EverlensPrivacy Policy
Everlens is a disposable camera for events: guests scan a QR code and take photos, and everyone’s photos are revealed together later. This policy explains what personal data we process, why, and the rights you have. Everlens is operated by Wizard Dynamics (“we”, “us”). Questions: hello@wizarddynamics.com.
Who is responsible
The controller for your personal data is Wizard Dynamics. You can reach us about anything in this policy — including requests to access or delete your data — at hello@wizarddynamics.com.
What we collect, and why
We collect what the app needs to work, plus some data to measure whether our advertising works. We do not sell your personal data for money, and we never use your photos or event content for advertising.
- Host account (if you create events): your name and the email address from Sign in with Apple — Apple may give us a private relay address. Used to sign you in and manage your events. You can also continue without an account (guest mode), in which case we hold no name or email for you.
- Photos and event content: the photos guests and hosts capture in the app, plus event details such as the event name and date. This is the core of the service — collecting your event’s photos and showing them at the reveal.
- Identifiers: a user ID that links your data to you, and device identifiers used by our payments and ad measurement providers to connect a purchase or install to your device.
- Purchases: which event package you bought, and whether you bought it via Apple In-App Purchase or on our website via Stripe. Apple or Stripe processes the payment — we never receive your card or bank details. For a purchase on our website we also store the email address you enter at checkout, so we can reach you about that purchase, and the campaign details of the ad or link that brought you to us.
- Ad measurement: see “Tracking and ad measurement” below.
What we don’t collect
We don’t collect your precise location, your contacts, health data, or your browsing history on other websites. We use your IP address to work out your country, for example to decide whether the Meta pixel may run.
Tracking and ad measurement
We use tracking to see which ads bring people to Everlens, so we only pay for ads that actually work. Your event photos are never used for this.
- iPhone app for hosts: when you first open the app, it asks for permission to track you (App Tracking Transparency). If you allow it, our measurement provider Tenjin and RevenueCat receive your advertising identifier (IDFA). If you decline, they still receive other data such as a device identifier, your IP address, device and app information, and install and purchase events, but not the IDFA. The app also reports installs through Apple’s SKAdNetwork. You can change your choice at any time in iOS Settings under Privacy & Security, then Tracking.
- Our website for creating events: if you are outside the EEA, the UK and Switzerland, these pages use the Meta pixel and Meta’s Conversions API. Meta receives the pages you view and events such as starting or completing a purchase, including the purchase value, your IP address, browser details, a hashed version of your email address and user ID, and Meta’s cookies (_fbp and _fbc, stored for up to 90 days). Meta can use this to measure and improve our ads. Inside the EEA, the UK and Switzerland, neither runs. You can block or delete these cookies in your browser and manage your ad preferences with Meta.
- Where we don’t track: the guest camera (App Clip and browser) and the Android app contain no Tenjin, RevenueCat or Meta tracking. This marketing website uses no tracking and no cookies.
Guests don’t need an account
Guests join an event anonymously by scanning the host’s QR code. No sign-up or email is required — a guest only provides the photos they choose to take and, if they like, an optional first name that is shown with their photos in the event gallery.
How photos are shared
Photos belong to the event. They are private: visible to the event’s host and — depending on the host’s settings — to the other guests of that same event, and only after the host reveals the roll. Photos are not public and are not indexed by search engines.
Service providers we use
We rely on these providers to run the service and to measure our ads:
- Supabase — database, photo storage, and authentication (servers in the United States).
- Apple — Sign in with Apple, In-App Purchase, and push notifications.
- Stripe — payment processing for purchases made on our website.
- RevenueCat — manages in-app purchases and passes purchase and device data on to Tenjin.
- Tenjin — measures which ads lead to installs and purchases in the iPhone app.
- Meta — ad measurement on our website, outside the EEA, the UK and Switzerland.
- Google — Google Play Billing for purchases in the Android app.
- Vercel — website hosting. Vercel’s servers process technical data such as your IP address when you visit.
Each provider processes data under its own privacy terms and our agreements with them. Some of them, such as Meta, may also act as independent controllers of the data they receive.
Where your data is stored
Our backend is hosted in the United States. Where data is transferred out of your country, we rely on appropriate safeguards such as the providers’ standard contractual clauses.
How long we keep it
We keep event data and photos until the host deletes the event or their account, or asks us to delete it. After that we remove it from active systems. Backups are rotated regularly.
Your rights
If you are in the EU/EEA or the UK, you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You can withdraw consent at any time. To exercise any of these, email hello@wizarddynamics.com. You may also complain to your local data protection authority.
Children
Everlens is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
Security
Data is encrypted in transit (HTTPS/TLS), and access is restricted by row-level security rules so that one event’s photos are never exposed to another event.
Changes to this policy
We may update this policy from time to time. The date at the top shows the latest version; material changes will be highlighted in the app or on this page.
Contact
Wizard Dynamics — hello@wizarddynamics.com.