Privacy & Data Protection
Privacy Policy
Last revised: 1 November 2026 · Effective immediately for all hosts and event guests.
At Candid Photos, a product of My Joyfullday (“we”, “us”, or “our”), we treat your event memories and personal information with the highest degree of respect and confidentiality. This Privacy Policy explains what data we collect, why we collect it, how it is secured, and your rights over your media.
1. Data Controller & Organization
Candid Photos is owned and operated by My Joyfullday (https://myjoyfullday.com). For all privacy-related questions, data subject access requests, or inquiries regarding media collected at an event, please contact our Data Protection team at support@candidphotos.myjoyfullday.com.
2. Information We Collect
A. Information from Event Hosts
When you create an account or host an event, we collect:
- Your account email address, password hash, and profile display name;
- Event details: event title, event date, timezone, venue name, and host names;
- Event configuration: welcome messages, moderation choices, cover images, and theme backgrounds;
- Transaction and invoice records (package tier chosen, payment reference numbers, and timestamps).
B. Information from Event Guests & Contributors
When you upload photos, videos, or guestbook messages to an event collection, we collect:
- Identity details: The name you provide (displayed to the hosts next to your photos) and your email address (used to group your uploads and notify you in case of upload failure);
- Uploaded media: Photographs, videos, and guestbook audio/video recordings you select from your device;
- Media metadata: Original file dimensions, MIME types, file sizes, and timestamps necessary for proper rendering and ordering;
- Guestbook entries: Written well-wishes, chosen sign-offs, and relationship tags (e.g., “Friend”, “Family”).
C. Technical & Operational Data
To keep our service secure and prevent malicious abuse, our servers log client IP addresses (hashed for rate limiting), browser user-agent strings, upload progress tokens, and error telemetry.
3. How We Use Your Information
We process your data strictly to provide and protect the Candid Photos platform, including:
- Hosting, processing, and streaming private event photo and video galleries;
- Rendering live slideshow feeds for event projectors and screens;
- Enabling the host to review, moderate, and download original high-resolution ZIP archives;
- Delivering transactional notifications (order confirmations, upload receipts, and scheduled deletion warnings);
- Protecting the platform against automated bots, spam uploads, and malicious denial-of-service attacks.
We do NOT sell, rent, monetize, or broker personal data. We do NOT run third-party behavioral advertising or track guests across the web.
4. Legal Bases for Processing
Under global data protection frameworks (including the EU/UK General Data Protection Regulation and similar privacy regimes), we process personal information on the following legal bases:
- Contractual Necessity: To deliver the service agreed upon when a host creates an event collection or when a guest uploads media to that collection;
- Legitimate Interests: To maintain platform security, prevent unauthorized access or illicit content, and debug technical issues;
- Consent: Where guests voluntarily supply their contact information and messages to celebrate with the host;
- Legal Obligations: Where necessary to comply with financial, tax, or legal reporting requirements.
5. Data Retention & Automated Purging
We practice strict data minimization. Event media is not kept indefinitely:
- Active Period: During the event, guests upload photos and videos to the collection.
- Closing Date: The collection stops accepting new uploads. The gallery remains open for host review and guest viewing.
- Retention Window: Hosts have until the specified Deletion Date (based on their package tier) to download full-resolution ZIP archives.
- Permanent Deletion: Following the deletion date, all photos, videos, and guestbook entries are irreversibly and permanently wiped from our storage servers.
6. Cookies & Local Storage
We do not use advertising or third-party tracking cookies. We only use strictly necessary cookies and browser local storage:
candid_session: Authenticates host dashboard sessions;candid_guest_[slug]: Remembers guest contributor identity for seamless return uploads;localStorage (uploadManager): Temporarily stores client-side upload queue state in IndexedDB to prevent data loss if cellular connection drops.
7. Security Measures
We enforce modern security best practices across our entire stack:
- All web traffic is encrypted in transit using TLS 1.3;
- All media files stored in Cloudflare R2 are private and accessible only via short-lived, cryptographically signed HMAC URLs;
- Database tables utilize PostgreSQL Row-Level Security (RLS) to ensure hosts can only view and manage their own collections.
8. Your Rights & Choices
Depending on your jurisdiction, you have the right to request access to the personal data we hold about you, request corrections of inaccurate data, or request the deletion of your personal data or uploaded media.
If you are a guest who wishes to remove a photo or message you submitted, you may ask the event host directly (who has full deletion controls in their dashboard) or email us at support@candidphotos.myjoyfullday.com with the event link and file description, and we will promptly assist.
9. Contact Us
For any questions or privacy inquiries regarding Candid Photos, please contact our data protection team directly at support@candidphotos.myjoyfullday.com.