Privacy Policy

Last updated: August 25, 2026

Vioo is a small, self-hosted group photo app. It's run by a single operator, and it's free and open for anyone to sign up and use — it doesn't run ads, trackers, or analytics of any kind, and it doesn't sell or share your data. Individual albums stay private to the people you invite into them. This page explains, in plain language, what data Vioo collects and what happens to it.

What we collect

• Account info — when you sign in, Vioo receives your name, email address, and a unique account ID from the sign-in provider (Keycloak). We don't collect a password ourselves; sign-in is handled entirely by that provider.
• Album data — album names, themes, reveal settings, membership lists, and the 6-digit invite codes you create or use to join.
• Photos — the photos you capture inside an album, along with the time they were taken and which member took them.
• Reveal responses — for "everyone accepts" albums, whether you've tapped "I'm ready."

Vioo does not access your camera roll, contacts, or location, and does not request any permissions beyond your device camera when you choose to take a photo in the app.

How your data is used

Everything collected is used only to run the app's core feature: letting you and the people you invite into an album capture photos privately and reveal them together at an agreed moment. Nothing is used for advertising, profiling, or sold or shared with any third party.

Legal basis for processing

If you're in the EU/UK, here's what we rely on to process your data under GDPR:

• Account, album, and photo data — processed because it's necessary to provide the app you've asked to use (performance of a contract, Art. 6(1)(b)): creating your account, and creating or joining an album.
• Push notifications — processed only with your explicit consent (Art. 6(1)(a)), given when you turn notifications on in Settings. You can withdraw that consent at any time by turning them back off.

Who can see what

• Photos you take are locked the instant you save them — nobody, including you, can view them again until the album's reveal condition is met.
• Once an album is revealed, photos are visible only to that album's members.
• Photo files are also protected at rest on the server, adding a layer of security beyond normal file storage.
• Members outside an album can never see its photos, its invite code stops working once it's revealed, and there is no public gallery or search.

Where your data lives

Vioo is a Portalsbase product. It runs on a server operated by Portalsbase — not on a third-party cloud platform. Sign-in is handled by a self-hosted identity provider (Keycloak) run by the same operator.

Third parties & international transfers

Vioo itself doesn't use any third-party analytics, advertising, or cloud storage providers. The one exception is push notifications, and only if you turn them on: a notification is delivered through your own browser's push service (for example Google, Apple, or Mozilla, depending on which browser you use — Vioo doesn't choose this, your browser does). That service receives an encrypted notification payload it can't read, along with your device's push address, and this may involve processing outside the EU/EEA on that provider's infrastructure. This only ever happens if you explicitly enable notifications in Settings, and stops as soon as you turn them off.

How long we keep it

Locked (not-yet-revealed) albums are kept until the reveal happens or the host deletes the album. Once an album is revealed, its photos are automatically and permanently deleted from the server 2 days after reveal — download anything you want to keep before then. A host can also delete an album at any time before that. Either way, deletion permanently removes the photos from the server and can't be undone. Your account record is kept for as long as you have access to the app.

Your rights

If you're in the EU/UK, GDPR gives you the following rights over your data. Reach out to [email protected] to use any of them; we'll respond within 30 days.

• Access — get a copy of the data we hold about you.
• Rectification — correct inaccurate account data.
• Erasure — delete your account and associated data. You can already delete any album you host yourself, at any time, from the dashboard.
• Restriction & objection — ask us to limit or stop processing your data in certain circumstances.
• Portability — get your data in a format you can take elsewhere.
• Withdraw consent — for push notifications specifically, at any time, by turning them off in Settings.

You also have the right to lodge a complaint with your local data protection supervisory authority at any time, whether or not you've contacted us first.

Children's privacy

Vioo is open to the general public but isn't directed at children, and we don't knowingly collect data from children. If you believe a child has created an account, contact [email protected] and we'll remove it.

Changes to this policy

If how Vioo handles data changes meaningfully, this page will be updated and the "last updated" date above will change accordingly.

Questions

If you have questions about your data, reach out to [email protected].