Your face is personal. We treat it that way.

Information you provide

Depending on how you use SelfieTime, you may provide an email address, password, username or display name, city, profile photo, event profile details, social links, game and event names, connection notes, and support messages.

When you opt in to face matching, we process your profile photo to create a face identifier. That identifier and your profile photo are linked to your account so SelfieTime can recognize participating players or opted-in attendees.

Friend invites

You can select phone numbers using Apple's contact picker and review each invitation in the message composer. Selected contacts stay on your device; SelfieTime does not upload or store your address book or invite recipients' phone numbers. Your invite link includes a random code associated with your account and displays your public username.

If a new user signs up with your invite code, we store that referral. Your Profile shows aggregate counts of friends who joined, games they played after starting, and successful captures of those friends. Sharing an invite alone does not count as a joined friend. Referral records are removed when either associated account is deleted.

Face data: collection, consent, use, and retention

What we collect. Face data includes your profile selfie; a mathematical face vector encrypted at rest; the AWS-assigned face and image identifiers associated with that vector; and face-detection or comparison results such as bounding boxes, similarity scores, and match confidence. A game or event selfie temporarily includes the visible faces in that photo.

How we collect it and obtain permission. You choose when to take a profile, game, or event selfie. Before SelfieTime first uploads a photo for face processing, it names Amazon Web Services (AWS) Rekognition, explains the data sent and the purpose, describes storage and deletion, links to this policy, and requires your affirmative agreement. You can decline; face-matching and selfie-game features will then be unavailable. Game and event matching is limited to participating people who accepted the disclosure, and participants must also obtain the real-world agreement of everyone included in a photo.

Why we use it. The profile selfie is the reference image other participants see. Its face vector lets SelfieTime recognize an opted-in player or attendee. The iOS game uses a game selfie only to verify that the signed-in player and assigned target are both present. Event mode uses an event selfie to recognize opted-in attendees and create the requested connection. We do not use face data for advertising, tracking, surveillance, authentication, or decisions about employment, credit, healthcare, eligibility, or access to essential services.

What is retained. SelfieTime stores your profile selfie in its account database and AWS stores its mathematical face vector, encrypted at rest, in our private Rekognition collection. Both remain while your account or event profile is active. Replacing a profile selfie overwrites the prior profile image and deletes the prior face vector. Deleting an iOS account deletes the stored profile selfie and face vector. Game selfies are held in memory only for the verification request and are not written to SelfieTime's database or object storage; they are discarded immediately after verification. We retain the match result, confidence score, points, and game history until account deletion. Event connection selfies are stored with the connection until a participant or event owner completes a deletion request; there is currently no shorter automatic expiry.

How we use information

• Provide accounts, private games, events, face matching, connections, scores, and leaderboards.
• Authenticate users, prevent abuse, troubleshoot problems, and respond to support requests.
• Operate, secure, and improve SelfieTime.
• Comply with law and protect users, SelfieTime, and others.

SelfieTime does not use third-party advertising, does not track you across other companies' apps or websites, and does not sell personal information.

When information is shared

Profile information and photos are shown only as needed for the game, event, or connection you joined. Our API and Railway-hosted PostgreSQL database process and store account information and profile or connection photos in the United States.

We send profile, game, and event selfies to Amazon Web Services (AWS) Rekognition in the United States for face detection and matching. Rekognition stores the face vector made from a profile selfie, encrypted at rest, in our private collection, but does not store the actual image in that collection. Our AWS account is configured to opt out of AWS using these photos for service improvement. AWS and Railway act as service providers, and we require them to protect the information consistently with this policy and applicable law and not use it for their own advertising or tracking.

We may disclose information when required by law, to address fraud or safety concerns, or as part of a business transaction subject to appropriate safeguards. We do not disclose face data to data brokers or advertisers.

Retention and deletion

The face-data retention periods are stated in Face data: collection, consent, use, and retention. Other profile information is generally kept while your account remains active. Gameplay records are kept to provide game history and scores until account deletion. Event profiles, connection selfies, and notes are kept until a valid attendee or event-owner deletion request is completed.

In the iOS app, delete your account from Profile → Delete account. This immediately removes the active account database record, associated gameplay records, stored profile photo, and indexed AWS face vector. Event attendees and anyone unable to access the app can request deletion by emailing simon@apricotstudios.ca. Limited non-photo records may be retained only when required for security, fraud prevention, or legal compliance.

Your choices and rights

You can decline camera access, although selfie features will not work. You can edit app profile details, leave an event, request access or correction, object to or restrict certain processing where applicable, and request deletion. We may need to verify your identity before completing a privacy request.

Security, transfers, and children

We use administrative, technical, and organizational safeguards designed to protect personal information. No online service can promise absolute security. Our providers may process information in Canada, the United States, and other places where they operate.

SelfieTime is not directed to children under 13. If you believe a child provided personal information without appropriate permission, contact us so we can investigate and delete it.

Changes and contact

We may update this policy as SelfieTime changes. We will post the new effective date here and provide additional notice when required.

Questions or privacy requests: simon@apricotstudios.ca.