Privacy at Photofacts Photos
Version: 24 October 2026
This page explains what personal data Photofacts Photos processes, why, who we share it with and how long we keep it. For the rest of Photofacts (the blog, the newsletter, comments), the general privacy statement applies.
Who is responsible
Photofacts BV (Dutch Chamber of Commerce no. 64981096, Industrieweg Oost 21, 6662 NE Elst, the Netherlands) is responsible for processing your data in Photos. Questions and requests: info@photofacts.nl or the contact form.
What data
- Your account: your email address, your @name and name, your password (only as an encrypted hash) and your date of birth. We only use your date of birth to check that you're 16, and 18 for sensitive content. Nobody else sees it.
- Your profile: what you fill in yourself, such as your bio and website. Your profile picture comes from Photofacts or from Gravatar.
- What you post and do: your photos and videos, captions, place names you type yourself, comments, likes, who you follow, what you save, who you block, and your reports.
- Shooting data: camera, lens and settings from your photo (EXIF). We only show these if you leave that on when posting.
- Your device: for each device you're signed in on, the type of device and the version of the operating system and the app, so you can manage your sessions and we can fix bugs.
- When you sign up for a Photofacts account we store, as for every account, the IP address the account was created from.
Location: we always remove the GPS data from your photos before they go online. A place on your post is only what you type yourself.
Why
- To provide Photos: your account, your posts, your feed (our agreement with you).
- To keep Photos safe: the automatic check of posts, moderation, reports and preventing abuse (our legitimate interest, and the obligations of the EU Digital Services Act).
- Because the law requires it, for example reporting child abuse to the police.
We don't use your data for advertising, and we don't sell it.
Who we share data with
- Bunny.net (BunnyWay d.o.o., Slovenia, EU) stores your photos and videos and delivers them quickly, anywhere in the world.
- OpenAI (United States) runs the automatic check: every photo, a frame from every video, and the caption go through OpenAI Moderation when you post. OpenAI doesn't use this to train its models and keeps it for at most 30 days to detect abuse of its service. The transfer to the US is based on the European Commission's standard contractual clauses.
- TransIP, our hosting provider in the Netherlands, where the website, the app server and the database run.
- Photofacts Academy (the same company), only if you link your Academy account: we then check whether you're an active member, for Pro. Your Academy password goes straight to the Academy, not to Photos.
- We have agreements with all of these parties about how they handle your data. If we add parties, for example for push notifications or a paid subscription, we'll list them here before we start using them.
No tracking in the apps
The apps contain no advertising and no third-party software that tracks what you do. On the website, the cookie policy of Photofacts applies.
Who sees what
- Your profile and posts are public: in the apps to everyone with an account, and at photofacts.com/photos to everyone.
- In the apps, posts with nudity are only shown to adults who choose to see them; on the website they're blurred until someone confirms they're 18 or over.
- With Hide from search engines (in your profile) we ask search engines not to include your profile and posts.
- People you block no longer see your posts and comments, and you don't see theirs.
How long
- We keep your data for as long as your account exists.
- If you delete a post, we remove its photos and videos right away, including from storage at Bunny.net.
- If you delete your account (in the app or on the website), everything from Photos is removed: your posts, photos, videos, comments, likes and followers. Your @name then can't be taken by someone else for 30 days, to avoid confusion.
- Reports others made about you and moderators' decisions are kept for as long as needed to account for those decisions, for example in an appeal.
Your rights
You may access, correct or delete your data, and object to processing. You can do much of this yourself in the app; for anything else, or for a copy of your data, email info@photofacts.nl. We reply within a month. If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own country.
Security
All connections are encrypted. We only store passwords as a hash. Signing in to the app uses keys that expire automatically.
Changes
If something substantial changes, we'll let you know in advance. The date at the top shows which version this is.
Facebook
