and may be retained in anonymised or de-identified form.

We may also retain information where required for legal, fraud-prevention, security, accounting or regulatory reasons.

You do not need a Uvuli account to request removal of personal information or media you contributed.

If you want us to review or remove a guest upload, uploader name or other personal information associated with an event, contact: privacy@uvuli.co

Please include enough information for us to locate the content, such as:

• The event name or link
• Your name
• A description of the photo, video or information
• Any other information that can help us identify the relevant contribution

We may need to verify that you are the person shown in, associated with, or responsible for the requested content before removing it.

Where appropriate, we may also ask the event host to assist with the request.

Uvuli may allow event owners to download photos and videos from an event.

An event or album download is not intended to be a complete export of all personal data Uvuli holds about an individual.

If you want a copy of your personal information for data-access or portability purposes, contact: privacy@uvuli.co

We will handle the request separately from ordinary event-download functionality.

We use third-party providers to operate Uvuli.

These providers may process information on our behalf for purposes such as:

• Cloud hosting and databases
• Photo and video storage
• Authentication
• Analytics
• Error monitoring
• Payments
• Email delivery
• Push notifications
• Infrastructure and security

Depending on the service being used, providers may include services such as Apple, Google, Stripe, Supabase, Mixpanel, Sentry and other infrastructure providers.

These providers process information according to their own contractual and privacy obligations.

We do not permit service providers to use Uvuli user information for unrelated advertising purposes simply because they provide services to us.

Some of our service providers may process information outside the United Kingdom or the country where you live.

Where required, we use appropriate safeguards for international transfers of personal information.

We retain information only for as long as reasonably necessary for the purposes described in this policy.

Retention periods may vary depending on:

• The type of information
• Whether an account remains active
• Whether an event remains available
• The event owner's actions
• Contractual requirements
• Security and fraud-prevention needs
• Legal, accounting or regulatory obligations

Event media may remain available for as long as the relevant event is retained within Uvuli.

Deleting an account does not automatically remove contributions from events owned by other users, as explained in the Account deletion section above.

Depending on where you live, you may have rights relating to your personal information, including the right to:

• Request access to your information
• Request correction of inaccurate information
• Request deletion of your information
• Object to certain processing
• Restrict certain processing
• Request transfer of certain information
• Withdraw consent where processing is based on consent
• Make a complaint to a data-protection authority

You can make a request by contacting: privacy@uvuli.co

You do not need to be signed in to Uvuli or have a host account to make a privacy request.

We may need to verify your identity before completing certain requests.

Uvuli is not specifically designed or marketed as a service for children.

Events may include photos or videos of children because Uvuli is used for family events, birthdays, celebrations and similar occasions.

People uploading content are responsible for ensuring that they have an appropriate right or permission to share it.

If you believe information relating to a child has been uploaded improperly, contact privacy@uvuli.co and we will review the request.

We use reasonable technical and organisational measures designed to protect information against unauthorised access, loss, misuse or alteration.

However, no online service or storage system can guarantee absolute security.

Event hosts are also responsible for controlling who they share their event links and QR codes with and for choosing appropriate event-access settings.

Uvuli may contain links to or integrations with third-party services.

Those services operate under their own terms and privacy policies. We are not responsible for the privacy practices of third-party services that we do not control.

We may update this Privacy Policy as Uvuli changes.

When we make material changes, we will update the date at the top of this policy and may provide additional notice where appropriate.

For privacy questions, personal-data requests, account-deletion questions, guest-media removal requests or concerns about information stored by Uvuli, contact:

MaineeCo Ltd

Email: privacy@uvuli.co

If you are located in the United Kingdom and are not satisfied with how we handle your personal information, you may also have the right to raise a complaint with the UK data-protection regulator.