How PickMe handles your data

Written to be read, not scrolled past. Draft — under legal review.

If you're a guest finding your photos

Your selfie never leaves your phone. It is analyzed by software running in your own browser and immediately discarded. We never receive, store, or see the picture.
What is sent is a list of 512 numbers describing facial geometry. It cannot be turned back into your photo. It is used once, to search this one event, and is not stored.
You need no account, and we keep nothing that identifies you — not your name, not your selfie, not your search. Our analytics for a search is a single number: how many photos matched.
Want a photo of you taken down? Use “Report a photo” on the results screen — it goes straight to the event organizer, no account needed.

Photos are uploaded by the event organizer, who is responsible for having the right to share them.
For each photo we store the image plus, for every detected face, the same kind of numeric description used for matching — never a name or identity; PickMe does not know who anyone is.
Location data and other hidden metadata (EXIF) are stripped from every copy guests can access.
Everything is deleted automatically. Each event has an expiry (30 days by default, set by the organizer). When it passes, the photos and all face data are permanently erased — enforced by an automatic job, not a manual promise.

We store your name, email and password hash — nothing else about you.
Your account lives in our own database; there is no third-party identity provider involved.
Deleting an event permanently removes its photos and all face data at once.

Use the report button on any event page, or contact the event organizer directly — they control the photos.