EventPixie

Privacy Policy

Effective date: October 11, 2026

EventPixie is a camera app for guests at events. It is made by Allen Christopher Software LLC (“we”, “us”), a software company in New York.

This policy explains what EventPixie collects, who can see it, how long it is kept, and what you can do about it. It covers the EventPixie app for iPhone and iPad. When you open an event’s online gallery in your browser, the SnapShot Studio Privacy Policy also applies.

2. Who is in charge of your photos

EventPixie is part of SnapShot Studio, software we license to photo booth operators and event businesses. The host of your event uses it to collect and share guests’ photos. The host is the business that holds the SnapShot Studio license and hosted your event.

• The host decides how the photos from their event are used: whether guest photos are reviewed, which ones appear in the gallery or on screens, whether they are printed, and how long they are kept. For your photos, your name and your postcard messages, the host is responsible for how they are used (in European privacy law, the host is the “controller”).
• We run the service for the host. We store and deliver those photos on the host’s behalf and follow the host’s settings. We don’t use them for our own purposes (in European terms, we are the host’s “processor”; under California law, the host’s “service provider”).
• We are responsible ourselves for a small amount of technical information we need to run and protect EventPixie: the device code described in section 3, IP addresses, the app version, and anything you send us when you contact support.

3. What we collect

When you join an event

• The event code you scan or type, so we can connect you to the right event.
• A device code. The first time you use EventPixie, the app creates a random number and keeps it in your phone’s keychain. For each event, the app combines it with the event code and scrambles it (a one-way hash) before sending it. We use it to keep your photos tied to your phone for that event and to apply the host’s limit on photos per guest. It is different for every event, it can’t be turned back into the random number, and it is not your phone’s serial number, advertising ID or any other Apple identifier.

When you share a photo

• Your photo, as edited by you: filters, retouching, borders, props and stickers included. If you add a sticker made from a picture in your photo library, only that cutout becomes part of the photo; the app never reads the rest of your library.
• The unedited original, if the host has turned this on. The app tells you the first time (“The host receives your edited photo and the original.”). The original goes to the host only. It is never shown in the gallery, on a slideshow or on a booth screen.
• Your postcard message, if you write or draw one on the back. It is sent to the host as a picture. It is not shown in the gallery.
• Your name, only if you type one in the optional name field. The host sees it with your photo.
• Which effects you used (filter, border, retouching level, number of props), so the photo displays correctly.

Automatically, with every request

• Your IP address, which any internet connection reveals. We use it to block abuse, such as someone guessing event codes, and it appears in our server logs.
• The app version, so we can ask you to update if your version is too old for an event.

What we don’t collect

Your location (photos are sent without location data or camera details), your contacts, your email address or phone number, your browsing, any advertising identifier, or anything from your photo library except a picture you pick yourself. We don’t use cookies, analytics or advertising tools in the app. We don’t run facial recognition, and we don’t use your photos to train machine-learning models.

Camera and photos permissions

EventPixie asks for the camera to take photos and to scan event QR codes. It asks to add to your photo library only when you tap Save; it cannot see what is already there. You can change either permission at any time in your phone’s Settings.

4. What stays on your phone

• Retouching, stickers, filters and borders are done on your phone. Retouching uses Apple’s on-device face detection to find where to apply the effect. That information is used only for the effect and is never saved or sent.
• Photos waiting to upload are kept in the app until they are delivered, so nothing is lost if your connection drops. They are deleted from the app once the upload succeeds.
• The current event and a list of up to 20 past event galleries (event name, host name and link), so you can open those galleries again later.
• Your sign-in to the event, which expires after 6 hours or when the event ends.
• The random device code in your keychain. Deleting the app removes everything else; the keychain item may remain until you erase the phone.
• Photos you save to your photo library are yours. We can’t see or delete them.

5. How we use information

Only to run EventPixie for you and the host:

• to connect you to the event and deliver your photos to the host;
• to show your photo where the host chooses: the event gallery, the host’s photo booths, slideshows and photo walls, and prints;
• to apply the host’s limits and to stop abuse;
• to keep the service working, secure, and fixed when something breaks;
• to answer you when you contact us;
• to meet legal obligations.

We don’t sell your information. We don’t share it for advertising. We don’t use it to market to you; we don’t even have a way to contact you unless you write to us.

6. Who can see your photos

• The host and their team, in their SnapShot Studio account. They see every photo you share, the original (if turned on), your postcard message and your name.
• Event guests and anyone with the gallery link, once the host approves your photo or if the host doesn’t review guest photos. Galleries are unlisted rather than secret: they aren’t listed in search engines, and the host can add a password, but anyone with the link can view them. Your name, your postcard message and the original are not shown in the gallery.
• People at the event, if the host shows approved guest photos on a photo booth, slideshow or photo wall, or lets guests print or send them from a booth.
• Wherever the host keeps their own copy. Hosts can download their event photos or have them delivered to their own Dropbox or Google Drive. Once there, those copies are the host’s responsibility.
• Our staff, only when needed to support the host, keep the service running, or meet a legal obligation.

See something that shouldn’t be there? Every photo in an event gallery has a “Report this photo” link. Most reports go to the host and to us; reports of child sexual abuse or exploitation go only to us, and we report apparent child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC) as the law requires; see section 9 for what happens next.

We never publish your photos ourselves or use them in our own marketing.

7. Service providers

We use a small number of providers to run the service. Each receives only what its job needs and may not use it for anything else.

• DigitalOcean (United States): our servers, file storage, database and backups.
• Sentry (Functional Software, Inc., United States): error reports from our servers when something fails, with request contents, cookies and sign-in details removed.

If the host has a photo texted or emailed to someone from a photo booth, or delivered to the host’s own cloud storage, the providers listed in the SnapShot Studio Privacy Policy handle that delivery.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or the public. If our business is sold or merged, information may transfer to the new owner under this policy.

8. How long we keep information

• Photos, originals, postcard messages and names: as long as the host keeps them. Hosts can delete photos at any time. We don’t delete an active host’s photos on a timer. If the host’s SnapShot Studio account closes, everything from their events is deleted as described in the SnapShot Studio Privacy Policy (section 8).
• When a photo is deleted, it disappears from the gallery, slideshows and booths right away.
• Backups: deleted information can remain in our backups for up to 35 days until they are replaced.
• Server logs with IP addresses: 14 days. Abuse-prevention counters: about one minute.
• The device code for an event: kept with that event’s records and deleted with them.
• Support emails and photo reports: as long as needed to handle them, then deleted.

9. Your choices and rights

• Don’t want a photo shared? Don’t tap share. Nothing leaves your phone until you do. Leave the name field empty to share without a name.
• Report or remove a photo. Every photo in an event gallery has a “Report this photo” link. You can also ask the event’s host, who can delete it from their account, or email support@allenchristopher.com with “EventPixie” in the subject, the event name, the date, roughly when you shared it, and a description of the photo. Because the host is in charge of the event’s photos, we pass your request to the host first. If the host hasn’t acted within 30 days, we remove the photo ourselves. We remove it right away, without waiting for the host, when it involves a child, a safety concern, or a legal issue.
• Ask what we hold about you, or ask us to correct or delete it. Email the address above. We don’t charge for this and won’t treat you differently for asking. Because we don’t collect names or contact details unless you give them, we may need your help to find your photos.
• Phone settings: you can turn off camera or photo library access at any time, and delete the app to remove the information in section 4.

Depending on where you live, you may have more rights; see sections 12 and 13. We honor these requests wherever you live.

10. Children

EventPixie is not directed at children under 13, and we don’t knowingly collect personal information from them. The app collects no contact details and needs no account. Events can include families, and photos taken at an event may show children; those photos are handled by the event’s host. If you believe a child’s information or photo was shared through EventPixie and should be removed, use “Report this photo” in the gallery or email support@allenchristopher.com (subject “EventPixie”), and we will remove it right away, without waiting for the host.

11. Security

Everything the app sends travels over encrypted connections (HTTPS). The app keeps its event sign-in and device code in the phone’s keychain. Our servers are access-controlled, and staff access is limited to what their work needs. Photos in a gallery can be viewed by anyone with the link, and no system is perfectly secure, but we work to protect information against unauthorized access, change and loss.

12. People in the European Union, the United Kingdom and Switzerland

• Roles: the host is the controller for photos, originals, postcard messages and names; we process them on the host’s behalf. We are the controller for the technical data in section 2.
• Legal bases for the data we control: our legitimate interests in running a secure, working service and preventing abuse (Art. 6(1)(f) GDPR), and legal obligations (Art. 6(1)(c)). For photos, the host decides the legal basis for their event.
• Your rights: access, correction, deletion, restriction, objection and portability. Contact the host for event photos, or contact us and we will pass your request on and help. You may also complain to the data protection authority where you live or work.
• International transfers: we and our servers are in the United States, so information is transferred there. Where the law requires it, we use recognized safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses.

13. California and other U.S. states

• We don’t sell or share personal information, as those words are defined in the California Consumer Privacy Act, and we don’t use it for targeted advertising or profiling. There is nothing to opt out of.
• Categories we collect (California): identifiers (the device code and IP address); visual information (photos and postcard pictures); a name, if you give one; and internet activity limited to app requests in our server logs. Sources: you and your device. Purposes and retention: sections 5 and 8. We disclose them only to the host and the service providers in section 7.
• Sensitive information: we don’t collect any for inferring characteristics. Face detection for retouching happens only on your phone and isn’t kept.
• Do Not Track: EventPixie doesn’t track you across apps or websites, so there is nothing for a Do Not Track signal to change.
• Residents of California and other states with privacy laws can use the rights in section 9. For photos we hold for a host, we may refer the request to the host as their service provider.

14. Changes to this policy

If we change this policy, we will update the effective date above. If a change significantly affects how we use information already collected, we will tell hosts and, where we can, show a notice in the app before it takes effect.

15. Contact us