Privacy & Cookie Notice

Privacy matters here.

Diptych combines public collaborative photography with optional private paired archives. This notice explains what the service needs to work.

Information we use

We store the information needed to run Diptych: your email, password hash, nickname, profile photos, collaborative frames, reports and blocks, invite codes, partner relationships, daily frames, upload time, and basic photo metadata when available.

Google and Apple sign-in

New accounts are created with Google or Apple in the Diptych app. Existing password-based accounts can still sign in with email. The provider supplies a verified account identifier and, when available, your name and email address. Apple may supply a private relay email address. We use this information only to authenticate you and maintain your Diptych account; we do not request access to your mail, contacts, cloud storage, or other provider content.

Our server verifies signed identity tokens. We store the provider account identifier and encrypt Apple's authorization token so that we can revoke it when you delete your account. Diptych does not receive your Google or Apple password. Each provider handles its own sign-in process under its privacy policy: Google and Apple.

Cookies

Diptych uses necessary cookies to keep you signed in, remember trusted devices for up to 30 days when enabled, protect forms from abuse, and maintain secure sessions. These cookies are required for core features. We do not use advertising cookies or third-party tracking cookies.

Photos and location

The iOS app resizes photos and compresses them as WebP before upload, with JPG fallback. The display upload limit is 5 MB. Location and time are submitted separately. Existing JPG/PNG display files may be retained temporarily for conversion rollback; these rollback images are also removed when their associated photo is deleted. Original full-resolution camera files are not intentionally uploaded.

Location can come from photo metadata or, if you grant permission, from your device at the time you choose or take a photo. Diptych may store coordinates and a city or place label so location can appear under the frame. You can deny location permission and still use the photo features.

Public and private content

Photos published to Discover, completed community diptychs, nicknames, avatars, profile photos, and displayed city and country labels are public, including to visitors who are not signed in. Paired daily archives remain private unless you explicitly choose to share them.

Safety and moderation

You can report photos, profiles, or profile photos and block other users. Blocking hides both users' community content and profiles from each other. Authorized administrators may review reports, remove content, or deactivate accounts. Moderation actions are recorded in an internal audit log.

Account deletion

Guest creators have separate anonymous identities. A random credential is stored in the iOS device Keychain, and the server stores its hash to associate published photos and interactions with that guest. Guests do not need to supply a name or email. Browsing alone does not create a server-side guest account.

In the iOS app, guests can open Profile, tap the Settings gear, and select Delete Guest Identity and Data without signing in. This permanently removes the guest identity, published photos, stored location data, and associated interactions. Diptychs started by that guest are removed with both halves. If the guest contributed to another creator's diptych, their contribution is removed and the original half becomes available for completion again. There is no 30-day restoration period for guest deletion.

Deletion succeeds only after the active database records and associated uploaded files have been removed. If cleanup cannot finish, public content is hidden and a temporary cleanup record remains so the guest can retry on the same device. The device credential is removed only after server deletion succeeds. Clearing the cache or uninstalling the app does not request deletion of server data. Hosting backups and security logs may retain limited records under the hosting provider's retention procedures; they are not used to restore a deleted guest account.

Deleting your account immediately hides your public community profile and content. If you restore the same email within 30 days, that content can return. After 30 days, your community photos, profile photos, blocks, and associated reports are permanently removed.

If one partner deletes their account, the other partner can still view the private shared archive. When both partners have deleted their accounts and both retention periods expire, that archive is permanently removed.

Administration

Authorized administrators can view operational statistics and may remove accounts, community content, or private frames when needed for support, safety, legal compliance, or maintenance. Administrator actions are recorded with the actor, action, target, time, IP address, and browser information.

Security and limits

Passwords are stored as hashes, not plain text. Uploads are limited by file type and size. Supported formats are JPG, PNG and WebP.