Privacy
Policy
The operator of Paparazzi (the “Operator”) appropriately manages user information handled through the photo-based social network “Paparazzi” (the “Service”) in accordance with this Policy.
1. Information Collected
- Identifiers associated with authentication with Apple, display name, username, date of birth, and profile information
- Posted photos, the date and time they were taken, captions, and information about faces detected in those photos
- Friend relationships, reactions, comments, chats, and feedback
- Notification tokens, app settings, usage information, access logs, and crash information
Face Data
Paparazzi processes the following face data:
- When a user registers their face, three registration photographs (front, left, and right), 512-dimensional numerical face feature vectors generated on the device, and technical measurements used to confirm capture quality, including face pose, eye distance, detection confidence, brightness, sharpness, and capture quality
- When a user posts a photo, the photo itself and, for each detected face, its position in the photo, a 512-dimensional numerical face feature vector generated on the device, a capture-quality classification, and any resulting match or association with a registered user
A posted photo may contain a face that is not matched to a registered user, including the face of a person who has not registered a face or does not have a Paparazzi account.
2. Purposes of Use
The information collected is used for account management, posting and displaying photos, face matching, friend and communication features, notifications, age-eligibility and safety measures, responding to inquiries, and improving the Service and analyzing failures.
Face data is used only to provide the Service's photo-matching functions: creating and maintaining a user's face registration; evaluating whether a face image is suitable for matching; comparing faces detected in posted photos with registered users; associating and delivering photos to people shown in them; creating the related connection flow; preventing or correcting incorrect associations; and matching a previously unmatched face if that person later registers their face.
Face data is not used for authentication, advertising, marketing, surveillance, credit evaluation, user profiling, or training face-recognition or other machine-learning models. Face recognition may result in misidentification or failure to recognize a user.
3. External Services and Provision to Third Parties
Face detection and generation of face feature vectors take place on the user's device. The registration photographs, posted photos, face feature vectors, face positions, quality information, and matching records described above are then transmitted using encrypted connections to the Operator's backend hosted by Cloudflare.
Cloudflare processes and stores face data solely as the Operator's service provider. Registration photographs, posted photos, and packed face feature vectors are stored in Cloudflare R2; related records and associations are stored in Cloudflare D1; and searchable copies of face feature vectors are stored in Cloudflare Vectorize. Cloudflare is required to process face data only to provide these services and to protect it to the same or an equivalent standard described in this Policy. These services may process or store information outside Japan.
The Service also uses Firebase for authentication and analytics, Apple Push Notification service for notifications, and Sentry for crash and error reporting. The Operator does not provide face registration photographs or face feature vectors to Firebase, Apple Push Notification service, Sentry, advertising platforms, analytics providers, data brokers, or information resellers.
The Operator does not sell face data or disclose it to other third parties, except where required by law.
4. Scope of Disclosure
Profiles and photos are displayed to other users according to the Service's functions, friendship relationships, and the user's actions.
5. Retention and Deletion
- A user's current face registration photographs, face feature vectors, and per-frame quality records are retained until the user replaces their face registration or deletes their account. Deletion of the replaced photographs and vectors is attempted immediately after replacement. Registration-run diagnostics that do not contain photographs or face vectors are retained until account deletion.
- A posted photo, its detected face positions, face feature vectors, quality classifications, and matching records are retained until the photographer deletes the photo or deletes their account. This applies to both matched and unmatched faces.
- When a user deletes their account, their profile, current face registration photographs and vectors, friendship relationships, photos they posted, and face data derived from those photos are deleted. Deletion from Cloudflare R2 and Vectorize begins immediately and is automatically retried until complete.
- A photo posted by another user may remain after a person shown in it deletes their account. The association with the deleted account is removed, but the face position and feature vector derived from that photo remain with the photo until the photographer deletes it or their account.
Temporary files from a photo upload that is not completed are automatically removed after 24 hours. Information that must be retained to comply with law may be kept for the legally required period.
6. Security Management and User Rights
The Operator takes reasonable security measures, including access controls, encrypted communications, and private storage for registration images and face feature vectors.
Before account setup, the app provides links to the Terms of Service and this Privacy Policy and states that continuing constitutes agreement to them. Face registration is available only after the user continues on that basis. A user may withdraw consent to continued processing of their registered face data by deleting their account in the app or contacting the Operator. Because face matching is a core function of the Service, withdrawing consent may prevent continued use of the Service.
Users and other people shown in photos may request confirmation, correction, suspension of use, deletion, or other actions regarding their information through the app's settings or the contact below. The Operator may request information reasonably necessary to identify the relevant account, photo, or data and to protect against unauthorized requests.
7. Revisions
If this Policy is changed, important changes will be announced in the app or on this page.