Back to iwasthere

Privacy Policy

Last updated: July 1, 2026

Iwasthere (the "Company") values your privacy and complies with applicable data protection laws. This Service does not collect or process any biometric information such as facial recognition. Uploaded photos and videos are automatically deleted after the event's retention period.

1. Personal Information Collected

  • Email address (authentication and account management)
  • IP address (security and service operation)
  • Uploaded photos and videos (service provision, deleted upon event expiry)
  • Service usage behavior data (page views, clicks, upload/download event logs, for service improvement)

※ No biometric data such as facial embeddings or selfies is collected.

2. Purpose of Collection

  • Email authentication and identity verification
  • Providing the photo album upload/download service
  • Service operation and security management
  • Usage analytics and feature improvement

3. Retention Period

  • Email: Until account termination
  • Uploaded photos and videos: Automatically deleted upon event expiry (Free: 48h, Pro: 7 days)
  • Service usage behavior data: Up to 2 years (retained within the analytics service)
  • Other logs: Up to 30 days

4. Third-Party Disclosure

The Company does not provide personal information to third parties, except as required by law.

5. Data Processing Delegation

The Company delegates the following operations to third parties:

  • Amazon Web Services, Inc. (infrastructure operations and data storage, Seoul region ap-northeast-2)
  • Amplitude, Inc. (usage analytics, United States)

If the identity of the delegate or the scope of delegated tasks changes, we will promptly notify you through this policy.

6. User Rights

Users may request access, correction, deletion, or restriction of their personal information at any time. Please contact us at support@iwasthere.pics.

7. Security Measures

  • Transport encryption (HTTPS/TLS)
  • Minimal access permissions (IAM role-based)
  • Immediate deletion of unnecessary data
  • Identifiable information such as email is transmitted only in an irreversibly hashed form when collecting usage behavior data

8. Cross-Border Transfer of Personal Information

The Company transfers the following personal information overseas to Amplitude, Inc. (based in the United States) for usage analytics purposes.

  • Recipient: Amplitude, Inc.
  • Destination country: United States
  • Items transferred: service usage behavior data (page views, clicks, search/upload event logs), an irreversibly hashed user identifier derived from email, device information (browser, OS, etc.), and IP-based location information
  • Purpose of transfer: usage analytics and feature improvement
  • Timing and method: transmitted in real time over the network each time the service is used
  • Retention period: up to 2 years (per Amplitude's policy)
  • Users have the right to refuse this cross-border transfer. Refusing does not restrict use of the Service other than for analytics purposes.

9. Privacy Officer

Name: Yan So Email: support@iwasthere.pics For privacy inquiries, please contact the above email.