This page is a draft prepared before the official release and is not yet effective. Billing, content-use restrictions and task-data retention rules have been determined. Data cleanup and account deletion procedures still need to be implemented, and remaining matters, including third-party processing arrangements, still need verification. An effective date will be stated upon official publication.
1. Scope
WherePhoto is operated by AstraPlay Games LLC. This policy explains data processing related to the WherePhoto app and this informational website. For privacy questions, contact mail@where.photo.
Operator address: AstraPlay Games LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States.
2. Information involved
- Photos and clues: Photos you select, metadata they may contain, and the region, time and other clues you provide; locations, evidence, reports and task statuses generated by analysis.
- Account information: When you sign in with Apple or Google, the service processes the verified provider account identifier and any email address returned and verified by the provider. WherePhoto does not ask you to provide your Apple or Google password.
- Purchase information: In versions offering in-app purchases, the service processes transaction identifiers, purchase verification results, credit balances and related accounting records. Payments are handled by the respective store.
- Service and security logs: These may include request and sign-in times, IP addresses, client platform and version, sign-in outcomes and error information, used to operate the service and investigate issues.
- Device location: Versions that support a nearby map may request device location permission. Denying permission does not prevent photo selection. The nearby map location is not the photo’s shooting location.
3. Purposes of use
This information is used to verify sign-ins, receive photo tasks, analyze shooting locations, store and display results, process purchases and credits, restore service state and keep the service secure. Photo selection accesses only the content you choose and does not require access to your entire photo library.
4. Third-party processing and links
Location investigations combine AI image analysis, reverse image search and public web search. Selected photos, image-derived content or search clues may therefore be sent to relevant service providers. Sign-in providers, app stores, maps and external reference websites may also process information under their own policies.
Sharing provides a map location link, without automatically attaching the original photo or full report. When you open an external webpage, that website handles your visit.
We will not use the photos, additional clues or analysis reports you submit for marketing displays or model training. Before release, we still need to confirm the actual third-party providers, the scope of data processed, processing regions and their privacy policies, and verify that the relevant settings and service terms are consistent with these purpose restrictions. Photo analysis may involve server-side and third-party processing; it does not take place solely on your device.
5. Storage and security
Photos, task attachments and reports are stored on the server. Account, session and accounting information is persisted server-side. The client may also store task indexes, caches or sign-in state so that you can continue accessing your history. Deleting local caches or uninstalling the app does not delete server-side data.
Confirmed retention rule: the original photo, additional clues, analysis report and attachments for each task are retained for 30 days from the time that task finishes processing, whether it succeeds or fails. This is the retention period for task data; it does not mean that account information or transaction records subject to legal retention requirements are also deleted after 30 days. Automatic cleanup is not yet implemented. Backup cleanup periods, storage regions and exceptions for legally required retention will be specified before the official release.
6. Your choices and requests
You may choose not to submit photos or optional clues, and manage permissions such as location through system settings. For requests to access, correct or delete data, or close an account, email mail@where.photo and state the type of request and your account sign-in method. Do not send passwords, verification codes or full payment details.
We plan to offer in-app account deletion, but it is not yet available. You can request data or account deletion at the email address above. Identity verification, response times, the actual deletion process and rules for handling backups will be defined before the feature launches. Signing out or uninstalling the app does not delete your account or server-side data.
7. This website
This informational website currently offers no photo upload, registration or payment functionality. It includes no advertising or analytics scripts and sets no marketing cookies. The hosting service may still process basic access logs. Email, map and future store links take you to external services.
8. Minors, updates and contact
Do not upload photos that invade others’ privacy, reveal sensitive locations or that you have no right to use. Minors should use the service under a guardian’s guidance. Specific age requirements and regional rules will be defined before the official release.
This policy may change as features and processing practices evolve. Important changes and the effective date will be stated on this page. Operator: AstraPlay Games LLC. Contact email: mail@where.photo.
The English versions of this agreement and the Privacy Policy are the primary versions. Other language versions are provided for convenience. If language versions are ambiguous or inconsistent, the English version prevails to the extent permitted by applicable law. This arrangement does not limit rights under mandatory law, including applicable requirements to provide information in a local language. All versions should reflect the same data-processing and commercial rules.