Privacy Policy

Amifie (“we”, “us”, “our”) helps people capture and share moments from real-life events, then keep and relive those memories together. This Privacy Policy explains how we collect, use, share, and protect personal data when you use the Amifie mobile app and related services (the “Services”), in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

This Policy works together with our Terms of Service and Community Guidelines.

1. Data Controller

Controller: Amifie Email (privacy & data requests): pj@amifie.com Establishment: Belgium (European Union)

If you need our full registered company details for a formal request, contact the email above and we will provide them.

2. Personal Data We Collect

We collect only what we need to run Amifie. Categories depend on how you use the Services.

2.1 Account and profile

• Email address
• Password (stored hashed) or sign-in via Apple / Google
• Username, display name / full name
• Profile picture and bio
• Interests you choose
• Account creation date and email verification status
• Push notification token (if you enable notifications)

2.2 Social graph and memberships

• People you follow and who follow you (friends = mutual follow)
• Communities and friend groups you join or create
• Your role (e.g. member, admin, owner)
• Blocks and reports you submit or that concern you

2.3 Events and coordination

• Events you create, join, save, claim, or crowd-edit
• Event details you provide (name, description, date/time, place text, map coordinates if set, images, schedule, announcements)
• Invitations, RSVPs, personal invite links/tokens, and meetup coordination (“Meet Friends”)
• Attendance-related activity needed to show live surfaces and post-event memories

2.4 Moments, Memories, Recaps, and posts (user content)

When you capture or share content, we process:

• Moments: photos and short videos (and related audio if you record video), captions/text, timestamps, and the event they belong to
• Optional place name or coordinates you attach when creating a Moment, post, or event
• Reactions, likes, and comments on Moments and posts
• Posts (profile-centred image + caption, optionally tied to an event)
• Relive selections and personal Memories (souvenirs built from Moments you chose or from an automatic fallback)
• Shared Memories with a mutual friend when both of you posted at the same event
• Official Recaps generated/published by organisers from participant Moments
• Help-offer threads and community/group messages where those features are available
• Reports and moderation metadata (e.g. hidden or removed content)

2.5 Location data

With your device permission, we may process:

• Approximate or precise device location to show events near you, bias place search, and suggest nearby places when planning a meetup or attaching a place
• Event or Moment location text and optional latitude/longitude you or others enter

We do not use your live location for continuous background tracking. Location is used when you open relevant features or grant permission for a request. You can revoke permission in your device settings; some “near you” features will then be unavailable or rely on a place you pick manually.

2.6 On-device photo library (Memory Discovery and uploads)

If you use features that read your photo library (e.g. choosing a photo, or Memory Discovery to find overlapping moments with a friend):

• Photos and their timestamps/places can be processed on your device to find matches
• Photos stay on your device until you explicitly choose to upload or share them through Amifie’s normal Moment/post upload path
• The server may store session/consent metadata and opaque tokens needed for the feature — not your full camera roll

2.7 Device, usage, and diagnostics

• App usage and interaction patterns needed to operate feeds and features
• Device type, OS version, and similar technical data
• Crash and performance diagnostics
• IP address and security logs (e.g. to protect accounts)

The amifie.com website uses cookieless analytics (Cloudflare Web Analytics). It does not set advertising cookies and does not use a cookie banner.

2.8 Derived data

We may derive activity stats (e.g. events attended, Moments posted) to power the product experience.

2.9 Data we do not sell

We do not sell your personal data.

3. Legal Bases (GDPR)

We process personal data under these bases (Article 6 GDPR):

You may withdraw consent where processing is consent-based (e.g. disable notifications or revoke OS permissions) without affecting other lawful processing.

Our legitimate interests include keeping users safe, preventing abuse, securing the Service, and improving Amifie in ways that do not override your rights. You may object to legitimate-interest processing as described in Section 8.

4. How We Use Your Data

We use personal data to:

• Operate Amifie: accounts, profiles, follows, communities/groups, events, Moments, Relive, Memories, Shared Memories, Recaps, posts, announcements, invites, and related messaging
• Show the right content to the right people (visibility rules, blocks, reports)
• Suggest nearby events/places when you allow location
• Send transactional and engagement notifications you enable (e.g. invitations, announcements, Relive/Memory ready)
• Moderate content, handle reports, and protect the platform
• Debug crashes, measure reliability, and improve features
• Comply with law and respond to valid legal requests

5. How Content Is Visible to Others

Visibility depends on event/community privacy settings and product rules. In particular:

• Profile information and posts may be visible to other users according to product settings
• Moments typically live on an event story for people allowed to see that event’s Moments
• Organisers may include Moments in an official Recap; Recaps may be shareable, including via a public web link that can play without the app
• Relive may let eligible viewers see Moments they are already allowed to see (including friends’ Moments) and, if they confirm a Memory, keep selected Moments in a personal souvenir
• Shared Memories are visible to the two friends involved
• Personal invite and share links may show limited preview information (e.g. title/image) to recipients
• Followers/following and community membership may be visible as shown in the app

Do not upload content you are not allowed to share. Respect others’ privacy at events (see Community Guidelines).

6. How We Share Data

We share data only as needed to provide the Services:

6.1 Service providers (processors)

We use providers who process data on our instructions, including:

• Supabase — authentication, database, and media storage
• Railway — application hosting for our API
• Cloudflare — edge delivery, public share/recap/invite preview pages, and related infrastructure
• Expo — app runtime and push notification delivery
• Google — Places/location search (when you search or bias places) and Google Sign-In (if you choose it)
• Apple — Sign in with Apple (if you choose it)

These providers may process data in the EU/EEA and/or other countries. Where data leaves the EEA, we rely on adequacy decisions and/or Standard Contractual Clauses (SCCs) or equivalent safeguards.

6.2 Other users and the public

As described in Section 5, content you share may be visible to other users or, for public share/recap links, to anyone with the link.

6.3 Legal and safety

We may disclose data if required by law, to protect rights and safety, or in connection with a merger/reorganisation (with appropriate protections).

7. Retention

We keep personal data only as long as needed for the purposes above, then delete or anonymise it.

Typical periods (may be shorter if you delete sooner, or longer if law requires):

• Account and profile — for the life of the account
• Moments, posts, comments, reactions — until you delete them, the account is deleted, or they are removed through moderation / product expiry rules (e.g. live Moment windows); copies may remain in Recaps or Memories that were already created
• Memories / Relive confirmations — until you delete the Memory or your account (subject to product rules)
• Recaps — until the organiser or we remove them, or related accounts/content are cleaned up
• Invite tokens — until used, expired, or revoked
• Push tokens — until you disable notifications, reinstall, or delete your account
• Reports and safety logs — as needed to handle the report and for a limited period for security/compliance
• Backups — for a limited rolling period, then overwritten

When you delete your account in the app, we remove or anonymise your profile and associated personal data as described above, subject to legal holds and residual copies in backups for a short time.

8. Your Rights

Under GDPR you can:

• Access your data
• Correct inaccurate data
• Erase your data (including by deleting your account in Settings)
• Restrict or object to certain processing
• Withdraw consent where we rely on consent
• Data portability — receive data you provided in a common machine-readable format
• Lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit) or your local supervisory authority

How to exercise rights: email pj@amifie.com. For erasure, you can also use Delete Account in the app. Until an in-app export is available, portability requests are handled by email; we will respond within the timelines required by law.

9. Security

We use industry-standard measures such as encryption in transit, hashed passwords, access controls, and monitoring. No system is perfectly secure; please keep your login details safe.

10. Children

Amifie is not directed at children under 13. You must meet the minimum age in our Terms (13+, or higher if required where you live). We delete accounts we learn belong to under-age users. Because younger teens may use the Service, we take safety, reporting, and blocking seriously; parents/guardians who have concerns should contact us.

11. Automated processing

We use automated systems to operate feeds, suggestions (e.g. near-you ranking), and safety filters. These do not make solely automated decisions that produce legal or similarly significant effects about you within the meaning of Article 22 GDPR. Moderation may combine automated signals with human review.

12. Changes

We may update this Policy as the product or law changes. We will update the “Last Updated” date and, for significant changes, notify you in the app or by other reasonable means. Continued use after an update means the updated Policy applies, except where we need fresh consent.

13. Contact

Privacy questions and data requests: pj@amifie.com