Information we collect
We collect information you provide when you create and use Albumly, including your name, email address, profile details, memories, written stories, photos, videos, voice recordings, family invitation details, privacy choices, and support communications.
We also collect limited technical information needed to operate and protect the service, such as session identifiers, login timestamps, security logs, browser/device information, and IP-related security signals.
Authentication and account information
If you sign in with Google, Google provides Albumly with a verified account identifier and basic profile information you authorize. Albumly does not receive your Google password. Email/password accounts use email verification and account-security controls.
Payments and subscriptions
Paid Albumly plans are recurring monthly or yearly subscriptions processed by Razorpay. Razorpay processes payment-method, mandate, billing and transaction information under its own terms and privacy practices. Albumly stores identifiers and subscription status needed to provide your plan, but does not store full payment-card numbers or your UPI PIN.
How we use information
We use information to provide private memory storage, organize your archive, authenticate your account, process subscriptions, send verification and password-reset messages, enable sharing you request, prevent abuse, troubleshoot the service, provide support, comply with legal obligations, and improve reliability.
Albumly does not sell your private memories as an advertising product.
Family sharing
Memories are private by default. When you enable a share link or grant a family member access, that person may view the content you chose to share. Family access in the current product is viewing access; invited family members are not promised contributor/upload rights unless Albumly explicitly introduces such a feature later.
Service providers
Albumly uses service providers to operate the service. These may include Hostinger for application/database hosting, Cloudflare R2 for private media storage, Resend for transactional email, Google for optional sign-in, and Razorpay for payment and subscription processing.
Data retention and deletion
We retain account information and stored memories while your account remains active or as needed to provide the service. You can delete your Albumly account from Settings. Account deletion is designed to remove user-linked application records and associated stored media, subject to limited retention required for security, fraud prevention, legal compliance, payment records held by third-party processors, backups, or unresolved disputes.
Security
We use access controls, private media delivery, HTTPS transport, hashed passwords and verification codes, secure session cookies, CSRF protection, rate limiting, and server-side permission checks. No online service can guarantee absolute security, so you should keep independent copies of irreplaceable originals.
International processing
Albumly and its service providers may process information in different countries. Where required, applicable contractual, legal, or provider safeguards may be used for cross-border processing.
Your choices and rights
Depending on your location, you may have rights to access, correct, export, restrict, object to certain processing, or delete personal information. Albumly provides profile editing, archive export, family-access controls, and account deletion tools.
Children
Albumly is intended for adults and is not designed for children to create accounts independently in violation of applicable law.
Changes to this policy
We may update this policy as Albumly evolves. Material changes will be reflected by an updated effective date and, where appropriate, additional notice.
Contact
Privacy and support requests: support@albumly.in. Business enquiries: info@albumly.in.