Privacy Policy

This Privacy Policy explains which personal data Camzo processes, why we process it, who receives it, and which choices and rights you have.

1. Who is responsible?

The Camzo provider identified in the contact block below is the controller for personal data processed through the app and website. For privacy questions, email privacy@camzo.app.

2. Data we process

• Account and profile: name, email address, username, bio, avatar, linked Apple or Google account identifier, country and onboarding choices.
• Your content: photos, memories, notes, travel stamps, albums, tips, collections, trips and the locations and dates you attach to them.
• Location and visits: precise location when you use map, geofence or landmark features, visited points of interest, arrival and notification times and proof photos.
• Photo import: with your permission, the app can scan photos, dates and locations on the device. Only content you select or upload as proof is sent to Camzo.
• Social links and AI: TikTok or Instagram links, retrieved public metadata and media, analysis requests, selected language, results and error status.
• Sharing and moderation: album, collection and trip memberships, follows and blocks, public profile content and reports of potentially inappropriate content.
• Subscriptions: platform, product, transaction identifier, subscription status and start, expiry and cancellation dates. Camzo does not receive full payment-card details.
• Technical and security data: IP address, request time, requested route, browser user-agent where available and limited server and security logs. We do not use advertising tracking.

3. Purposes and legal bases

• Performance of our contract: managing your account, storing and displaying content, and providing maps, sharing, trips, tips, data export, subscriptions and support.
• Consent: access to camera, photo library, precise or background location and notifications. You can withdraw device permissions at any time; some features will then stop working.
• Legitimate interests: preventing fraud and abuse, securing the service, investigating failures, moderating public content and improving reliability. We balance these interests against your rights.
• Legal obligations: responding to valid authority requests and retaining information where tax, accounting or other law requires it.

4. Location, photos and notifications

Place reminders are optional. If enabled, the device may check in the background whether you reached a landmark. A visit is sent to Camzo only to record a visit or unlock. You can disable the feature and its permissions in the app or device settings.

Photo import analyses available photo metadata on the device. Camzo does not automatically upload your full photo library.

5. AI analysis and social platforms

When you deliberately analyse a TikTok or Instagram link, Camzo may retrieve public metadata and temporary images or video and submit them to Google Gemini or Anthropic Claude to recognise places and prepare summaries. Temporary analysis media is removed after processing; analysis requests are normally pruned within one day. AI output may be inaccurate and is not used for decisions producing legal or similarly significant effects.

TikTok, Instagram, Google and Anthropic process data under their own terms and privacy policies.

6. Recipients

We do not sell personal data or share it for behavioural advertising.

• Hosting, storage and delivery: the configured hosting provider, Cloudflare Images and email providers such as Postmark, Resend or Amazon SES.
• Login and purchases: Apple, Google and the relevant App Store or Google Play Store.
• Maps and places: Apple MapKit, Carto, OpenStreetMap/Nominatim and Google Places, depending on device and feature.
• AI and source platforms: Google Gemini or Anthropic and, only when you import a link, TikTok or Instagram.
• Other users: only profile data and content you make public or share in an album, collection or trip.
• Authorities or advisers: only where legally required or necessary for legal claims, safety or fraud prevention.

7. Transfers outside the EEA

Some suppliers may process data outside the European Economic Area, particularly in the United States. Where required, we rely on an adequacy decision, standard contractual clauses or another valid transfer mechanism. You can request information about applicable safeguards through the privacy email address.

8. Public and shared content

New stamps and tips are private by default. If you make content public, other people can view and share it. Content in shared albums, collections and trips is visible to their members. Make content private again or delete it to stop future visibility through Camzo; copies lawfully saved by others outside Camzo may remain outside our control.

9. Retention

• Account and profile data: while the account exists and then removed through the deletion process.
• Photos, stamps, tips, albums, trips, locations and visits: until you delete them or your account.
• Temporary AI analysis requests and media: normally no more than one day, except for a short technical retry.
• Security and server logs: normally no more than 30 days, and longer only for a specific security incident or legal duty.
• Resolved moderation records: no more than 24 months, unless longer retention is needed for safety, a dispute or a legal duty.
• Backups: deleted material may remain in secured, inactive backups for up to 90 days and is not restored to production.
• Purchase and tax information: only as long as Camzo or the store is legally required to retain it. Apple and Google apply their own retention periods.

10. Your rights and choices

We may request reasonable information to verify your identity. We normally respond within one month. In-app deletion is permanent; you must separately cancel a store subscription with Apple or Google.

• Access your data and export it as a JSON file from account settings.
• Correct inaccurate information and delete content.
• Delete your account and associated content directly from the app.
• Object to processing based on legitimate interests and request restriction or portability.
• Withdraw consent without affecting earlier lawful processing.
• Complain to the Dutch Data Protection Authority or your local supervisory authority.

11. Children

Camzo is intended for people aged 16 and over. We do not knowingly collect data from children under 16. Contact us if you believe a younger child is using an account so we can take appropriate action.

12. Security

We use measures including encrypted connections, hashed passwords, secure token storage, access restrictions, rate limiting and backups. No system is completely secure; report a suspected security issue through the privacy email address.

13. Website, cookies and external links

The website may use strictly necessary session or language settings and limited server logs. It may load fonts from Google, which discloses your IP address to Google. External links and stores are governed by the privacy rules of those parties.

14. Changes and contact

We may update this policy when the service, suppliers or law changes. For material changes, we will provide in-app or email notice before they take effect where reasonably required. The current date and version appear at the top.

Send questions or requests to privacy@camzo.app.