Privacy Policy
Last updated: 13 July 2026
This Privacy Policy explains how PickMyAlbum collects, uses, and protects your personal data when you use our service to organise your photos and order printed albums. We follow a privacy-by-design approach: we collect only what we need, keep it secure, and give you control over it.
1. Who we are
PickMyAlbum is operated by [legal entity name], a company established in Portugal (registered office: [registered address]; tax identification number (NIPC): [NIF]; commercial registry number: [commercial registry number]). [legal entity name] is the data controller responsible for the personal data processed through the service. You can reach us at support@pickmyalbum.com.
2. Information we collect
We collect: account details you provide (email address and name); the photos you upload and their technical metadata (such as the date and, where present, location stored in the file); shipping and billing addresses you enter when placing an order; your order history; and your language preference. We also process limited technical data needed to keep the service secure and running.
3. How we use your information
We process your data for specific purposes, each with a legal basis under the GDPR: • Creating your account and storing and organising your photos — to perform our contract with you. • Processing and delivering album orders and handling payments — to perform our contract. • Grouping photos of the same people within your own library, so we can organise your photos and build your album — to perform our contract with you (see "Face grouping & biometric data" below). • Sending transactional emails (order confirmations, receipts, security notices) — to perform our contract. • Sending marketing emails — only with your consent, which you can withdraw at any time.
4. Your photos & how AI is used
To create your album, we analyse the photos you upload — to organise them, select the strongest images, lay out pages, and produce and deliver your printed album. This analysis (such as tagging, quality assessment, and grouping faces) runs on our own AI models on our infrastructure within the European Union; your photos are not sent to any third-party AI service. We also use Google's Gemini (via Google Cloud Vertex AI) to help name and organise albums; this works from derived text and metadata, not the images themselves, and Google does not use this data to train its models. Some of that text processing may take place outside the European Economic Area under appropriate safeguards. We never use your photos for marketing, public display, our portfolio, or to train AI models without your separate, explicit consent.
5. Face grouping & biometric data
Creating your album involves grouping photos of the same people, so face grouping runs automatically on the photos you upload — it is an integral part of the service, not an identification tool. We generate a numerical face embedding (a 512-dimension vector) used only to group similar faces within your own photo library: we do not store raw biometric templates, we never match faces against external databases or other users' photos, and face data is never shared with third parties or used for any other purpose. You can have your face data deleted at any time by contacting support@pickmyalbum.com; deletion is completed within 72 hours. Face data is also deleted when you delete the underlying photos or your account. If you do not want your photos analysed in this way, please do not upload them.
8. Data retention
We keep your photos and albums for as long as your account is active and for 30 days after you delete your account, so an accidental deletion can be recovered. We keep order and invoice records for the period required by law (up to 7 years). Face data is deleted on request, when you delete the underlying photos, or when your account is deleted. When data is no longer needed, we delete or anonymise it.
9. Your privacy rights
Under the GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to certain processing. You can exercise most of these directly in the app (update your profile, export your photos, or delete your account). For anything else — including deletion of your face data — contact support@pickmyalbum.com — we respond within 30 days. You also have the right to lodge a complaint with the Portuguese data-protection authority (CNPD, www.cnpd.pt).
10. Children's privacy
The service is intended for users aged 13 or older (16 in some EU countries). We do not knowingly collect personal data from children below that age. If we learn that a child has created an account without the required consent, we will delete it and the associated data.
11. International data transfers
Your data is hosted within the European Union (Google Cloud region europe-west1, Belgium). Where a processor needs to transfer data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
12. Changes to this policy
We may update this policy from time to time. If we make a material change, we will notify you by email or in the app before it takes effect, and we will update the "Last updated" date above.
13. Contact us
For any privacy question or to exercise your rights, contact us at support@pickmyalbum.com or by post at [registered address]. Our full company identification is on our Contact page.