Legal
Privacy Policy
Effective date: April 16, 2025
Overview
take25 is a collaborative event photography platform. This policy explains what information we collect, how we store it, and your rights around that data. We have built take25 with a minimal data footprint — we only collect what is necessary to run the service.
Information We Collect
Organizers
When you sign in as an organizer (via Google or Apple), we receive your name and email address from your chosen identity provider. This is used solely to authenticate you and associate events you create with your account.
Attendees
Attendees join events by scanning a QR code. No account, email address, or personal information is required to participate. Your device is assigned an anonymous session token so you can manage your own photos within the app.
Photos
Photos you take through the take25 mobile app are stored on your device until you choose to publish them to an event. Photos that have not been published remain entirely on your device and are never uploaded to our servers.
Photos you choose to publish are uploaded and stored in a US-based Cloudflare R2 storage bucket. We do not share photos with any third party.
Usage data
We may collect basic, anonymized usage metrics (e.g. page views, error rates) to keep the service running reliably. This data cannot be linked back to individual users.
Photo Visibility
Photo access is controlled at two levels:
- •Unpublished photos — Photos taken but not published are stored only on the attendee's device. No one else — including organizers, other attendees, or take25 — can view them.
- •Published photos — Once an attendee publishes a photo, it becomes visible to the event organizer for curation. Other attendees cannot see individual published photos.
- •Final gallery — private — When an organizer publishes the final gallery as a private roll, it is accessible only to participants who uploaded photos to that event.
- •Final gallery — public — When an organizer publishes the final gallery as a public roll, it is viewable by anyone who has access to the event QR code or link.
How We Store Your Photos
All uploaded photos are stored in a Cloudflare R2 object storage bucket located in the United States. Storage is encrypted at rest. Access to photo files is controlled through short-lived, signed URLs that expire after a limited time.
We do not sell, license, or otherwise share photos with any third party. Photos are used solely to provide the take25 service to you and your event participants.
Data Retention
Photos and event data are retained for as long as the associated event is active on the platform. Organizers may delete an event and all associated photos at any time from their dashboard. We will also honor deletion requests from attendees for photos they have published — contact us at the address below.
Third-Party Services
take25 uses the following third-party services to operate:
- •Clerk— handles organizer authentication. Subject to Clerk's privacy policy.
- •Cloudflare R2 — stores uploaded photos in the United States.
- •Convex — provides the real-time database that powers event management.
We do not use advertising networks, sell your data, or share it with any party beyond those necessary to operate the service.
Children's Privacy
take25 is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it promptly.
Your Rights
Depending on where you are located, you may have the right to access, correct, or delete the personal data we hold about you. To make a request, email us at privacy@take25.photos. We will respond within 30 days.
Changes to This Policy
We may update this policy as the service evolves. Material changes will be communicated via email (for organizers) or a notice on the platform. Continued use after changes take effect constitutes acceptance of the updated policy.
Contact
Questions about this policy? Reach us at privacy@take25.photos.