Privacy policy

AfterGlow is operated by Balaji Nagisetty as an individual developer. Contact us at balaji.nagisetty@gmail.com.

• AccountYour email address and display name, supplied by Sign in with Apple or Google. We never see your Apple or Google password.
• PhotosEvery photo you take through the app or add from your camera roll, while a film window is open. Photos are stored on Cloudflare R2 as private objects accessible only via short-lived signed URLs.
• MembershipWhich events (films) you host or have joined, and your role (host or guest) in each.
• Device tokensApple Push Notification tokens, when you grant notification permission. Used solely to notify you about your own events.
• PaymentsStripe processes one-time event payments. We store the Stripe Checkout Session ID against your event. We never see or store your full card number — Stripe does that.
• Diagnostics in support emailsWhen you submit feedback via the in-app form, we attach your user ID, name, email, and app version to help us debug. Nothing else.

• Run the appAuthenticate you, render your events, deliver photos to other members of the same event, charge for paid tiers, send your push notifications.
• Operate the serviceLogs, error reports, and aggregate counts to keep the service running. We do not build profiles, behavioural models, or anything resembling an ad targeting graph.

• Sell, rent, or share your personal data with advertisers or data brokers.
• Use your photos to train any AI or machine-learning system.
• Make any event roll public, indexed, or shareable outside its invited members.
• Send marketing email or push notifications unrelated to your events.

• Apple & Google Sign-InFor authentication only. We receive your name + email; they do not see your AfterGlow activity.
• StripePayment processing for paid event tiers. Card data is handled exclusively by Stripe under their privacy policy.
• Cloudflare R2Object storage for photos and event covers. Private buckets; access only via short-lived signed URLs.
• RailwayHosts our backend API.
• Apple Push Notification ServiceDelivers push notifications to your device.

• Export your dataOpen the app → Profile → Export my data. You get a JSON file with your profile, your event memberships, and 7-day signed URLs to download every photo we hold for you.
• Delete your accountOpen the app → Profile → Delete account. Every event you host and its photos are permanently removed from our servers. Events you joined as a guest stay with the host, but your name on photos you uploaded is unlinked.
• EU / UK residents (GDPR)You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data. Email us to exercise these rights.
• California residents (CCPA)You have the right to know what we collect, to delete it, and to opt out of any sale of your personal information. We do not sell personal information.

AfterGlow is not directed at children under 13 and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us their data, email us and we will delete it.

We retain your data while your account is active. When you delete your account, every event you hosted and the photos in it are removed from our database and R2 storage within 30 days. Backups roll over on the same cycle.

Our backend runs on Railway infrastructure (primarily US regions). Photos are stored on Cloudflare R2 across globally distributed regions. By using AfterGlow you consent to your data being processed in those locations.

We will update this page when our practices change. The “Last updated” date at the top will tell you when. For material changes we will surface a notice in the app.

Questions, requests, complaints — email balaji.nagisetty@gmail.com.