Your live position is never shared
It is used on-device to answer one question — are you inside this boundary? Contributors see your photo's capture point, not your movements.
Safety & privacy
Location is the feature, so it gets the strictest rules.
We are asking people to attach their photographs to real ground. That only works if the limits are legible before anyone uploads anything.
Access is enforced server-side, every request
A private album's photos are not fetchable by URL, in the app or the browser. Removing a Connection revokes their access in the same second.
Report anything, from anywhere it appears
Users, albums, posts and comments each carry a report action with a reason and free text. Blocking hides content in both directions immediately.
Delete means delete
Account deletion is in the app, self-service, with a 30-day grace window. After that, originals and derivatives are purged, not archived.
What each permission is for
Location, while using — Matching you to a boundary. Denied? EXIF coordinates still place your photos.
Camera — Capture inside the composer. Asked the first time you tap the shutter, never at signup.
Photos — Selected photos only is fully supported; the picker just shows fewer.
Notifications — Asked after your first album exists, with per-category control and quiet hours.
Parents' guide
Public albums are the only surface strangers share. This page explains how to keep a child's photos inside Invited albums, how school-grounds boundaries work, and what a report does.
Read the guide