Privacy Policy

• If you had your photo taken at an event, the event's host is responsible for your photo, not us. We store and process it for them. Questions or requests about it go to the host first (see “For guests” below).
• If you hold an Oobler account, we are responsible for your account data, and this policy explains how we handle it.
• Guest photos are kept for 30 days unless the host extends them, then deleted. We don't use them to identify anyone, sell them, or train AI on them.

Oobler is operated by Oangle, a company registered in Singapore (“we”, “us”). We handle personal data in two different roles:

• Host account data - we are the controller. Information about the people and organisations who create an account (“hosts”) and use the Service.
• Guest data - the host is the controller; we are the processor. Photos and related data from people who use, or appear in, a host's kiosk (“guests”). The host decides where the kiosk is, who it photographs and how long photos are kept, and is the organisation responsible under Singapore's PDPA (and the controller under the GDPR where it applies). We act as the host's data intermediary / processor and handle guest data only on the host's instructions, as set out in our Terms of Service.

The host who ran the kiosk you used is responsible for your photo and for telling you how it's used. They should have shown you that information at the kiosk. To ask for a copy of your photo, have it corrected or deleted, or withdraw consent, contact that host - they can delete a photo or a whole event at any time.

If you can't reach the host, contact us through our contact page with the event name, date and place, and the photo link or QR code if you have it. We will pass your request to the host, and help them act on it.

We don't ask guests for a name, phone number or account. If the host offers email and you ask for your photo by email, the address you type is used only to send that one email, through the host's own email account - we don't store or log it. If the host runs a video wall, your finished photo is also shown on a screen at the event, through a link the host controls. We don't use photos to identify you or build a face database, and we don't sell them, advertise with them, or use them to train AI.

Host account data: your email address and sign-in details (through our sign-in provider, Clerk); your events, settings, designs and uploads; your credit balance and purchase history; the date, version, IP address and browser from which you accepted our Terms and this policy; and messages you send us.

Guest data, processed for the host:

• The photo you take. For AI styles, it is sent directly to our AI provider to create the result and is not saved in our storage. For photo strips, the photos stay on the kiosk device and only the finished animation is uploaded.
• The finished image (and any frame or stickers added), stored so it can be downloaded or scanned.
• Text you type, if the host's kiosk asks you to describe a scene.
• Your email address, only if you ask for your photo by email - used to send it and then discarded, never stored or logged.
• Technical data from the kiosk device, such as IP address and browser, in our logs.

Faces: producing a photo means processing an image of a face - for example to place it into a scene, or to crop a headshot around it. That is the only use. We don't perform facial recognition, keep face templates, or match anyone across photos.

Payment data: handled by Stripe. We never see or store your card details.

Cookies and local storage: strictly necessary ones only - to keep hosts signed in, and to keep an unsaved Booth Designer draft on your own device. No advertising or cross-site tracking cookies.

• To provide the Service you signed up for (performance of our contract with you).
• To take payments, keep billing records and meet tax and legal duties (legal obligation).
• To send service messages - low credits, photos expiring, purchases (contract and legitimate interests).
• To keep the Service secure, prevent abuse and fix problems (legitimate interests).
• To keep a record that you accepted our Terms (legitimate interests, legal claims).

We don't sell personal data, and we don't use it for third-party advertising.

We use these providers to run the Service. Each handles data only to provide its service to us:

• Replicate - runs the AI models. A guest's photo and chosen scene are sent to it to create the result; it keeps them only briefly under its own retention terms.
• Cloudflare - carries traffic to the Service. Finished photos, uploads and our database (accounts, events, and records about each photo) are kept on our own server.
• Clerk - host sign-in.
• Stripe - payments.
• Resend - service emails to hosts.
• The host's own email provider - only if the host turns on email delivery; guest photos are sent through the email server the host chose.
• Google Fonts - only if a host picks one of the built-in fonts in Booth Designer; the kiosk device then loads the font from Google, which sees its IP address. Fonts a host uploads are served from our own server.

These providers operate in several countries, including the United States, so data may be transferred outside Singapore and the EEA/UK. Where the law requires it, these transfers rely on the providers' contractual safeguards (such as standard contractual clauses) and on protections comparable to the PDPA.

• Guest photos: 30 days from capture, then permanently deleted - unless the host extends them, in which case until the extended date. Hosts can delete photos or a whole event at any time. Copies already downloaded, printed or shared are outside our control; encrypted provider backups expire on the providers' own schedules.
• Host account data: while your account is open, then deleted within a reasonable time after you ask us to close it - except billing and acceptance records, which we keep as long as the law requires (typically up to 5 years in Singapore).
• Logs: for a limited period for security and troubleshooting.

We use encrypted connections, access controls, and reputable infrastructure providers, and limit access to personal data to people who need it. No system is perfectly secure. If a breach affects guest data, we will tell the responsible host without undue delay so they can meet their own notification duties. If it affects host account data, we will notify affected hosts and regulators as the law requires.

Depending on where you live, you may have the right to access your personal data, correct it, have it deleted, restrict or object to its use, receive a portable copy, and withdraw consent. Under the GDPR you may also complain to your data protection authority; in Singapore, to the Personal Data Protection Commission.

Hosts can use most of these rights directly in the app, or by contacting us. Guests should contact the host first (section 2); we will help the host respond. We may need to verify who you are before acting on a request.

Accounts are only for adults. Kiosks may be used at events children attend. The host is responsible for any notice to, and consent from, a parent or guardian. We don't knowingly collect information from children other than a photo captured at a host's kiosk, which is handled as guest data.

We may update this policy. For a material change we will ask hosts to review and accept it in the app. The date at the top shows the current version.

Questions, requests or complaints about personal data, including for our data protection officer, can be sent through our contact page.