Privacy Policy

Last updated: August 1, 2026

Your privacy is critically important to us. At Twist Labs, we have a few fundamental principles:

We are thoughtful about the personal information we ask you to provide and the personal information that we collect about you through the operation of our services.
We collect data for ourselves, to run Fotogora, and for no one else. We don't use third-party analytics or tracking services, we don't show ads, and we never sell your personal information.
We don't share your personal information without your express permission, except with the service providers and platforms we rely on to operate (like our cloud hosting provider, the services that deliver our messages, and payment processors) and where the law requires it.
We store personal information for only as long as we have a reason to keep it.
We aim for full transparency on how we gather, use, and share your personal information.

Below is our Privacy Policy, which incorporates and clarifies these principles.

Who we are and what this policy covers

Hi there! We are Twist Labs LLC, the team behind Fotogora, a place for people who love photography to find each other, shoot together, and see the same streets through different eyes. Fotogora is about community, not clout, and we built our approach to your data the same way.

This Privacy Policy applies to information that we collect about you when you use:

Our website (fotogora.app);
Our mobile applications; and
Our other products, services, and features that are available on or through our website and apps.

Throughout this Privacy Policy we'll refer to our website, mobile applications, and other products and services collectively as "Services."

Below we explain how we collect, use, and share information about you, along with the choices that you have with respect to that information.

Creative Commons Sharealike license

This Privacy Policy is adapted from Automattic's privacy policy, which is made available under a Creative Commons Sharealike license. We make ours available under the same license. You're more than welcome to copy it, adapt it, and repurpose it for your own use. Just make sure to revise the language so that your policy reflects your actual practices.

Information we collect

We only collect information about you if we have a reason to do so. For example, to provide our Services, to communicate with you, or to make our Services better.

We collect this information from two sources: if and when you provide information to us, and automatically through operating our Services. Let's go over what we collect.

Information you provide to us

It's probably no surprise that we collect information that you provide to us directly. Here are some examples:

Basic account information: We ask for basic information from you in order to set up your account, like a phone number or email address, and a name. If you sign up or sign in through another service (like Apple or Google), we receive the sign-in information that service provides to us, like a connection token, your name, and your email address. If you set up a passkey, we store the public part of that credential so you can sign in with it.
Profile information: We collect the information you add to your profile, like a photo, a bio, and your display name. Your profile is visible to other users, so please keep that in mind when deciding what to include.
Content information: Fotogora is built around events and photos. We collect the content you create through our Services, like the events you host (including their titles, descriptions, dates, and locations), the photos you upload, the comments you write, and your RSVPs. Photos may include embedded metadata, like the time they were taken and camera settings.
Location choices: You can tell us which places you care about, like the city you want to discover events in or the cities you save to your profile settings. We collect the locations you choose.
Payment and contact information: Fotogora is currently free. If we offer paid services in the future, we'll collect the information needed to process your payments and keep a record of your purchases.
Communications with us: You may provide us with information when you contact us with a support question or respond to one of our messages. We keep a copy of those communications.

Information we collect automatically

We also collect some information automatically:

Log information: Like most online service providers, we collect information that web browsers, mobile devices, and servers typically make available, including the browser type, IP address, language preference, the date and time of access, and operating system.
Usage information: We collect information about your usage of our Services, like the events you view, join, and upload photos to, and when you use different features. We use this information to provide our Services and to understand how they're used so we can make them better. This analysis happens in-house, on our own systems. We don't use third-party analytics services.
Approximate location information: We may determine the approximate, city-level area of your device from your IP address or from your activity, like the general area of an event you RSVP to. We use this to show you events near you and, if you've enabled them, to send you notifications about nearby events. We don't collect precise GPS locations from your device unless you explicitly share a location with us, and we store location information at a city-level precision.
Notification registrations: If you enable push notifications, we store the registration your device or browser gives us so we can deliver them.
Information from cookies: A cookie is a string of information that a website stores on a visitor's computer, and that the visitor's browser provides to the website each time the visitor returns. We use cookies only for what's essential to run Fotogora, like keeping you signed in. We don't use cookies, pixels, or similar technologies to track you, profile you, or target ads, and we don't allow anyone else to do so through our Services.

How and why we use information

Purposes for using information

We use information about you for the purposes listed below:

To provide our Services. For example, to set up and maintain your account, store and show your photos to the people allowed to see them, show you events near a place you choose, deliver the notifications you've enabled, and process payments if you buy something from us.
To ensure quality, maintain safety, and improve our Services. For example, by analyzing, on our own systems, how people use our Services so we can create new features and make our Services easier to use.
To protect our Services, our users, and the public. For example, by detecting security incidents; detecting and protecting against malicious, deceptive, fraudulent, or illegal activity; fighting spam; complying with our legal obligations; and protecting the rights and property of Twist Labs and others.
To fix problems with our Services. For example, by monitoring, debugging, repairing, and preventing issues.
To communicate with you. For example, by sending you sign-in codes, letting you know about changes to events you've joined, sending you the digests and notifications you've chosen to receive, or occasionally sharing news about Fotogora. If you don't want to hear from us, you can opt out of marketing communications at any time. (If you opt out, we'll still send you important updates relating to your account.)

Legal bases for collecting and using information

A note here for those in the European Union about our legal grounds for processing information about you under EU data protection laws, which is that our use of your information is based on the grounds that:

(1) The use is necessary in order to fulfill our commitments to you under the applicable terms of service or other agreements with you or is necessary to administer your account; or

(2) The use is necessary for compliance with a legal obligation; or

(3) The use is necessary in order to protect your vital interests or those of another person; or

(4) We have a legitimate interest in using your information. For example, to provide and update our Services; to improve our Services so that we can offer you an even better user experience; to safeguard our Services; to communicate with you; and to monitor and prevent any problems with our Services; or

(5) You have given us your consent. For example, when you enable notifications about events near you.

Sharing information

How we share information

We don't sell your personal information, and we don't share it with third parties for advertising, analytics, or tracking. We share information about you only in the limited circumstances spelled out below, and with appropriate safeguards on your privacy:

Service providers and platforms: We use a small number of service providers that we need in order to operate, like our cloud hosting provider and the services that deliver our text messages and emails. They process information on our behalf, only as needed to provide their services to us, and we require them to protect it. Some features also rely on platforms you've chosen: for example, push notifications are delivered through your device or browser's push service (run by companies like Apple and Google), and if you buy something from us, your payment will be handled by a payment processor or the app store you purchase through, which will process your payment details under its own privacy policy.
Other users, as part of how Fotogora works: Some sharing is the point of the product. Your profile is visible to other users. Event listings you host, like the title, cover photo, date, general location, and your name, may be visible to anyone. Photos you upload to an event are visible to that event's participants, and hosts and participants can see who has joined an event. This is the sharing you've expressly asked for by using those features.
Legal requirements: We may disclose information about you in response to a subpoena, court order, or other governmental request.
To protect rights, property, and others: We may disclose information about you when we believe in good faith that disclosure is reasonably necessary to protect the property or rights of Twist Labs, third parties, or the public at large. For example, if we have a good faith belief that there is an imminent danger of death or serious physical injury, we may disclose information related to the emergency without delay.
Business transfers: In connection with any merger, sale of company assets, or acquisition of all or a portion of our business by another company, or in the unlikely event that Twist Labs goes out of business or enters bankruptcy, user information would likely be one of the assets that is transferred or acquired by a third party. If any of these events were to happen, this Privacy Policy would continue to apply to your information and the party receiving your information may continue to use your information, but only consistent with this Privacy Policy.
With your consent: We may share and disclose information with your consent or at your direction.
Aggregated or de-identified information: We may share information that has been aggregated or de-identified, so that it can no longer reasonably be used to identify you. For instance, we may publish aggregate statistics about the use of our Services.

Information shared publicly

Information that you choose to make public is, you guessed it, disclosed publicly. That means information like your profile and the listings of events you host are available to others, and may be indexed by search engines or used by third parties. Photos uploaded to an event are not public: they're visible to the event's participants. Please keep all of this in mind when deciding what you would like to share.

How long we keep information

We generally discard information about you when it's no longer needed for the purposes for which we collect and use it, described in the section above on How and Why We Use Information, and we're not legally required to keep it.

For example, we keep server logs that record information about visitors to our Services, like the visitor's IP address and browser type, for approximately 30 days. We retain the logs for this period of time in order to, among other things, analyze traffic to our Services and investigate issues if something goes wrong.

If you delete content or your account, we'll remove it from view promptly, but deleted information may remain in our backups and caches until purged.

Security

While no online service is 100% secure, we work very hard to protect information about you against unauthorized access, use, alteration, or destruction, and take reasonable measures to do so. We monitor our Services for potential vulnerabilities and attacks.

To enhance the security of your account, we encourage you to set up a passkey in your account settings.

Choices

You have several choices available when it comes to information about you:

Limit the information that you provide: If you have an account with us, you can choose not to provide optional information, like a bio or saved locations. Some features won't work without the information they need; for example, we can't show you events near you without a place to search around.
Limit access to information on your mobile device: Your device's operating system lets you control our access to things like your photos, camera, and location. If you limit that access, some features, like uploading photos to an event, may not be available.
Manage your notifications: You can choose which emails and push notifications you receive in your notification settings, and you can opt out of marketing communications at any time. If you opt out, we may still send you other communications, like those about your account and legal notices.
Cookies: We only use cookies that are essential to run Fotogora, like keeping you signed in, so there's no tracking to opt out of. If you set your browser to reject cookies, you won't be able to stay signed in.
Delete your account: While we'd be very sad to see you go, you can delete your account at any time in your settings. Please keep in mind that we may continue to retain some information after closing your account, as described in How Long We Keep Information above, for example when that information is reasonably needed to comply with (or demonstrate our compliance with) legal obligations or reasonably needed for our legitimate business interests.

Your rights

If you are located in certain parts of the world, including some US states and countries that fall under the scope of the European General Data Protection Regulation (aka the "GDPR"), you may have certain rights regarding your personal information, like the right to request access to or deletion of your data.

European General Data Protection Regulation (GDPR)

If you are located in a country that falls under the scope of the GDPR, data protection laws give you certain rights with respect to your personal data, subject to any exemptions provided by the law, including the rights to:

Request access to your personal data;
Request correction or deletion of your personal data;
Object to our use and processing of your personal data;
Request that we limit our use and processing of your personal data; and
Request portability of your personal data.

You also have the right to make a complaint to a government supervisory authority.

US privacy laws

Laws in some US states require us to provide residents with additional information about the categories of personal information we collect and share, where we get that personal information, and how and why we use it. You'll find that information in this section (if you are a California resident, please note that this is the Notice at Collection we are required to provide you under California law).

In the last 12 months, we collected the following categories of personal information, depending on the Services used:

Identifiers (like your name, contact information, and device and online identifiers);
Commercial information (your billing information and purchase history, if you buy something from us);
Internet or other electronic network activity information (such as your usage of our Services);
Geolocation data (such as your approximate location based on your IP address or the places you choose); and
Audio, electronic, visual, or similar information (such as your profile picture and the photos you upload).

You can find more information about what we collect and the sources of that information in the Information We Collect section above. We collect personal information for the business and commercial purposes described in the How and Why We Use Information section, we share it only as described in the Sharing Information section, and we retain it for the length of time described in the How Long We Keep Information section.

We do not sell or share your personal information as those terms are defined under US state privacy laws, including for cross-context behavioral or targeted advertising, so there is nothing for you to opt out of. We also honor Global Privacy Control browser signals. We do not collect or process sensitive personal information except where it is strictly necessary to provide you with our Services, and we do not use it to infer characteristics about you.

In some US states you have additional rights subject to any exemptions provided by your state's respective law, including the right to:

Request a copy of the specific pieces of information we collect about you and, if you're in California, to know the categories of personal information we collect, the categories of business or commercial purpose for collecting and using it, the categories of sources from which the information came, and the categories or list of third parties we share it with;
Request deletion of personal information we collect or maintain;
Request correction of personal information we collect or maintain;
Receive a copy of your information in a readily portable format; and
Not receive discriminatory treatment for exercising your rights.

Contacting us about these rights

You can usually access, correct, or delete your personal data using your account settings and the tools that we offer, but if you aren't able to, or you'd like to contact us about one of the other rights, reach out to us at support@fotogora.app.

When you contact us about one of your rights under this section, we'll need to verify that you are the right person before we disclose or delete anything. For example, we may need you to contact us from the email address or phone number associated with your account. You can also designate an authorized agent to make a request on your behalf by giving us written authorization. We may still require you to verify your identity with us.

Appeals process for rights request denials

In some circumstances we may deny your request to exercise one of these rights. For example, if we cannot verify that you are the account owner, we may deny your request to access the personal information associated with your account. As another example, if we are legally required to maintain a copy of your personal information, we may deny your request to delete it.

In the event that we deny your request, we will communicate this fact to you in writing. You may appeal our decision by responding in writing to our denial and stating that you would like to appeal. In the event that your appeal is also denied, this information will be communicated to you in writing. If your appeal is denied, in some US states you may refer the denied appeal to the state attorney general if you believe the denial is in conflict with your legal rights. The process for how to do this will be communicated to you in writing at the same time we send you our decision about your appeal.

Controller

Twist Labs LLC, a Texas limited liability company, is the controller of your personal information, which means it is the company responsible for processing that information.

How to reach us

If you have a question about this Privacy Policy, or you would like to contact us about any of the rights mentioned in the Your Rights section above, please email us at support@fotogora.app. You can also reach us by mail at:

Twist Labs LLC
5900 Balcones Drive STE 100
Austin, TX 78731
USA

Other things you should know (keep reading!)

Transferring information

Our Services are hosted in the United States. If you use our Services from outside the United States, including from the European Economic Area (EEA), the information we process about you will be transferred to, stored, and processed in the United States. This is required for the purposes listed in the How and Why We Use Information section above.

When transferring information about you from the EEA, we will take appropriate measures to ensure that your personal information is protected adequately in accordance with this Privacy Policy as required by applicable law, such as entering into European Commission approved standard contractual clauses where required. You can ask us for more information about the steps we take to protect your personal information when transferring it from the EU.

Children's privacy

Our Services are not directed to children, and you must be at least 18 years old to use them. We don't knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us at support@fotogora.app and we'll delete it.

Third-party services

If you sign in with a third-party service (like Apple or Google), make a purchase through a payment processor or an app store, or follow a link from our Services to a third-party website, keep in mind that those third parties have their own rules about information collection, use, and sharing, which you should review. This Privacy Policy only covers the collection of information by Twist Labs.

Privacy policy changes

Although most changes are likely to be minor, we may change this Privacy Policy from time to time. We encourage visitors to frequently check this page for any changes. If we make changes, we will revise the "Last updated" date above, and, in some cases, we may provide additional notice (like sending you a notification through email or our Services). Your further use of the Services after a change to our Privacy Policy will be subject to the updated policy.

Translation

Our Privacy Policy was originally written in English (US). We may translate it into other languages. In the event of a conflict between a translated version of our Privacy Policy and the English version, the English version will control.

That's it! Thanks for reading.