ItsPicture Thermal Photo Booth · Operated by Mori Tech Solutions.
We use your email address and one-time sign-in codes delivered through Amazon SES to authenticate you, keep your picture allowance across devices, and connect your purchases to your account. The designated store-review account uses a shared access code and sandbox test data. Apple and Google process your store payments; we do not receive your payment card details.
RevenueCat verifies subscription purchases and processes purchase history and account identifiers for subscription functionality and analytics. Our service records your plan, subscription dates, and accepted-photo counts. We use AWS infrastructure for the API and private photo storage. Service providers process information needed to deliver these functions.
To reserve and reconcile offline photo credits, we store a random identifier for this app on your device, reservation records, and accepted-photo identifiers, counts and timestamps linked to your account. The app keeps its offline allowance and usage journal in platform encrypted storage and sends usage records when connected. Device uptime and reboot information are used locally to enforce the offline deadline; those raw clock values are not uploaded. We process request IP addresses and keyed hashes of sign-in identifiers to limit abuse.
Camera photos stay on your device unless you enable cloud upload. Paid uploads contain optimized color photos (at most 2048 pixels on either side and 1 MB each), with embedded location metadata removed. We do not upload discarded retakes. Anyone holding an unexpired gallery link or QR code can view the uploaded photos while your paid access is active. Obtain permission from the people you photograph before sharing.
When upload and sharing are enabled, accepted photos, the receipt, an optional gallery background and its title wait in an encrypted queue on your device. Uploads retry while the app is open or when it is reopened with a connection and valid paid access. A reserved QR link becomes available after syncing finishes. Settings shows sync status and lets you retry or discard queued uploads. Disabling uploads or signing out pauses syncing; it does not erase waiting photos or accepted-photo usage. Successfully synced photo files are removed from the local queue. Uninstalling or clearing app data loses unsynced photos.
We store galleries and their photos, receipts and backgrounds for up to six calendar months after the last successful delivery of the gallery page or any of its files, or three continuous calendar months after paid access expires, whichever happens first. Canceling renewal alone does not start the three-month period while paid access remains active. For a gallery never successfully served, the six-month period starts when the gallery is created; galleries already stored when access tracking begins receive a six-month grace period from that date. We record the last successful delivery timestamp for each gallery URL and file, including color, black-and-white and download variants. This records delivery by our server, not proof that a person viewed a photo; automated requests can count. This tracking does not store visitor identities or browsing histories. Links stop working when paid access ends or the retention period expires. Resubscribing before deletion can restore links only if the six-month period has not expired. Expired galleries are queued for permanent deletion; storage failures may delay physical erasure while deletion jobs retry. Files already downloaded by other people cannot be recalled.
You can request deletion of your account and cloud photos in the app or through our deletion page. Account deletion disables access immediately and queues file and account erasure. In-app deletion also clears that account's upload queue and offline journal on the current device. Encrypted copies on other offline devices cannot be erased remotely; clear the app's local data on those devices. Store transaction records remain subject to Apple, Google, and RevenueCat retention obligations. Contact us to ask about your data, obtain a copy, or request correction. Infrastructure logs and backups may expire separately under the operator's documented retention settings.
Contact: thermal-printer@moritech.solutions