Short version: Povi stores the photos and videos you capture in your own Google Drive, using the narrowest possible access permissions. Povi never sells your personal information, never shows ads, and never shares guest media with anyone other than the event host you chose to upload to. You can delete your data at any time.
1 Who we are
Povi (“the App”, “we”, “us”) is a multi-perspective camera sharing and centralized media platform. Event creators use the Povi app to create events, publish a QR code, and collect photos and videos contributed by guests. Those contributions are stored in the event creator’s own Google Drive account.
This Privacy Policy explains how we handle personal information when you use the Povi mobile application (Android and iOS) and the Povi web application hosted at povi-app.web.app, including the guest capture page you reach by scanning an event QR code.
If you have questions about this policy, contact us at aneroalfred10@gmail.com.
2 Information we collect
We collect only the information needed to operate the service. The categories below describe what is collected and why.
| Category | What is collected | When | Why |
|---|---|---|---|
| Account information | Your Google account email address, display name, profile photo URL, and the OAuth tokens associated with your Google Drive authorization. | When you sign in with Google. | To identify you, secure your account, and connect your Google Drive so media can be written to it. |
| Event information | Event name, date, location, cover image, allowed media types, maximum upload size, event status, and the access token embedded in the event QR code. | When you create or edit an event. | To display your event, generate the QR code, and validate guest uploads. |
| Captured media and metadata | Photos and videos captured or selected on a device, together with file name, file type, size, capture timestamp, and the uploader label shown on the contributor badge. | When a creator or guest captures or selects media for an event. | To upload the media into the event’s Google Drive folder and to build the live multi-perspective gallery. |
| Device and usage data | IP address, device and browser type, operating system version, app version, and request timestamps. Standard web server and Firebase logs also record this data. | Automatically, whenever the service is used. | For security, abuse prevention, debugging, and understanding aggregate usage. |
| Guest capture data | If you capture media as a guest, we process the media you submit, the event token you used, and the technical data listed above. | When you upload to an event you were invited to. | To validate the upload and deliver it to the event host. |
Permissions we request
The app requests the following device permissions, and asks for them at the moment they are needed:
- Camera — to capture photos and record video for an event.
- Microphone — to record sound with event videos.
- Photo library — to attach an existing photo or video to an event.
- Google Drive (limited scope) — to read and write only the folders Povi creates for your events.
Permission is never a condition of using the guest capture page beyond the ability to produce media. Denying a permission prevents that specific capture method but does not otherwise restrict the App.
3 How we use information
We use the information listed above to:
- Provide, operate, and maintain the App, including authentication, event management, QR code generation, and media upload and playback.
- Organize captured media into a structured Google Drive folder tree for each event (
Google Drive / Povi / <Event Name> / Photosand/ Videos). - Display the live gallery and event analytics for the event creator.
- Validate guest uploads against an active, unexpired event token before accepting them.
- Detect, prevent, and investigate fraud, abuse, spam, and security incidents.
- Comply with legal obligations and enforce our Terms of Service.
We do not use your information for advertising. We do not sell your personal information to anyone. We do not use your captured media to train machine learning models or for any other purpose beyond delivering the service you requested.
4 How information is stored and secured
Where your media lives
Your event photos and videos are written to your own Google Drive. Povi requests only the drive.file scope, which allows it to see and manage only files that Povi itself created. Povi cannot read, edit, or delete any other file in your Drive, and cannot see folders belonging to any other app.
Where our own data lives
Account records, event records, and gallery metadata are stored in Google Cloud Firestore. Authentication is handled by Firebase Authentication, and upload processing runs in Cloud Functions. Google Drive API access tokens and refresh tokens are stored in server-only Firestore subcollections that are explicitly blocked from all client reads by our security rules.
Security measures
- All traffic is served over encrypted HTTPS connections, and data in transit is encrypted in transit.
- Google OAuth credentials are held server-side only and are never shipped inside the client application.
- Firestore security rules enforce least-privilege access, so a device can only read the events it is permitted to read.
- Guest uploads are validated on the backend against an unexpired event token before any file is written.
- Event access tokens can be regenerated at any time, which immediately invalidates previously issued QR codes.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authority as required by applicable law.
5 How we share information
We share personal information only in the following circumstances:
- Event hosts, by design. When you contribute photos or videos to an event as a guest, those files are delivered to the creator of that event and stored in their Google Drive. The event creator can view, download, organize, and delete them, and can see the contributor label associated with your contribution. This is the core purpose of the service.
- Service providers. We rely on Google Cloud infrastructure (Firebase Authentication, Firestore, Cloud Functions, Cloud Hosting and the Google Drive API) to operate the App. These providers process data strictly on our instructions.
- At your direction. We share media into the Google Drive location you connected and authorized, exactly as you configured it.
- Legal and safety. We may disclose information where required by law, to protect the rights and safety of Povi, our users, or the public, or to enforce our agreements.
- Business transfer. If Povi is merged, acquired, or reorganized, your information may transfer to the successor entity, and you will be notified before your information becomes subject to a different privacy policy.
We do not sell, rent, or trade your personal information. We do not share your personal information with third parties for their own marketing purposes.
6 International transfers
Povi is operated using infrastructure operated by Google, which may process your information in countries other than the one where you live. Where information is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses and Google’s own data processing terms. You may contact us for more information about the specific safeguards applicable to your region.
7 Retention
We keep your information only for as long as needed to provide the service and meet legal obligations:
- Captured media is retained in your Google Drive until you delete it. Deleting it from the event, or deleting the file in Drive, removes it from the Povi gallery.
- Event records and gallery metadata are retained while the event exists. Deleting an event removes its associated metadata and index entries.
- Account records are retained until you delete your account, after which we remove or de-identify your personal information from our systems within a reasonable period.
- Server and security logs are retained for a limited period for security and diagnostics, and are not used for any other purpose.
8 Your rights and controls
Depending on where you live, you may have the right to access, correct, delete, restrict, or export your personal information, to object to certain processing, to withdraw consent, and to lodge a complaint with a supervisory authority. We also apply these rights to every user regardless of jurisdiction, as a matter of policy.
You can exercise most of these controls directly:
- Access and export — your media is in your own Google Drive, so you can view and export it at any time.
- Correction — edit event names, dates, locations, and media details from within the App.
- Deletion — delete individual media, delete an event, or revoke access by regenerating the event token. To delete your account and its associated data, email us.
- Revoke access — you can disconnect your Google Drive from Povi at any time. Doing so stops new uploads; it does not delete files that were already written to Drive.
To request access, correction, or deletion of data we hold, or to exercise any other right, email aneroalfred10@gmail.com. We will verify your request and respond within a reasonable timeframe.
9 Children’s privacy
Povi is not directed to children under 13 (or under the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. Because media can be captured by any guest with access to an event QR code, event creators are responsible for obtaining appropriate consent from any minors who participate in their event. If you believe a child has provided us with personal information, contact us at aneroalfred10@gmail.com and we will delete it.
10 Third-party services
The App links to and depends on third-party services, including Google, Google Drive, the Google Play Store, and the Apple App Store. Your use of those services is governed by Google’s and Apple’s own privacy policies, not this one. We are responsible only for our own processing of your information.
11 Changes to this policy
We may update this Privacy Policy as the App evolves or as legal requirements change. The “Effective” date at the top of this page always reflects the current version. If a change materially affects how we handle information you have already shared, we will provide additional notice, such as an in-app notice or an email, before the change takes effect. Continuing to use Povi after an update means the updated policy applies to you.
12 Contact us
Questions, concerns, or requests about this Privacy Policy or our privacy practices:
- Email: aneroalfred10@gmail.com
- Web app: https://povi-app.web.app/
- Terms of Service: https://povi-app.web.app/terms-of-service