Darkroom
Darkroom Privacy Policy
Effective 3 November 2026
Darkroom ("we", "us") is operated by Wesley Roberts, New South Wales, Australia. This policy explains what we collect when you use the Darkroom app, why, who we share it with, and the choices you have. Questions: privacy@darkroomvault.app.
The short version
- Shots you take go into a shared vault. Nobody, including the host and you, can see them until the vault develops.
- After it develops, people in the vault can see them (in public events: the slideshow, plus their own shots).
- Original photos and videos are deleted 7 days after the vault develops. Only the slideshow shots and the highlight video are kept, for as long as the vault exists.
- You can delete your account, and every shot you took, from the app at any time.
- We don't sell your data or show ads.
What we collect
| What | When | Why |
|---|---|---|
| Email address | You sign in with an email code, Apple or Google | To create and secure your account and send sign-in codes and download reminders |
| Name | Shared by Apple or Google at sign-in, or derived from your email | Shown to people in your vaults next to your shots |
| Photos and videos you take in the app, with the time they were taken | You take a shot | To store them in the vault and show them when it develops |
| Vaults you create or join, and their settings | You create or join a vault | To run the vault |
| Reports you make about a shot, and the reason | You report a shot | To keep vaults safe |
| Push notification token | You allow notifications | To tell you when a vault develops and send reminders |
| Basic technical logs (IP address, request times, errors) | You use the app | Security, fixing problems |
We don't access your camera roll (shots are taken in the app and never saved to your device by us unless you choose to download them), your contacts, or your location.
How shots are handled
- Before the reveal: shots are stored encrypted in transit and at rest and are not viewable by anyone through the app.
- Content checks: to keep vaults safe, photos may be checked automatically for explicit or violent content (using Google Cloud Vision) and for known child sexual abuse material. Hosts choose the level of filtering; checks for illegal content always apply.
- After the reveal: people in the vault can view and download shots as described above. Anyone with access can save copies to their own devices, which we can't control afterwards.
- Highlight videos: we automatically make a short video from the slideshow. It's available to people in the vault.
- Removal: the host can remove any shot, you can remove your own, and shots reported by several people are hidden automatically. Removed shots are deleted within minutes.
Who we share data with
We use these service providers to run Darkroom. They process data on our behalf and only as needed:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, file storage, sign-in | Japan (Tokyo) |
| Fly.io | Making highlight videos | Japan (Tokyo) |
| Google Cloud Vision | Automatic content checks on photos | United States / global |
| Expo | Delivering push notifications, app updates | United States |
| Google Firebase Cloud Messaging / Apple Push Notification service | Delivering notifications to your device | United States / global |
| Resend | Sending sign-in and reminder emails | United States |
| Apple, Google | Sign in with Apple / Google, if you use them | United States / global |
We may also disclose information if required by law, or to report illegal content (such as child sexual abuse material) to the relevant authorities.
We don't sell personal information or use it for advertising.
How long we keep it
- Original photos and videos: deleted 7 days after the vault develops.
- Slideshow shots and highlight videos: kept while the vault exists.
- Removed shots: deleted within minutes.
- Your account: until you delete it. Deleting your account deletes your profile and every shot you took, in every vault. Vaults you host pass to another member, or are deleted if you're the only one.
- Reports and logs: kept for up to 12 months for safety and security, then deleted.
Your choices and rights
- Delete your account in the app: home screen → Delete account.
- Remove a shot you took after the reveal: open it in the slideshow → ⋯ → Remove from vault.
- Leave a vault: your shots stay in it unless you remove them or delete your account.
- Notifications: turn them off in your phone's settings.
- Access or correct your data: email privacy@darkroomvault.app.
If you're in Australia, you can complain to us first and then to the Office of the Australian Information Commissioner (oaic.gov.au). If you're in the EU/UK, you have rights under the GDPR, including access, correction, deletion and objection; contact us to use them.
International transfers
Your data is stored in Japan and processed by providers in the United States and elsewhere, as listed above. We rely on these providers' contractual protections for international transfers.
Children
Darkroom is not for children under 13, and we don't knowingly collect their data. If you believe a child has an account, contact us and we'll delete it.
Security
Data is encrypted in transit and at rest, access is restricted by strict permissions in our database, and shots are not viewable by anyone until a vault develops. No system is perfectly secure; tell us at privacy@darkroomvault.app if you find a problem.
Changes
We'll update this policy as Darkroom changes and show the new effective date above. For significant changes we'll let you know in the app.