Privacy Policy

00 In plain English (summary, not part of the policy)

This summary is here so the commitments below are easy to check. It has no legal effect — the numbered sections that follow are the policy.

• Your property photos are stored in Australia, in Sydney.
• Finishing a photo sends it overseas for the AI step only. We explain why below, and you consent to it when you finish a photo.
• We never sell your information, and we never use your property photos in marketing unless you ask us to.
• We do not use your photos to train public AI models.
• You can delete your account — from the app, or from the Studio on this site. Section 09 says exactly what that erases, and the few things it does not.
• If your account has been added to an agency, that agency’s head seat can see the photos you shoot and what you spend. Section 10 says exactly what they see, and what they do not.

01 Who we are

ProMyPhoto is operated from Australia. It is used by real estate agents, home owners, landlords and anyone else photographing a property they have the right to photograph. In this policy “we”, “us” and “ProMyPhoto” mean the operator of promyphoto.app.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth). We do this whether or not the small business exemption applies to us, because it is what our customers and Apple expect and what the law is moving towards.

Questions, requests or complaints: hello@promyphoto.app.

02 What we collect

Your account

• Your email address, and how you signed in (Sign in with Apple, Google, or email).
• Your listings, shoots and photo records, so the app can show your work.
• The addresses you type against a shoot. These are property addresses, not your home address, but they are your content and we treat them as such.

Your property photos

• The exposure brackets you capture, and the finished photos we produce from them.

How you use the app

• Which screens you open and what you tap, so we can see where the app is confusing.
• Crash and performance reports when something fails.
• Your purchase and subscription history, and your credit balance.

If you join the waitlist on this site

• The email address you enter, and basic technical data your browser sends. We do not run advertising trackers on this site and we do not build a profile on you.

03 How we use it

• To run the service: finish your photos, keep your shoots, and charge you correctly.
• To support you when you ask us for help.
• To find and fix faults, and to see which parts of the app people struggle with.
• To meet our tax and records obligations.

We will only email you about ProMyPhoto. We will not use your email for unrelated marketing, and marketing emails are opt-in: you can switch them off in the app at any time, or use the unsubscribe link in any of them — no sign-in needed.

04 We do not sell your data

We never sell your personal information and we never share it with data brokers. There is no advertising in ProMyPhoto, and we do not combine what we hold with data from other companies to target you.

We do not use your property photos to train public AI models, and we do not publish them. If we ever want to show your work as an example, we will ask you first.

05 Your property photos

Who can see them

If your account belongs to an agency, that agency’s head seat can also see them — read section 10. Otherwise: your photos are private to your account. Our team may access photos you have uploaded only where it is necessary to provide support you have asked for, to investigate a fault, or where the law requires it. Access is restricted and logged.

Where they are stored

Your uploaded brackets and your finished photos are stored in Australia, in our provider’s Sydney region, in private storage that is not publicly readable and not indexed by search engines.

How long we keep them

A shoot is archived after 7 days and deleted 30 days after that, so photos live about 37 days unless you delete them sooner. You can delete a shoot at any time. Deleting your account deactivates it straight away and deletes your photos with it 30 days later, unless you reactivate before then.

06 Finishing a photo sends it overseas

Finishing a photo cannot be done on your phone. It runs on specialist AI image infrastructure that is not available inside Australia, so at that moment your photo leaves the country. We would rather state that plainly than bury it.

Where it goes

• To specialist AI image-processing providers, located in the United States.
• One of these providers operates from a global network rather than a fixed region, so for that step we cannot guarantee which country the processing happens in.

Your photo is sent for processing and returned. It is not retained by these providers as part of any dataset, and it is not used to train public AI models. Before we send anything to a provider we take reasonable steps to satisfy ourselves that they handle it consistently with the Australian Privacy Principles.

We can tell you exactly which providers we use at the time you ask — email hello@promyphoto.app. We do not list them here because the combination is part of how the product works, and it changes as we improve it.

What this means for your rights — please read

By finishing a photo you consent to it being disclosed to these overseas recipients. Australian Privacy Principle 8.1 will not apply to that disclosure, and we will not be accountable under the Privacy Act for how those overseas recipients handle it. They may not be subject to the Australian Privacy Principles, and you may not be able to seek redress in Australia if they mishandle it.

We tell you this because the law requires real, informed consent before that protection is set aside — not a line buried in a policy nobody reads. If you are not comfortable with it, do not finish photos: capture still works, and you can delete a shoot without ever sending it.

Everything else — your account, your shoot records, your stored photos — stays in Australia.

07 The other services we rely on

Running the app means using a small number of specialist providers. We describe what each kind receives, and what we hold them to.

• Hosting and databases. Hold your account, your listings and your shoot records. Located in Australia.
• Product analytics. Receives which screens you open and what you tap, so we can see where the app is confusing, with your email attached so support can find you. It also records session replays: every text field you type into and every image on screen is masked before it leaves your phone, and replays are stored as wireframes rather than pixels — so your property photos and the addresses you type are not in them.
• Crash reporting. Receives the technical details of a crash or freeze. It is not told who you are: we never attach your account to a crash report.
• Payments. Handle your purchases and subscriptions. Your card details go to the payment provider directly and never reach our servers. We see only that a payment succeeded and what it was for.
• Sign-in. Apple or Google, only if you choose to sign in with them.
• Email delivery. Receives your email address and the message itself, so we can send you things you have asked for — a receipt, a sign-in code, a notice about your account. We also send marketing email — offers and product news — only to people who have separately opted in to it. Never having chosen is not opting in. Every marketing email carries a one-click unsubscribe that works without signing in and does not expire, and opting out stops the marketing email only: it does not affect email about your account, does not change whether we may use your photos, and does not affect your ability to use the app.

Some of these operate overseas, in the United States and Europe. Where they do, we take reasonable steps to satisfy ourselves that they handle information consistently with the Australian Privacy Principles before we send them anything. As above, we will name any of them on request.

We do not track you across other companies’ apps or websites, so iOS does not show you an app-tracking prompt for ProMyPhoto and there is nothing to decline there. Analytics cannot currently be switched off inside the app.

Deleting your account also deletes your analytics record — the profile and the events behind it — at the analytics provider. That step happens at a third party rather than on our own servers, so we will not promise it can never fail: if the provider is unreachable or refuses, your account deletion still goes ahead and the analytics record is the one thing left behind. We are alerted when that happens, but we cannot repair it automatically, because once the deletion has run your account identifier no longer exists anywhere on our side. If you want to be certain, email hello@promyphoto.app and we will check and remove it by hand.

Accounts deleted before 25 August 2026 are not covered by this — nothing removed their analytics record at the time, and it is still with the provider. If that is you, email us from the address you used and we will find it by that address and delete it.

08 Security, and what happens if something goes wrong

Property imagery and account data are treated as sensitive. Access is restricted, data is private by default, and everything is encrypted in transit. No system is perfectly secure, but we build to keep your content private and we do not collect information we do not need.

If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme, and we will tell you what happened and what to do about it.

09 Your choices and deletion

• Delete your account. In the app: at the bottom of Settings, below everything else. On this site: in the Studio, under your avatar. Your account is deactivated straight away and your subscription is cancelled. Your shoots, your photos, your credits and your account records are then kept for 30 days and deleted permanently at the end of that window. You can reactivate at any point in those 30 days and everything comes back as it was; once the 30 days are up it is gone and there is nothing left to restore. See below for exactly how that runs.
• Delete a single shoot at any time from the app.
• Ask for a copy of the personal information we hold about you, or ask us to correct it, by emailing hello@promyphoto.app. We will respond within 30 days.
• Turn off marketing emails in the app, or use the unsubscribe link in any marketing email — no sign-in needed.

What happens when you delete

We cancel your billing before anything else, and if the cancellation cannot be confirmed nothing is deactivated and nothing is erased. If your subscription is billed by Apple we cannot delete the account at all until you cancel it yourself on your iPhone, because Apple lets only the account holder do that. Cancelling the subscription is not reversed by reactivating — coming back later means subscribing again. If one of our providers is unreachable at the moment you ask, the request is held and retried for up to 72 hours rather than dropped, and nothing is deleted while it waits.

Once the cancellation is confirmed the account is deactivated: you can still sign in, open your shoots and download the photos you already have, but no credits can be spent and nothing can be bought. Everything on it is kept for 30 days. You can reactivate at any point in that window — the notice in the app and in the Studio has the button — and your shoots, your photos and your credits are yours again exactly as they were. At the end of the 30 days everything is deleted permanently and there is nothing left to restore. If a deletion is still waiting on a provider we could not reach, the account is frozen the same way, and if we still cannot get through after 72 hours we stop trying: nothing is deleted and the account goes back to normal.

What a deletion does not remove

None of these contain your photos:

• The payment provider’s own record of what you bought. We delete our link to you, but the provider holds its records under its own legal and tax obligations and that is outside our control.
• If you shoot for an agency: the agency itself, and the colleagues shooting against it. Your seat in it is removed with your account, and your identifier comes off the agency’s spend records — see section 10.
• One audit row recording that a deletion happened — hashed values and counts only, with no email, no account id, no address and no image.

If you are unhappy with how we have handled your information, tell us first and we will try to fix it. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

10 If you shoot for an agency

If your account has been added to an agency, the person who holds that agency’s head seat can see the photos you shoot on ProMyPhoto, and what you spend. Your work output is visible to your employer. That is what an agency account is for, and we would rather you read it here than discover it.

This applies only if someone has added your account to an agency. Ordinary accounts are private to you, exactly as section 05 says.

What the head seat can see about you

• Your email address.
• How many credits you have spent this period.
• When your seat was added, and whether you are the head seat.
• Every shoot on your account, grouped under your name — when each shoot was created, and for every photo in it: whether it finished, any error, any quality note we attached, and the finished image itself, which they can view and download.

That list of shoots is your whole library on that account, not only the shoots the agency’s credits paid for. If you shot something on this account before you were seated, or paid for it with your own credits, it is still there.

What they cannot see

• Your own credit balance, and any plan or subscription of your own.
• Your devices, and your marketing preferences.
• Your location. We never collect it — see section 02.
• The property address you typed against a shoot. It is not part of that screen.

Colleagues cannot see each other’s work — only the head seat can. Only the head seat can see the agency’s billing, its card or its invoices; every other seat is refused, and told why.

It is on this website, not in the app

This view exists only in the Studio on promyphoto.app. It is not in the iOS app. Treat that as a product decision rather than a protection: what actually keeps your work private from everyone else is that only the head seat of your own agency can load it, checked against who is signed in.

Photo links last fifteen minutes

To show photos in a browser we create temporary links to the images. On this screen those links stop working after fifteen minutes. While a link is alive, anyone holding it can open that photo without signing in — that is how images load in a browser at all. Everywhere else in ProMyPhoto such a link lasts six hours, and everywhere else it only ever points at your own work.

When you leave an agency

The head seat can remove your seat at any time, and you can ask them to. There is no record stored on a shoot of which agency it was shot for — the agency’s seat list is looked up each time that screen is opened — so once your seat is gone, your shoots leave your former employer’s view on the very next page load. Your photos stay in your own account.

If you delete your ProMyPhoto account while you hold a seat, the agency’s record of what its pool was spent on is kept — it is their financial record and one person leaving must not erase it — but your identifier is removed from those rows, so the spend is no longer attributed to you or to anyone.

If you run an agency, the notice duty is yours

Watching what an employee produces can be workplace surveillance under Australian state law — for example the Workplace Surveillance Act 2005 (NSW), which requires written notice to employees before certain surveillance starts, and which has no uniform equivalent across the other states and territories.

If you are an agency using ProMyPhoto to oversee employees or contractors, giving your people whatever notice or consent your state requires is your responsibility, not ours. We supply the tool and tell you plainly what it shows. We are not your compliance adviser and nothing here is legal advice.

11 If you use ProMyPhoto outside Australia

ProMyPhoto is operated from Australia and we handle personal information to the standard set by the Australian Privacy Principles, wherever you are. If you are somewhere with its own privacy law, the rights that law gives you are yours in addition to anything in this policy — email us and we will honour them.

ProMyPhoto is not currently offered in the European Union or the United Kingdom.

12 Children

ProMyPhoto is a tool for photographing property and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, email us and we will delete it.

13 Changes and contact

We may update this policy as the product changes. We will change the date at the top when we do, and where a change materially affects how we handle your information we will tell you in the app before it takes effect.

hello@promyphoto.app