Privacy policy

CreateBooth ("we", "us") operates the CreateBooth app and website. Contact us at [email protected]. This policy explains what data we collect, why, who we share it with, and your choices. We do not sell your data and we do not use it for cross-app advertising or tracking.

1. Data we collect

2. Processed on your device only

Live camera frames used for local face detection and booth-readiness scoring are analysed on your device. This is separate from captured photos and videos that you choose to save or share, and from AI transformations, which upload a selected still photo after permission. AI processing is not on-device. Notifications are scheduled locally on your device. Photos you choose to save go to your device's Photos library.

3. Who we share data with

We use a small set of service providers to run the app:

• Supabase — authentication, database and photo storage (hosts your account, events, photos and galleries).
• RevenueCat — subscription and in-app purchase management.
• Stripe — business dashboard payments, subscriptions and credit purchases.
• fal.ai (Features & Labels Inc.) — AI generation infrastructure and provider safety checks. The selected model is GPT Image 2.5 (OpenAI) or Nano Banana 2 (Google), accessed through fal.ai. See AI processing and permission.
• Resend — sending the optional "email my photo" and support emails.
• Cloudflare — website and gallery hosting, media storage and delivery, and request security.
• Apple — Sign in with Apple and App Store purchases.

Published galleries are accessible to anyone with the link until access expires or you unpublish them. AI photo QR codes and delivery emails provide a separate link to the original and generated image, including processing status. Anyone you share that link with may open it; keep it private if you do not want others to see the photos.

AI processing and permission

AI Booth and Prompt Studio are optional. Before a new generation, we explain the processing and ask you to select Agree & generate (or Agree & generate test). Simply taking or selecting a photo, viewing a previous result or opening the studio does not authorise a new AI upload. Choosing Not now does not submit that photo for AI or spend AI credits. Other enabled booth capture types remain available without agreeing to AI processing.

• What is sent: the selected still photo, including everyone visible in it; the selected or written style prompt; and generation settings such as the model and quality. The prompt includes CreateBooth instructions for consistent styling and safer results. Our server makes the request; we do not add your account email or payment details to the model prompt. Anything visible in the photo or included in your prompt is part of the content sent.
• Who receives it: CreateBooth stores the source photo with its hosting/storage services and submits it to fal.ai for the selected model: OpenAI (GPT Image 2.5) or Google (Nano Banana 2). The permission screen names the recipient for your selection. These providers and their infrastructure process the content to generate the image and apply their safety controls. We do not send these photos to Anthropic for safety checking.
• Permission for people in photos: only continue if everyone pictured agrees to this processing. Obtain the appropriate parent or guardian permission for children. Event hosts should explain the AI option to guests; enabling it in event settings does not replace the guest permission step.
• Results and records: we retain originals, generated results, prompts and job records for test history, saved prompt thumbnails, event delivery, credit accounting and recovery. Prompt tests are not automatically added to guest galleries. Saving a prompt template uses its test result as a preview that may be displayed to guests when that style is used.
• Processing and retention: providers may process content outside your country, including in the United States. Their retention and handling depend on the service and applicable terms; we do not promise immediate deletion from provider systems after generation. Read fal.ai’s privacy policy, fal.ai’s API terms, OpenAI’s privacy policy and Google’s privacy policy.
• Your choice: permission is requested for each new generation, not remembered for the next guest. Once submitted, a job may continue in the background even if you leave the booth or close the screen. You can decline future generations at any time. For deletion of previously submitted content, contact us or the event host; declining a new request cannot undo an earlier submission.

AI can change a person’s appearance or produce inaccurate results. Avoid including sensitive information in photos or prompts. CreateBooth does not use your AI photos to train its own models; provider handling is governed by the terms linked above.

Guestbook access

The guestbook viewer requires the host password and is intended for the host and business owner. Its host link expires 30 days after the event ends; this closes access through that link, but does not delete the entries. Owners can retain and export the book. The password protects the viewer, not every underlying media URL: someone who already has a direct media URL or downloaded copy may still access it. Do not treat link expiry or a password change as deletion of downloaded or linked media.

Website and device permissions

Our website uses local storage for choices such as display appearance and session storage for guestbook access. Hosting services process request information, such as IP address and browser details, to deliver and secure pages. Sample gallery and guestbook content is illustrative, not customer content. Camera, microphone and photo-library permissions are requested for the features that need them; you can change device permissions in iOS Settings. Denying a permission may prevent that feature from working.

4. Retention

Keeping an account active does not extend every type of storage. Cloud photos and other capture media in free personal events are scheduled for permanent removal 30 days after the event was created. Download the files you want to keep before that date. Media moved to trash is scheduled for permanent removal after 30 days in trash; earlier expiry rules can still apply.

Gallery publication and hosting expiry are separate from saving a copy. The app shows the event’s gallery expiry and available extension options. Expiry or unpublishing closes gallery access; it is not a backup and does not delete copies already downloaded by others. Private guestbook entries are separate from the ordinary photo album; the guestbook host-link rules above still apply.

You can delete your account from Settings → Delete account to request removal of your account and associated content. Contact us for help removing AI source photos, results or guestbook entries. Purchase and credit-accounting records may need to be retained for legal, fraud-prevention or accounting purposes. Provider-held data is subject to the terms above.

Guest email addresses are deleted 30 days after the photo was sent, whatever happens to the account. Device-only captures and prepared exports remain on the device until removed by you or the app’s storage controls. Preparing an export or opening a share sheet does not confirm that a copy was saved elsewhere.

If you were a guest at an event

If you typed your email address into a CreateBooth photo booth to get your photo, this is what happens to it:

• What we keep: your address, the link to the photo we sent, the event it was taken at, and whether the email was delivered, delayed, bounced or reported as spam.
• Why: to send you that one photo, and so the event host (or we) can check what happened if it did not arrive. We rely on our legitimate interest in delivering what you asked for. We never use it for marketing and never share it with the host for any other purpose.
• Who handles it: Resend sends the email, from the United States, and keeps its own delivery record for 30 days. Our copy is stored with Supabase.
• How long: 30 days from when it was sent, then deleted automatically.
• Your choices: ask us to delete it sooner, or ask what we hold, at [email protected]. You can also complain to your data protection authority — in the UK, the Information Commissioner's Office.

For the photos themselves, the event host decides: they run the booth, and their gallery is theirs to publish or remove. Ask them, or us, if you want a photo of you taken down.

Why we can process your information

We use account and purchase information to provide the services you request and perform our contract with you. We rely on legitimate interests to keep the service secure, prevent fraud and respond to support requests, taking your rights into account. Optional AI processing requires your permission before the photo is submitted; you can decline it and use other available captures. Where processing relies on consent, you can withdraw that consent for future processing. We may also retain information where necessary to meet legal obligations, such as financial record-keeping.

5. Your rights & choices

• Request deletion of your account and associated data in-app (Settings → Delete account).
• Unpublish a gallery to close its gallery page. This does not recall downloaded copies or necessarily disable separate direct media or AI photo links.
• Decline AI processing without agreeing to a new upload, or contact us about previously submitted AI content.
• Opt out of notification categories in Settings.
• Contact us for access or deletion requests using the email below.

Depending on your circumstances, you may also request access, correction, erasure, restriction or portability of your personal data. You can object to processing based on legitimate interests by contacting support. You can complain to the UK Information Commissioner’s Office or your local data-protection authority.

6. Children

Account creation is intended for people aged 13 or older. Event media may include children. Hosts must obtain any appropriate parent or guardian permission, especially before sharing media or submitting a photo for AI processing. Contact us if you believe a child has created an account without appropriate permission.

7. Changes

We may update this policy; material changes will be reflected by the date above.

8. Contact

Questions or requests: [email protected]