Privacy Policy

Who we are

PasaMo is made by Works of Bryan, an independent developer. "We" and "our" in this policy mean Works of Bryan.

Questions about this policy or your data: info@worksofbryan.com

What PasaMo does

PasaMo lets a group of people at the same event put their photos into one shared album. One person starts an event and shows a QR code or a 4-digit code. Guests join with it and everyone's photos are copied to everyone's phone.

What stays on your phone

These are stored only on your own device and are never sent to us:

• The albums you created or joined, and the photos in them.
• The name you typed, which is shown to people in the same event.
• A random ID made by the app when it is first installed. It lets an organiser tell guests apart. It is not your phone's serial number or advertising ID.
• The secret key for each event, kept in your phone's secure storage.
• Your settings.

What other people in your event receive

When you join or host an event, the other phones in that event receive:

• The photos you add. They are sent as the original files, unchanged.
• The name you typed.
• The app's random ID for your phone.

Photo details travel with the photo. Because PasaMo sends originals, anything saved inside the photo file goes with it. That can include the date and time, the camera model, and the place it was taken if your camera saves location. If you do not want to share where a photo was taken, turn off location for your camera, or remove it from the photo before adding it.

People in your event can save your photos to their own library. Once saved there, PasaMo can no longer remove them.

What our server handles

PasaMo works without our server when phones are on the same Wi-Fi. Our server is involved in two cases.

1. Joining over the internet

If the organiser turns on "Let guests join over the internet", phones that are not on the same Wi-Fi connect through our relay server. The relay passes data between the two phones and does nothing else.

• Photos pass through encrypted. We cannot view them.
• Photos are not saved on the server.
• The server sees each phone's IP address while it is connected, and a code that identifies the event. That code is made from the event's secret key in a way that does not reveal the key.
• The server keeps one running total of how much data it has relayed each month. The total is not tied to any person or event.

The app also asks the relay now and then whether the organiser of an event you joined is online. That request contains only the event's code.

2. Waking the organiser's phone

When you host an event on an iPhone, the app registers a push notification token with our server. If a guest cannot reach your phone, the server uses the token to send you one notification: "Someone is trying to join".

• The token is stored with the event's code and nothing else. No name, no photos.
• It is removed when you end the event or delete its album, and automatically after 30 days without use.
• The notification is delivered by Apple's push notification service.

Server logs

Like most web servers, ours records basic technical details of requests, such as IP address, time and the address requested. We use these only to keep the service running and secure, and do not combine them with anything else.

Summary of data

What we do not do

• We do not ask for an account, email address or phone number.
• We do not show ads.
• We do not track you across apps or websites.
• We do not use analytics.
• We do not sell or share your data with anyone for marketing.
• We do not store your photos.

Permissions the app asks for

• Local network / nearby devices: to find events on the same Wi-Fi and send photos directly between phones.
• Camera: to scan an event's QR code. PasaMo does not take or record pictures.
• Photos: you pick which photos to add. The app asks to add to your library only when you tap Save.
• Notifications: to tell an organiser that someone wants to join.

On Android, QR codes are read on the device using Google's ML Kit. Google may collect limited technical information about how that component performs. See Google's ML Kit terms.

Security

Data sent between phones is encrypted using keys that only the phones in the event hold. Connections to our server use HTTPS. No method is perfect, so please only share an event's QR code or join code with people you want in it.

An organiser can require approval for each guest, remove a guest, and delete any photo from the event.

Your choices and your rights

• Delete an album: open it and choose "Delete album" or "Remove from this phone".
• Delete a photo: the person who added it, or the organiser, can delete it. It is then removed from the album on every phone the next time they connect.
• Delete everything: uninstalling PasaMo removes all its data from your phone.
• Remove your push token: end the event or delete its album.

Depending on where you live, you may have the right to ask what data we hold about you and to have it corrected or deleted. In the European Union and the United Kingdom these rights come from data protection law, and you can also complain to your local data protection authority. Because PasaMo has no accounts, we usually cannot link server data to a person, but write to us and we will help however we can.

Where the law asks for a reason for handling data: we handle the push token and relay connections because they are needed to provide the features you turned on, and server logs because we have a legitimate interest in keeping the service secure.

Children

PasaMo is not directed at children under 13 and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will remove it.

Changes to this policy

If this policy changes, the new version will be posted on this page with a new date. If the change is significant, we will say so in the app's update notes.

Contact

Works of Bryan
info@worksofbryan.com
www.worksofbryan.com