Private albums need clear rules.

1. Who controls the information

Data controller/operator: [LEGAL OWNER OR COMPANY NAME]. Privacy contact: [PRIVACY EMAIL]. Postal address: [BUSINESS ADDRESS]. These details must be completed before public launch.

2. Information we collect

• Account email, display name, authentication identifier and account status.
• Anonymous guest identifier and chosen guest name.
• Event title, occasion, optional personal names, date, location, settings, host, members and invitation code.
• Photos, future videos if enabled, thumbnails, captions, file metadata and uploader identity.
• Reports, descriptions, reporter contact, blocks, moderation actions and appeals.
• Pro and Partner profile, workflow, package, availability, request and quote information where used.
• Technical, authentication, security and activity records produced by our infrastructure.

3. Why we process it

We use information to authenticate users; create and join private events; synchronize albums; compress and display uploads; provide host controls; save creative drafts; prevent abuse; investigate reports; protect users; respond to support; maintain reliability; enforce our Terms; and comply with lawful requests. Mehfil currently contains no advertising SDK, behavioural advertising, payment processing or cross-app tracking.

4. Photos, videos and event visibility

Event content is available only to authorized event members through app controls, subject to blocks and host settings. A host can remove participants and uploads. Uploaders can delete their uploads. Invitation codes should be treated as private. Saving or sharing creates a copy outside Mehfil governed by the recipient, device and external app.

5. Reports and safety information

A no-login report may include an event code or link, content reference, category, description and reporter email. We use it to locate content, assess risk, communicate and document action. We do not publicly display reporter contact details and will not expose them to the reported user unnecessarily.

6. Service providers and international processing

Mehfil uses Supabase for authentication, database, realtime synchronization and private file storage. Cloud and device services may process information outside Pakistan. We will maintain appropriate contractual and security arrangements. External apps selected through the native share sheet process exported information under their own policies.

7. Retention, reports and legal holds

Events and cloud content are scheduled for deletion after the selected retention period, currently 30 days by default during development, unless deleted sooner. Closed public reports and appeals are ordinarily retained for 90 days to document decisions, prevent abuse and support review. Open investigations, legal holds, safety evidence, disputes and records required by law may be kept longer. A legal hold pauses ordinary deletion only for the affected event or material and is released when preservation is no longer reasonably required. Encrypted backups expire on a controlled schedule.

8. Legal preservation and disclosure

PECA may require service providers to preserve or disclose specified data through lawful procedures. We may preserve and disclose information in response to a valid preservation direction, warrant, court order, regulatory direction or other binding process. We will disclose only what is permitted or required and may seek clarification or challenge an excessive request where appropriate.

9. Security

We use private storage, access controls, row-level database policies, authentication, compressed derivatives and limited event membership. No service can guarantee absolute security. Users should protect invitation codes and retain independent copies of important photographs.

10. Children

Mehfil is not directed to children under 13. Parents, guardians and hosts must obtain permissions required for images of minors. Content that sexually exploits or endangers a child is prohibited and may be preserved and referred to competent authorities. Do not upload such material to the reporting form; submit only the information needed to locate it.

11. Your controls, decisions and appeals

You can delete uploads, leave eligible events, block or unblock users and delete your account in the app. You may request access, correction or deletion of other information through the privacy contact. Rights may be limited where retention is required for safety, legal claims, preservation or compliance. A reporter whose report was rejected or resolved may use the public appeal form with the original reference and email. Where practical, a different reviewer considers the appeal and records whether the original decision is upheld or overturned.

12. Changes and contact

We will update the effective date when practices materially change. Privacy questions: [PRIVACY EMAIL]. Content complaints: Report content without logging in.