Privacy Policy
Last updated September 4, 2026
1. What we collect
When a host creates an event, we collect their account information (email, authentication credentials) and event details (event name, functions, dates). When a guest joins an event via a QR code or link, we collect the display name they enter and the photos, videos, and voice notes they upload. We do not require guests to create an account.
2. Face matching (“Photos of me”)
Face matching is opt-in and off by default for every guest. If a guest opts in, Mosaic generates a face embedding — a numeric representation of a face, not a photo — used only to group photos of that guest within that event's gallery. Face embeddings are processed on infrastructure we control, are never shared with third parties, are never used to train any model, and are automatically deleted 30 days after they're created. A guest can decline face matching entirely and still use every other part of the app.
3. How photos and videos are shared
Media uploaded to an event is visible to the host and to other guests of the same function, unless the host marks that function as host-only (a Privacy Zone), in which case only the host can see it. Media is served through short-lived signed links, not public URLs — nothing is indexable or guessable from outside the app.
4. Reporting and moderation
Any guest can report a photo they find inappropriate. A reported photo is immediately hidden from every guest while the host reviews it, and the host can permanently remove it or restore it. Hosts can also block a specific guest from an event.
5. Where data lives
Event data, guest data, and media are stored with Supabase, our database and storage provider, protected by row-level security policies scoped to each event. We do not sell personal data to anyone, and we do not use guest photos for advertising.
6. Data retention and deletion
Event media is retained so hosts can access their gallery after the event. A host can request deletion of their event and all associated media at any time by emailing hello@mosaiccam.com. Face embeddings are deleted automatically after 30 days regardless of any other request.
7. Your rights
You can ask us what data we hold about you, ask us to correct it, or ask us to delete it, by emailing hello@mosaiccam.com. We'll respond within a reasonable time.
8. Changes to this policy
If this policy changes materially, we'll update the date at the top of this page. Continued use of Mosaic after a change means you accept the updated policy.
9. Contact
Questions about this policy? Email hello@mosaiccam.com.