Back to iwasthere

Privacy Policy

Last updated: July 1, 2026

Iwasthere (the "Company") values your privacy and complies with applicable data protection laws.

⚠️ Special Notice on Facial Data (Biometric Information)

This Service processes facial embeddings (numerical feature vectors) for photo search.

  • Selfie (face photo): Permanently deleted from servers immediately after the search request. Never stored.
  • Faces in event photos: Converted to embedding vectors and deleted when the event expires.
  • Raw biometric images are not retained on our servers.
  • Facial data is not transferred outside of Korea.

⚠️ Notice on outfit/appearance-based estimated search

As an aid to face search, this service may use an embedding derived from the appearance (clothing, body shape, etc.) of a face-matched person to show, in a separate 'estimated' section, photos from the same event where the face is not visible but the person is presumed to be the same.

  • Appearance embeddings are generated for people in event photos and, like face embeddings, are deleted when the event expires.
  • 'Estimated' results are not identity-confirmed by face and may not be you, so they are clearly separated into their own section with a disclaimer.
  • This feature can be disabled by an administrator setting; when disabled, no appearance embeddings are generated or used.

1. Personal Information Collected

  • Email address (authentication and account management)
  • Facial embedding vectors (event photo search, deleted upon event expiry)
  • Selfie images (deleted immediately after search, never stored)
  • IP address (security and service operation)
  • Uploaded photos and videos (service provision, deleted upon event expiry)
  • Service usage behavior data (page views, clicks, search/upload event logs, for service improvement)

2. Purpose of Collection

  • Email authentication and identity verification
  • Facial recognition-based photo search service
  • Service operation and security management
  • Usage analytics and feature improvement

3. Retention Period

  • Email: Until account termination
  • Selfies: Permanently deleted immediately after search processing
  • Event photos and embeddings: Automatically deleted upon event expiry (Free: 48h, Pro: 7 days)
  • Service usage behavior data: Up to 2 years (retained within the analytics service)
  • Other logs: Up to 30 days

4. Third-Party Disclosure

The Company does not provide personal information to third parties, except as required by law.

5. Data Processing Delegation

The Company delegates the following operations to third parties:

  • Amazon Web Services, Inc. (infrastructure operations and data storage, Seoul region ap-northeast-2)
  • Amplitude, Inc. (usage analytics, United States)

If the identity of the delegate or the scope of delegated tasks changes, we will promptly notify you through this policy.

6. User Rights

Users may request access, correction, deletion, or restriction of their personal information at any time. Please contact us at support@iwasthere.pics.

7. Security Measures

  • Transport encryption (HTTPS/TLS)
  • Minimal access permissions (IAM role-based)
  • Immediate deletion of unnecessary data
  • Identifiable information such as email is transmitted only in an irreversibly hashed form when collecting usage behavior data

8. Cross-Border Transfer of Personal Information

The Company transfers the following personal information overseas to Amplitude, Inc. (based in the United States) for usage analytics purposes.

  • Recipient: Amplitude, Inc.
  • Destination country: United States
  • Items transferred: service usage behavior data (page views, clicks, search/upload event logs), an irreversibly hashed user identifier derived from email, device information (browser, OS, etc.), and IP-based location information
  • Purpose of transfer: usage analytics and feature improvement
  • Timing and method: transmitted in real time over the network each time the service is used
  • Retention period: up to 2 years (per Amplitude's policy)
  • Users have the right to refuse this cross-border transfer. Refusing does not restrict use of the Service other than for analytics purposes.

9. Privacy Officer

Name: Yan So Email: support@iwasthere.pics For privacy inquiries, please contact the above email.