Privacy policy

How we think about your photos.

The short version: what you upload belongs to your circles. This page describes the data we touch, why, and for how long.

Last updated — April 18, 2026

Who this applies to

This policy covers the beisammen mobile app, this website, and the hosted backend services used to operate them.

Data we process

Depending on how you use the product, we may process:

  • account and sign-in data needed for authentication via WorkOS
  • profile data such as your display name, email, and profile image
  • circle, invite, and membership data used to manage private groups
  • media metadata such as filenames, mime types, timestamps, and upload state
  • media files you choose to upload, stored on the configured S3-compatible storage
  • optional location data derived from embedded photo metadata or device permission flows
  • waitlist submissions you send through the website
  • basic technical logs needed to operate, secure, and debug the service

How we use it

  • to authenticate users and keep sessions active
  • to create and operate private circles, invites, and shared libraries
  • to upload, process, and display shared photos and videos
  • to attach optional place labels to media when location information is available
  • to respond to waitlist requests and product access inquiries
  • to maintain security, prevent abuse, and troubleshoot service problems

Permissions

The mobile app may request access to:

  • photos and videos, to select and save media
  • camera, to capture photos and videos
  • microphone, to record video with audio
  • location, to enrich media with place information when you allow it

You can deny optional permissions — some features may no longer work as intended.

Storage and processors

beisammen uses Convex as its application backend and WorkOS for authentication. Original media files are designed to live on S3-compatible storage configured for the active deployment.

Retention

We retain account, circle, and media records for as long as they are needed to operate the service, or until they are deleted from the active deployment. Retention may differ for self-hosted deployments.

Your choices

  • you can choose whether to upload media
  • you can choose whether to grant optional device permissions
  • you can leave the waitlist by contacting the operator of the deployment

Contact

For privacy inquiries related to the official beisammen deployment, use the contact details published on beisammen.app.

← Back to beisammen