Privacy Policy

Selectic, Inc. ("Best Memories", "we", "us") operates an AI photo booth and event-gallery service consisting of (i) a web app at bestmemories.ai used by photographers to manage events and billing, (ii) an iOS app (the "Booth App") that runs on iPad as an event kiosk and on iPhone in volunteer photographer mode, and (iii) public guest galleries delivered by SMS, email, and QR. This policy explains what we collect, why, and who we share it with.

1. Information we collect

Photographer accounts. When you sign up as a photographer, we collect your email address, password hash, and optionally your display name, business name, tagline, description, public profile slug, avatar, logo, contact email, contact phone, website, social URLs, services list, sample images, city, and country. If you sign in with Google or Apple, we receive the provider account identifier and a verified email address.

Booth sessions and event data.For each booth session we collect the guest's phone number (and any additional phone numbers added at the booth, up to four), guest email addresses if provided, the selected style pack, the photos captured during the burst, and timestamps. We also record gallery link opens and per-photo download counts so we can send a 3-day reminder if no one has opened the gallery yet.

Photos. Original photos captured at the booth or imported via wifi-camera upload / Lightroom plugin are stored encrypted at rest. AI-styled outputs and per-event collages are stored alongside the originals. Photos are linked to the booth session record so we can deliver them to the guests on that session.

Billing data. Subscription status, Stripe customer ID, current period end, prepaid balance, and a transaction ledger (top-ups and AI-session debits). Card numbers and full payment credentials are never stored on our servers — they live with Stripe.

Device and usage data. IP address, user agent, screen size, timezone, referrer, UTM parameters, and pages visited. Approximate location (country / region / city) is derived from your IP for analytics, timezone detection, and city-based routing of organizer leads to nearby photographers.

iOS device permissions. The Booth App requests access to your camera (to capture booth photos), microphone (only if you opt into voice prompts), and optionally the photo library (to import existing shots). Permission strings are shown to you by iOS at the prompt; you can revoke any permission at any time in iOS Settings.

Organizer inquiries.If you submit the "Check booth availability" form on bestmemories.ai/for-hosts, we collect your name, email, phone (optional), event type, event date, city, country, expected guest count, and any message you provide.

2. How we use your information

• To operate the booth, the gallery delivery pipeline, and the photographer dashboard.
• To process payments, manage subscriptions, and debit prepaid balance for AI styling sessions.
• To deliver gallery links to guests via SMS, email, or QR scan.
• To send a one-time reminder SMS if a guest's gallery has not been opened after three days.
• To send transactional emails (verification, password reset, low-balance notifications) to photographers.
• To improve the service through analytics and error monitoring.
• To match organizer inquiries with booth-equipped photographers in the relevant city.
• To comply with legal obligations, prevent fraud, and enforce our terms.

3. AI processing and third-party AI providers

AI styling is the core of Best Memories. To produce a styled portrait, the original photo and the selected style-pack prompt are sent to a third-party AI image-generation provider (currently Google Gemini, xAI Grok, and Black Forest Labs Flux via fal.ai — the specific provider is chosen per style pack). These providers process the image solely to return a styled output; per their published policies, the image is not used for model training. We do not send your name, email, account credentials, or any other account-identifying information to these providers — only the photo and the prompt necessary to generate the styled output.

Consent. By using the Booth App or letting a guest run a booth session at your event, you and the guest explicitly consent to the photo being processed by these AI providers as described above. The booth screen and the SMS opt-in message reference this policy. You can withdraw consent for a specific photographer account at any time by deleting your account; we will purge the original photos from our storage within the timeline described in Section 8.

Provider age requirements (operator). All AI providers we use (Google Gemini, xAI Grok, fal.ai / Black Forest Labs Flux) require the API operator — the entity making the API call — to be at least 18 years old and prohibit apps that are designed to target children under 13. Selectic, Inc., as the operator, meets these requirements. The Service is a general-audience event-photography product and is not designed to target children. Photographer account holders are 18+ (see Section 10); iOS app users in volunteer / participant mode and booth guests may be 13 or older.

Face matching ("find my photos").For shared event galleries, an operator may turn on an optional "find my photos" feature. When enabled, we detect faces in the event's photos and generate a numeric face signaturefor each — a mathematical vector, not a usable image or name. A guest who wants to find themselves can submit a selfie; we generate the same kind of signature from that selfie and compare it to the event's signatures to surface the photos the guest appears in. The selfie you submit to search is used only for that single comparison and is not stored. Face signatures derived from event photos are stored with the event and are deleted when the photo is removed or the gallery is deleted (see Sections 6 and 8). Face matching runs on our own infrastructure — face signatures are not sent to the third-party AI styling providers above.

Biometric-privacy consent.Some jurisdictions regulate face data as biometric information (for example, Illinois' BIPA). Face search is off by default and only runs when an operator enables it. Where it is enabled, the event operator is responsible for providing any notice and obtaining any consent the law requires from their guests before faces are processed for matching; see our Terms (Section 6). A guest can always decline to use face search and simply browse the gallery instead.

Photo notifications (optional).Where an operator turns it on, a guest can choose — after a "find my photos" search — to be notified when more photos they appear in are added. If you opt in, you provide a phone number and/or email and check a consent box, and we keep the face signature from your selfie (again, the selfie itself is not stored) linked to your chosen contact for that one event, so we can text or email you "new photos of you" as they arrive. You can stop anytime by replying STOP or using the unsubscribe link in any message. We delete this subscription when you unsubscribe and when the gallery is deleted.

Operator photo organization.An operator may also use face signatures privately, inside their own dashboard, to group an event's photos by person so they can organize and deliver them. These groupings are never shown to guests, carry no names unless the operator adds them, and are deleted with the event.

4. Service providers we share data with

We rely on the following categories of processors. Each has its own privacy policy and security posture; we share only the data necessary for that processor's function.

• Hosting and database — managed Postgres and Node hosting in the United States.
• Object storage — S3-compatible cloud storage for photos and styled outputs.
• AI image generation — Google (Gemini), xAI (Grok), fal.ai (Flux).
• Payments — Stripe, Inc. (web checkout, billing portal, webhook).
• SMS delivery — Telnyx (gallery links + 3-day reminders).
• Transactional email — Resend (gallery delivery + auth + billing emails).
• Sign-in providers — Google OAuth, Apple Sign In.
• Analytics — our internal usage tracker; optional Google Analytics on marketing pages.

5. Payment processing (Stripe, not Apple In-App Purchase)

All subscriptions and prepaid balance top-ups are processed by Stripe through web checkout — either directly at bestmemories.ai/billing or via a Safari View Controller opened from the Booth App. We do not use Apple In-App Purchase. We never see or store your full card number, CVC, or banking details; those are collected by Stripe's PCI-compliant interface and we only receive a customer identifier and last-four / brand metadata. Card management, refund inquiries, and tax invoices are handled through the Stripe billing portal accessible from your photographer dashboard.

6. Guest data and gallery sharing

When a photographer captures a session for a guest, the guest's phone number (and any other recipient phone numbers added at the booth) and the styled photos are visible to the photographer for the purpose of running their event business. Guests receive the gallery via a private link tied to a long random token; the gallery is not indexed by search engines. Where an operator has enabled it, guests can remove a photo of themselves directly from the shared event gallery; doing so hides the photo immediately and deletes any face signature derived from it. Guests can also request deletion of their photos by emailing us at the address below — we will verify the request against the booth session record and remove the photos from our storage within 7 days.

7. Cookies, analytics, and tracking

On bestmemories.ai we use first-party cookies for the JWT authentication of photographer accounts, an asset-version cookie, and an analytics pixel. The pixel reports page views and signup / payment / gallery events to our internal tracker — no fingerprinting or cross-site tracking is performed. We do not serve third-party ad cookies on the SaaS site.

8. Data retention and deletion

Photographer accounts and their event data are retained while the account is active.

Gallery auto-expiry.An operator may set an event's galleries to automatically expire after a chosen number of days. When a gallery expires, its photos — and any face signatures derived from them — are permanently deleted from our storage. If no shorter expiry is set, galleries are retained for up to 12 months after the event and then permanently deleted, unless the operator deletes the event or closes the account sooner. An operator can set a shorter per-event expiry at any time.

How to delete your account. Sign in at bestmemories.ai, open Account settings (tap your email in the dashboard header, or go directly to bestmemories.ai/account), scroll to the Delete account card, tap Delete my account, and type DELETE to confirm. The account is closed immediately: you are signed out on every device, your API keys and refresh tokens are revoked, your public profile page is taken offline, and the email address you used is freed so you (or anyone else) can register a new account with it later.

What happens to your data after closure. Your events, booth sessions, and associated photos are queued for permanent removal from our storage within 30 days of account closure. To accelerate purge — for example to satisfy a GDPR or CCPA erasure request — email privacy@bestmemories.ai from the email address on the account; we will verify the request and complete the purge within 7 business days. Billing records (Stripe customer history, invoices, tax receipts) are retained per Stripe's policy and applicable tax / fraud / anti-money- laundering law; we cannot purge those on request. Anonymized aggregate analytics with no personal identifiers may be retained beyond 30 days.

If you forget the account password or lose access: email privacy@bestmemories.ai with the original email address and the approximate date you signed up; we will verify ownership through email-based challenges and process the deletion within 7 business days.

9. Your rights

Regardless of where you live, you may at any time: access the personal data we hold about you, request deletion of your account and associated data, opt out of marketing emails (unsubscribe link in every marketing email), and request a portable copy of your data. California residents have additional rights under the CCPA, including the right to opt out of the sale of personal information — we do not sell personal information. EEA/UK residents have rights under the GDPR/UK-GDPR including the right to object to processing, the right to data portability, and the right to lodge a complaint with a supervisory authority.

10. Age requirements and children's privacy

We use a tiered age model:

• Photographer / paid account holders (anyone who creates a Best Memories photographer account, manages events from the dashboard, or pays for a subscription via Stripe) must be at least 18 years old. This matches our payment-processing requirements and the operator-age requirements of our AI providers.
• iOS app users in volunteer mode and any person interacting with the Booth App during an event must be at least 13 years old. We may collect month and year of birth at sign-up to enforce this floor.
• Booth guests (people photographed as subjects at an event) may be of any age. For guests under 13, the photographer and event organizer are responsible for obtaining parental or legal-guardian consent before the guest is photographed and before any photo of the guest is processed by our AI styling pipeline.

We do not knowingly collect personal information from anyone under 13. If you become aware that a child under 13 has provided us with personal information without parental consent, or that a minor has been photographed at an event without proper consent, contact us at the email below and we will remove the data promptly.

11. International data transfers

Our infrastructure is hosted in the United States. If you access the service from outside the U.S., your data will be transferred to and processed in the U.S. By using the service, you consent to this transfer. Our third-party processors (listed in Section 4) may process data in additional jurisdictions under their published policies.

12. Sign-in with Google and Apple

When you sign in with Google or Apple, we receive a verified email address and the provider's account identifier so we can recognize you next time. We do not request profile photos, contacts, or any other Google / Apple scope. If you signed in with Apple and used the "Hide my email" relay, we deliver gallery and billing emails to the Apple relay address.

13. Changes to this policy

We may update this policy. Material changes will be announced via email to photographer account holders and posted on this page with an updated "Last updated" date. Continued use of the service after a change constitutes acceptance.

14. Contact

Selectic, Inc. · privacy@bestmemories.ai