Privacy Policy

Last updated: July 14, 2026

Vioo is a small, self-hosted group photo app. It's run by a single operator, and it's free and open for anyone to sign up and use — it doesn't run ads, trackers, or analytics of any kind, and it doesn't sell or share your data. Individual albums stay private to the people you invite into them. This page explains, in plain language, what data Vioo collects and what happens to it.

What we collect

• Account info — when you sign in, Vioo receives your name, email address, and a unique account ID from the sign-in provider (Keycloak). We don't collect a password ourselves; sign-in is handled entirely by that provider.
• Album data — album names, themes, reveal settings, membership lists, and the 6-digit invite codes you create or use to join.
• Photos — the photos you capture inside an album, along with the time they were taken and which member took them.
• Reveal responses — for "everyone accepts" albums, whether you've tapped "I'm ready."

Vioo does not access your camera roll, contacts, or location, and does not request any permissions beyond your device camera when you choose to take a photo in the app.

How your data is used

Everything collected is used only to run the app's core feature: letting you and the people you invite into an album capture photos privately and reveal them together at an agreed moment. Nothing is used for advertising, profiling, or sold or shared with any third party.

Who can see what

• Photos you take are locked the instant you save them — nobody, including you, can view them again until the album's reveal condition is met.
• Once an album is revealed, photos are visible only to that album's members.
• Photo files are also protected at rest on the server, adding a layer of security beyond normal file storage.
• Members outside an album can never see its photos, its invite code stops working once it's revealed, and there is no public gallery or search.

Where your data lives

Vioo is a Portalsbase product. It runs on a server operated by Portalsbase — not on a third-party cloud platform. Sign-in is handled by a self-hosted identity provider (Keycloak) run by the same operator.

How long we keep it

Locked (not-yet-revealed) albums are kept until the reveal happens or the host deletes the album. Once an album is revealed, its photos are automatically and permanently deleted from the server 2 days after reveal — download anything you want to keep before then. A host can also delete an album at any time before that. Either way, deletion permanently removes the photos from the server and can't be undone. Your account record is kept for as long as you have access to the app.

Children's privacy

Vioo is open to the general public but isn't directed at children, and we don't knowingly collect data from children. If you believe a child has created an account, contact [email protected] and we'll remove it.

Changes to this policy

If how Vioo handles data changes meaningfully, this page will be updated and the "last updated" date above will change accordingly.

Questions

If you have questions about your data, reach out to [email protected].