This Privacy Policy explains how Tazu Luisi, doing business as Digi-Cam (“Digi-Cam,” “we,” “us,” or “our”) collects, uses, shares, stores, retains, and otherwise processes personal information when you use the Digi-Cam mobile application, website, and related services (collectively, the “Services”).
We want you to understand what information we collect, why we collect it, how it may be shared, and what choices and rights you may have. The information we collect depends on how you use Digi-Cam. For example, we collect different information when you sign in, verify your phone number, complete a profile, publish a post, join or host a Candid event, manage a friend group, send a direct message, upload media, enable contact discovery, or report another user or piece of content.
By using Digi-Cam, you acknowledge that your information will be handled as described in this Privacy Policy.
1. Scope of This Policy
This Privacy Policy applies to information we collect from:
- users of the Digi-Cam app and related Services;
- people who contact us, request support, or otherwise communicate with us; and
- people whose information is provided to us by Digi-Cam users, such as where a user uploads contact information for friend discovery, tags another user, or submits a report.
This Privacy Policy does not apply to third-party services that Digi-Cam does not own or control, even if they are linked to, integrated with, or used in connection with Digi-Cam. Those third parties include, for example, authentication providers, platform providers, cloud infrastructure providers, moderation vendors, and music-related services, each of which may have its own privacy practices.
2. What Information We Collect
A. Information you provide directly
We may collect information you provide when you create an account, complete your profile, use social features, communicate with others, or contact us, including:
Account and sign-in information. This may include your email address, password-authentication data, account identifiers, authentication-provider information, phone number, phone verification status, account creation or update timestamps, password reset status, and auth callback information. If you sign in with Apple or Google, we may receive information from those providers needed to authenticate you, such as your name, email address, provider identifier, and authentication tokens or credentials needed to complete sign-in.
Profile information. This may include your username, display name, bio, profile image, date of birth, notification preferences, and pending, rejected, failed, or approved profile update states. Date of birth may be used for age eligibility checks.
Content you create or upload. This may include posts, captions, text, comments, reactions, tags, audience selections, circle or friend-group selections, expiry settings, direct messages, message reactions, shared post messages, image or video uploads, thumbnails, profile images, circle images, Candid event photos, cover images, and attached music metadata.
Candids event information. This may include event titles, host information, associated friend groups, start time, end time, reveal time, invite tokens or links, visibility settings, download settings, cover images, attendee counts, submitted photo counts, event phase, favorites, guest management activity, reactions, comments, reports, deletions, and downloads where supported.
Social graph information. This may include follows, friend requests, blocks, reports, circle creation and membership, tags, and notifications related to your activity or the activity of others involving you.
Communications and support information. If you contact us, we may collect your messages, attachments, and any other information you choose to provide.
Safety and reporting information. If you report content or another user, we may collect the report reason, optional details you provide, the identity of the reporter, the identity of the reported user, and the identifiers of the relevant post, comment, message, Candid event, or Candid photo.
B. Information we collect from your device or through permissions
Depending on the permissions you grant and the features you use, we may collect:
Camera, photo, video, and microphone access. If you allow Digi-Cam to access your camera, microphone, or photo library, we may access the media and related inputs needed for capture, editing, cropping, trimming, upload, thumbnail generation, and Candid event participation.
Contacts data for friend discovery. If you grant contact access, Digi-Cam may read contact names and phone numbers from your device to help you find people you may know on Digi-Cam. In the current flow described in our materials, contact names remain on-device, while normalized phone numbers may be sent to Digi-Cam's backend and compared against verified phone numbers associated with Digi-Cam accounts in order to identify potential matches.
Push notification data. If you enable push notifications, we may collect device tokens and related routing information, such as bundle ID and push environment, so we can deliver notifications to your device.
Live Activity data. If you use supported iOS Live Activity features, we may process activity tokens and limited state needed to display updates such as Candid event countdowns, friend post status, or streak-related status on your device.
Music-related permissions and search information. If you use music features, Digi-Cam may access Apple Music-related permissions and process music search queries and selected track metadata. If MusicKit results are unavailable, music search may fall back to Apple's iTunes Search API, which may result in your search terms being sent to Apple.
C. Information we receive from other people and third parties
We may receive information about you from:
- other Digi-Cam users, such as when they follow you, tag you, invite you, message you, react to your content, upload contacts to find you, or report content involving you;
- authentication providers, such as Apple or Google, when you choose to sign in through them; and
- platform and infrastructure providers that support authentication, storage, messaging, moderation, email delivery, notifications, or security.
D. Information generated through use of the Services
We may generate or infer information associated with your use of Digi-Cam, including:
- content and message metadata;
- read state, delivery state, and notification previews;
- Candid event phase, invite, attendance, capture, reveal, and download metadata;
- post streak status, expiry status, and related activity indicators;
- moderation status, moderation reasons, enforcement actions, and related safety signals;
- screen capture or screen recording state used to show in-app privacy shields;
- account deletion request status; and
- technical and operational logs reasonably necessary to operate, secure, debug, and improve the Services.
E. On-device safety analysis and automated moderation
Digi-Cam may use local safety checks, on-device safety technologies, and server-side moderation workflows. On supported devices, some image analysis may occur locally on your device before upload using Apple-provided safety tooling. Digi-Cam also uses automated moderation and safety providers for certain submitted text, images, and videos. Depending on context, user-submitted post text, comment text, direct message text, profile text, images, Candid photos, and some videos may be processed for moderation, classification, safety review, redaction, alerting, or enforcement purposes.
F. De-identified and aggregated information
We may de-identify, anonymize, or aggregate information so that it no longer reasonably identifies you. We may use that information for analytics, product improvement, safety research, and other lawful purposes.
3. What Happens if You Do Not Provide Certain Information
Some information is required for Digi-Cam to work, such as account credentials, phone verification where required, core profile information, age eligibility information, and information needed to deliver the features you choose to use.
Other information is optional. For example:
- without contact access, contact-based friend discovery may not work;
- without photo library access, you may not be able to upload selected media;
- without music access or related permissions, you may not be able to attach music to content; and
- without push permission, you may not receive push notifications.
Declining optional permissions may reduce the usefulness or convenience of some features.
4. How We Use Your Information
A. To provide, maintain, and improve Digi-Cam
We use information to create and maintain your account, authenticate you, display your profile, publish content, manage follows and circles, operate Candid events, deliver direct messages, host media, provide notifications and Live Activities, honor audience settings, and otherwise operate the Services.
B. To personalize your experience within Digi-Cam
We use information to tailor parts of the Digi-Cam experience, such as showing content to the audience you select, organizing your feed or conversations, displaying notifications, and helping you connect with other users based on the social features you use.
C. To enable contact discovery
If you grant access to contacts, we use normalized contact phone numbers to compare them against verified Digi-Cam phone numbers so we can suggest connections or help you find people you know on Digi-Cam. Contact discovery is intended to be optional and user-controlled.
D. To process and display content
We use information to store, display, transmit, compress, transform, and deliver content you create, including images, videos, captions, comments, reactions, tags, Candid photos, event covers, thumbnails, and attached music metadata.
E. To promote safety, security, and integrity
We use information to detect, prevent, review, and address spam, abuse, fraud, harassment, platform misuse, and violations of our terms or policies. This may include automated systems, human review, content moderation, report handling, redaction, removal, blocking, account restrictions, and retention of enforcement-related records. Some content may be held in a pending moderation state, and some messages or content may be reviewed or updated after submission as part of our safety processes. Digi-Cam direct messages are not end-to-end encrypted, and message content may be processed for moderation and safety purposes.
F. To communicate with you
We use information such as your email address, in-app identifiers, and notification settings to send you service messages, security alerts, password reset communications, account notices, and responses to support requests.
G. To comply with law and enforce our rights
We use information where reasonably necessary to comply with applicable law, respond to lawful requests, protect rights and safety, resolve disputes, enforce contracts and policies, and establish or defend legal claims.
H. For analytics, debugging, and service improvement
We use information to understand feature usage, troubleshoot issues, monitor performance, improve reliability, evaluate new features, and improve safety and moderation systems.
5. How Information Is Shared on Digi-Cam
A. Profile and account visibility
Your profile information, such as username, display name, bio, and profile image, may be visible to other Digi-Cam users depending on how the product is configured and how you use it.
B. Posts, comments, reactions, and tags
Content you post may be visible based on the audience you select, such as public, private/self-only, or circle-based visibility. Comments, reactions, and tags may also be visible to the relevant audience for that content. Even where Digi-Cam offers limited-audience sharing, other users may copy, repost, record, or screenshot what they can see.
C. Circles and audience-controlled content
Digi-Cam supports circle-based or restricted-audience sharing. We attempt to honor the audience settings you choose through product controls and backend access rules. However, no audience control can completely eliminate the risk that a recipient may save, copy, or share content outside Digi-Cam.
D. Direct messages
Direct messages are participant-limited, but they are not end-to-end encrypted. They may be processed for storage, delivery, moderation, safety review, notification previews, and enforcement. Message content or metadata may be disclosed to service providers supporting those functions or to authorities where required by law.
E. Publicly accessible and access-limited media
Not all media in Digi-Cam is treated the same way. Based on the current Digi-Cam design reflected in the materials used to draft this policy, posts and direct-message media are generally not public by default and may be served through access-limited or signed URLs. Candid event media may be access-limited by event settings, phase, and permissions. By contrast, some profile-related assets, including profile images and circle images, may be stored in locations that are publicly accessible or accessible through public URLs. You should avoid using those fields for content you consider confidential or highly sensitive. Pending profile images may also be stored privately while undergoing review.
F. Notification previews, Live Activities, and privacy shields
Notifications may contain limited preview text, such as a short message or comment preview. Depending on your device settings, those previews may appear on your lock screen or notification center. Live Activities may display limited status such as event countdowns or friend-post state. Digi-Cam may detect screen capture or screen recording state to show an in-app privacy shield, but this does not guarantee that content cannot be captured, copied, viewed, or shared.
6. How We Share Information with Service Providers and Other Third Parties
A. Vendors, cloud providers, and infrastructure providers
We use third parties to provide hosting, authentication, storage, database services, real-time messaging infrastructure, email delivery, notification delivery, and related operational support. These providers may include Supabase for authentication, Postgres, storage, realtime subscriptions, and edge-function infrastructure, along with Apple Push Notification service, Apple ActivityKit-related infrastructure, and related delivery providers.
B. Authentication and platform providers
If you use Sign in with Apple, Sign in with Google, Apple Music features, Apple push notifications, password-reset delivery, or other platform-based functionality, relevant information may be processed by Apple, Google, or related platform providers according to their own terms and privacy practices.
C. Safety and moderation providers
We may disclose content and related metadata to safety, moderation, and abuse-prevention providers to help detect policy violations, explicit content, illegal content, spam, fraud, or other harmful activity. Based on the current Digi-Cam design described in your materials, these providers may include OpenAI for certain text and image moderation, Google Video Intelligence or related Google services for certain video-analysis workflows, and email/alert vendors such as Resend for administrative notices tied to safety or operational events.
D. Other users and people you choose to interact with
We share information with other Digi-Cam users when you post content, follow someone, react, comment, tag, message, join circles, or otherwise use social features.
E. Legal, safety, and compliance disclosures
We may preserve, use, and disclose information where we reasonably believe doing so is necessary to:
- comply with applicable law, regulation, legal process, or lawful governmental request;
- detect, investigate, prevent, or address fraud, abuse, security, or technical issues;
- protect the rights, property, and safety of Digi-Cam, our users, the public, or others; and
- enforce our Terms and other policies.
F. Business transfers
If Digi-Cam is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, information may be transferred as part of that transaction subject to applicable law.
7. International Transfers
Digi-Cam and its service providers may process information in countries other than the country where you live. Those countries may have data-protection laws that differ from those in your jurisdiction.
Where required by applicable law, we will use appropriate safeguards for cross-border transfers.
8. Legal Bases for Processing (EEA, UK, and Switzerland)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we may process your personal data where:
- it is necessary to provide the Services you request or to perform our contract with you;
- you have given consent;
- it is necessary to comply with a legal obligation;
- it is necessary to protect vital interests; or
- it is necessary for our legitimate interests, such as operating, securing, improving, and enforcing the Services, provided those interests are not overridden by your rights and freedoms.
9. Your Rights and Choices
A. In-app controls and device controls
Digi-Cam may allow you to:
- edit profile information;
- choose audiences for posts;
- create, join, manage, or leave Candid events where supported;
- manage circles and membership;
- follow or unfollow users;
- manage direct messages and message reactions where supported;
- block users;
- report users or content;
- manage notification preferences; and
- request account deletion.
You may also control app permissions through your device settings, including contacts, photo library, music access, and push notifications.
B. Access, correction, deletion, portability, objection, and related rights
Residents of certain jurisdictions may have the right to be informed about how their data is processed, access their personal data, correct inaccurate data, request deletion, request restriction of processing, object to certain processing, obtain portable copies of certain data, and request review of certain automated decision-making, subject to exceptions. European Commission guidance summarizes these rights as including the rights to be informed, access, rectification, erasure, restriction, portability, objection, and rights related to automated decision-making; it also notes that organizations should facilitate electronic requests and generally respond without undue delay and, in principle, within one month.
C. U.S. state privacy rights
Where Digi-Cam is subject to applicable U.S. state privacy laws, residents of those states may have rights such as the right to know or access what personal information is collected, the right to correct inaccurate information, the right to delete information, the right to data portability, and, where applicable, rights related to opting out of certain sales or sharing of personal information and limiting certain uses or disclosures of sensitive personal information. California's CPPA describes these rights and the CCPA statute requires businesses subject to the law to disclose categories collected, purposes, retention information or criteria, and categories of third parties receiving the information.
D. How to exercise your rights
To exercise privacy rights, contact us using the details in the “Contact Us” section below. We may need to verify your identity before fulfilling certain requests. We may deny or limit a request where permitted by law, including where an exception applies, the request cannot be verified, or fulfilling the request would adversely affect the rights of others.
10. Retention of Information
We retain information for as long as reasonably necessary to provide the Services, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, protect safety and security, and prevent fraud and abuse.
Retention periods vary depending on the type of information and how it is used. For example:
- account and profile information may be retained while your account remains active;
- posts may expire according to feature settings or product rules;
- Candid events and photos may be retained according to event settings, user actions, and product rules;
- orphaned or unlinked media may be cleaned up automatically after a period of time;
- rejected or removed content may be deleted, replaced, or retained where needed for safety review;
- moderation records, reports, enforcement logs, and legal hold data may be retained longer where reasonably necessary for abuse prevention, investigations, disputes, security, or legal compliance; and
- if you request account deletion, we will delete or de-identify information within a reasonable period, except where retention is permitted or required by law. Some information may remain in backups for a limited time, and some content or messages may remain visible to others if they have already received it, copied it, or stored it outside Digi-Cam.
11. Security
We use reasonable administrative, technical, and organizational measures designed to protect personal information. These measures may include access controls, storage protections, signed access mechanisms for certain media, moderation systems, and account-security features. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
You are responsible for maintaining the confidentiality of your credentials, securing your devices, and using appropriate caution when sharing information on Digi-Cam.
12. Children's Privacy
Digi-Cam is not intended for children under 13, and we do not knowingly collect personal information from children under 13 without authorization required by law. FTC guidance explains that COPPA imposes specific obligations on services directed to children under 13 and on services with actual knowledge they are collecting personal information from a child under 13. If we learn that we have collected personal information from a child under 13 in a manner inconsistent with applicable law, we will take steps to delete that information and, where appropriate, disable the related account.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version and update the Effective Date above. Where required by law, we will provide additional notice or obtain consent.
14. Contact Us
If you have questions, complaints, or requests about this Privacy Policy or our privacy practices, contact us at:
Tazu Luisi, doing business as Digi-Cam
Attn: Privacy
Email: legal@digi-cam.app
General support: support@digi-cam.app
Safety concerns: safety@digi-cam.app
Content reports: reports@digi-cam.app
If applicable law grants you the right to complain to a regulator or data-protection authority, you may also do so.