We Take Your Privacy Seriously

Last updated: November 1, 2026

1. Who We Are

Playdate.pics is a private photo-sharing site for families and friends, operated by X1Q1 Labs LLC in the United States (“we”, “us”). We do not run ads. We do not sell or rent your personal information. Ever.

2. What We Collect

Only what we need to run the site:

Account details: your name, email address, password (stored only as a secure hash) and, if you choose, a handle and a mobile phone number.
Your photos and what you add to them: the original files you upload, the titles, descriptions and captions you write, and the albums, groups, comments, likes and messages you create.
Photo details inside the original file: photos can contain hidden metadata such as location (GPS), dates and camera or phone details. Uploads remove it by default, as each photo arrives and before anything is saved. If you uncheck that option, we keep the file exactly as you uploaded it, and anyone allowed to download the original can read that metadata. The viewing copies we make never include it.
Plan details: your plan, renewal date and any coupon used. When card payments are offered they will be handled by a payment processor; we will not store full card numbers.
Policy acceptance records: the version and fingerprint of the Terms and Privacy Policy accepted, the time, the account accepting (including a guardian accepting for a child), the relevant upload-link/permission version for public contributions, and a keyed hash of the network address for abuse prevention. Guest upload names are shown to the album owner and authorized viewers.
Upload and download records: the IP address used to upload each photo, including uploads through a public upload link, and the IP address and time of each original-photo or bundle download, including downloads through an emailed link. We record this to ensure compliance with our Terms of Service and to aid in reporting illegal conduct.
Security and service records: sign-in times, your browser’s session information (including IP address) for security, and album activity such as visits and additions. Album activity never records IP addresses.
Support requests: what you send through the feedback form, plus basic page and device information if you choose to include it.

We do not currently collect government IDs. We do not sell your photos or personal information, use family media for advertising or public marketing, perform facial recognition or profile people from photos, or use photos or children’s data to train artificial-intelligence models. We do not submit family media to third-party AI systems for their use.

3. How We Use It

To sign you in and keep your account secure.
To store, process and show your photos to the people you choose (we create smaller viewing copies on our servers).
To send account messages: email verification, invitations, password resets, reminders before photos expire, and, if you agree, text messages to your verified phone.
To answer support requests, investigate relevant abuse or legal complaints, retain evidence of policy acceptance and keep the service working. We may review uploaded images and related information, including images in private albums, to confirm compliance with our Terms of Service and to investigate suspected abuse, complaints or legal obligations. Only authorized personnel may do this. Each review requires a recorded reason and is logged, including who reviewed which images. We do not routinely browse private family albums.

4. Who Can See Your Photos

Every new album is private until shared. You choose an audience of people, groups or links, and the site shows the audience before you contribute. Each stored photo has one account owner. Guardians control images uploaded through their child accounts. Album and group administrators cannot override another uploader's rights over their original photos.

You may upload a photo to an album owned or controlled by someone else. That organizer can manage the album's audience, including changing its members after you contribute. Your acknowledged audience may therefore include people you do not yet know. Access remains subject to live source grants, owner restrictions and applicable guardian approvals.

Guest uploads. If you add photos without signing in through a public upload link, the album owner controls those stored photos and pays their storage quota. You grant the owner an irrevocable license to keep, use, copy, download, display, share and delete them, subject to our Terms, as if the owner had uploaded them. Your copyright is not transferred, and you can grant only the rights you hold. You have no self-service viewing, editing or deletion access to those guest contributions; contact the album owner or support with concerns. Your guest name and the photos are visible to the album owner and authorized viewers, subject to any review hold. An upload link does not grant permission to view the album. Creating an account later does not revoke the license already granted.

Recipients may save or screenshot photos they can see. Once a photo is shared, neither you nor Playdate.pics can prevent a recipient from posting a copy elsewhere, including on social networks. Our Terms require express permission to redistribute another person's photo, but removing site access cannot recall copies already kept or remove them from other services. Private photos are not intentionally exposed to search engines; an external repost is outside our control.

Your profile is not listed in the member directory unless you turn on a directory listing in your Account. You can choose to be found by name, handle or verified phone number separately. Children are never listed. If you block someone, that block overrides album or group grants to your photos and hides your comments from that person.

5. How We Store And Protect It

Photos are stored privately and encrypted at rest on our servers, and every photo request is checked against your sharing choices before anything is sent. Connections use encryption in transit, and passwords are hashed. When you choose a password, we send the first five characters of a one-way hash of it to the third-party Have I Been Pwned service to check whether it has appeared in a known data breach. The password itself is never sent, and this check can't be used to recover it. Because we make viewing copies on our servers, this is server-side encryption, not end-to-end encryption. No system is perfectly secure, so please also keep your own copies of photos that matter to you.

6. Service Providers

We use a small number of providers to operate the site, such as hosting, email delivery and bot protection on sign-up forms, and text-message delivery and payment processing when those features become available. They process information only to provide those services to us. We do not provide family media to advertisers or AI-training providers.

We share photos with the audiences authorized through the service, including audiences chosen by an album owner for guest contributions. We may also disclose relevant information when reasonably necessary to comply with law, respond to valid legal process, protect safety or investigate abuse. These limited purposes are distinct from selling data or using it for advertising.

7. Keeping And Deleting Data

Photos are retained for the period selected for them, within the account plan's limits. The account owner, or the guardian controlling a child account, can remove their own uploaded content sooner. Album deletion removes that album and its references; it does not delete another owner's original photo. Guest uploads are controlled by the receiving album owner as described above.

Deletion or expiry stops new access through Playdate.pics. Physical file cleanup follows through scheduled processing and may not occur at the same instant. Removing a child account hides its content immediately; cleanup follows our removal process. Account closure may first require resolving dependent children or transferring or deleting groups you own.

Database backups are encrypted. Daily backups rotate after about two weeks and other backups after about 30 days, so removal is not instantaneous across every backup. We keep routine application logs for about two weeks, security and activity logs for about 13 months, and image-review records for up to three years. We keep a photo's upload IP address while the photo is stored and for about 13 months after it is deleted, and download records for about 13 months. If we permanently ban an account, we keep a one-way code made from its email address and phone number so that the same person cannot sign up again. We retain limited security, consent, complaint and legal records as reasonably necessary to prevent abuse, document agreements, resolve disputes or comply with law. A policy-acceptance record is evidence of an agreement, not permission to continue displaying a deleted photo. Where the law requires us to preserve a photo and its records, or we are investigating suspected illegal content, we may keep them in restricted storage after they are removed or deleted, and they are not available to anyone through the site during that time. We do not restore deleted content to active access from a backup. We cannot recall downloaded copies or erase copies other people posted elsewhere. Contact support about retention or removal requests.

8. Children

Independent account registration is for adults aged 18 or older. Anyone under 18 needs permission from a parent or legal guardian and must use a child account created and supervised by an authorized guardian. The guardian controls the child's account, reviews relevant activity and messages, and controls images uploaded through that child account. Children cannot accept policy updates for their guardian or grant themselves guardian privileges.

A guardian accepts the Terms and Privacy Policy for a child account and confirms parental authority. That acknowledgement is not by itself claimed to be verifiable parental consent under COPPA. We do not enable real child accounts until the applicable consent and privacy requirements have been reviewed and met; availability may be restricted during the private beta. Adult-uploaded photographs depicting children require appropriate uploader rights and permissions and are distinct from information supplied directly by a child.

We use private defaults and guardian approval controls, do not list children in discovery, and do not use children's data for behavioral advertising or AI-model training. Parents and guardians may request access, correction or deletion of the child's account and its own content. They do not gain control over another uploader's originals; contact support for review or removal requests about those photos. If a child has created an independent account, contact us so we can restrict access and work with the parent or guardian.

9. Your Rights (Including California)

You can download a copy of your account data from your Account page, correct your details, or delete your account at any time. You may also ask us to access, correct or delete your information, and California residents may have additional rights under applicable privacy laws, including CCPA/CPRA where applicable. We honor applicable rights to know, access, correct and request deletion, subject to lawful exceptions and verification of the request. We do not sell or share personal information for advertising. To make a request, email support@playdate.pics.

10. Cookies

We use a small number of cookies to keep you signed in, protect forms and remember simple preferences. We do not use advertising cookies or third-party analytics such as Google Analytics.

11. Changes To This Policy

We keep prior versions in our policy history. When this policy or the Terms are updated, we show an update notice and ask you to review and explicitly accept the current versions before continuing. Guardians accept for their child accounts, and guests accept the applicable current policies before public-link viewing or guest uploads. We record the version, accepting person/account where applicable and time. We send additional notices when applicable law requires them. You can decline to continue, sign out, request your data or close your account. The date at the top identifies this version.

12. Contact Us

Questions, concerns or data requests: support@playdate.pics.

Prior Terms And Privacy Versions · Review Policy Acceptance