Effective 26 September 2026
Who we are
Pair Album is provided by Rootsi Capital OÜ, Estonia. Privacy contact: support@devrootsi.com. This policy covers the iOS app, its shared albums, purchases, optional reminders and product analytics.
Your account
When you first open Pair Album, Supabase creates an anonymous account for you: no email or password. Its session is stored in the iOS Keychain. You choose a first name and, if you like, a profile picture; both are shown to your partner and to the people in chapters you share. You can keep the account with Sign in with Apple. Pair Album asks Apple for neither your name nor your email, so we receive only Apple’s private user identifier.
Your photos and chapters
The photos and videos you choose are uploaded so that your partner and the people you invite to a chapter can see them. We store them privately in Cloudflare R2, reachable only through our server after it checks that the person asking is a member of that chapter. On the free plan we upload a compressed copy (2048 pixels); on Pro we upload the original, including Live Photo motion and video. With each photo we store the date it was taken, the place it was taken (from the photo’s location data), its original file name, a fingerprint used to spot duplicates, and any caption. Chapters store their title, dates and place.
Pair Album does not read your photo library: you pick photos with the system picker, and only those are read. Your favourites are private. Your partner and guests see only the photos that every co-owner of a chapter marked as a favourite.
Sharing
Pairing connects two accounts with a code: from then on, both of you co-own every chapter either of you starts. A chapter invitation code lets someone who was there add their own photos to that one chapter. Keep codes private. When you use the share sheet (a recap image, a printable book, a code or a full export), the file goes to the destination you choose, under that service’s own privacy policy.
Subscription
Apple processes payment; we never see your card details. To unlock Pro for you and your partner, the app sends Apple’s signed transaction to our server, which verifies Apple’s signature and records the subscription’s transaction ID, product, expiry and refund status with your account. Apple also notifies our server of renewals, expiry and refunds.
Reminders and the widget
If you turn on “On this day”, reminders are scheduled on your phone; nothing is sent to us. The widget reads your library from the phone.
Understanding what works
Release builds send product events to PostHog, such as app opens, chapters created, photos added (counts only), pairing, shares, paywall views, purchases and errors. Events carry your anonymous user ID and Pro status. They never include photos, captions, place names, file names, chapter titles or pair codes. Crash reports are collected the same way. PostHog does not store your IP-based location for these events. There are no ads and no cross-app tracking.
Providers and where data lives
Supabase (account, chapters, photo metadata) in the United States; Cloudflare R2 (photos, videos, profile pictures) and a Cloudflare Worker that checks every request; PostHog (analytics) in the EU; Apple (payments, Sign in with Apple). Each processes data on our behalf under its own terms.
Keeping and deleting
We keep your data while you use Pair Album. Photos you delete go to Recently deleted for 30 days, then they and their stored files are removed. In Together, Export everything gives you a copy of every chapter you are in.
Together → Delete account deletes your account data from our servers. If you are paired, the chapters you started pass to your partner with the photos in them, and photos you added to your partner’s chapters stay there as theirs, so your shared record survives for them. Without a partner, your chapters and their photos are deleted. Photos you added to other people’s chapters, your favourites, name, picture and pair are deleted. Deleting the account does not cancel a subscription; cancel it in Settings → Apple ID → Subscriptions. Deleting the app alone removes its files from your phone but not your account.
Your choices and rights
We process your photos and account data to provide the service you ask for, purchase data to give you what you paid for, and limited analytics to improve the app. You may request access, correction or deletion, object to analytics, or raise a privacy concern by emailing support@devrootsi.com. You may also contact your data protection authority, including Estonia’s Andmekaitse Inspektsioon.
Children and changes
Pair Album is intended for adults. If this policy changes, the updated version and its effective date will appear here before the changed processing begins.