Privacy Policy

1. Introduction

This Privacy Policy describes how BorstPhoto, LLC (“we,” “us,” or “our”) collects, uses, and protects your information when you use the Proof mobile application (the “App”) and when you build a Proof Network profile on our website, proofdelivery.app. Sections 2 to 9 describe the App; section 10 describes Proof Network profiles. By using the App or a Proof Network profile, you consent to the practices described in this policy.

2. Information We Collect

We collect the following categories of information:

• Account information: Your name, email address, and phone number, collected during account creation via Google or Apple Sign-In.
• Contacts (photographer mode only): If you choose to import clients from your device’s address book, the App accesses your contacts so you can select which entries to add. Only the contacts you explicitly select are saved; we do not upload or store your entire address book.
• Authentication data: OAuth tokens from Google or Apple used to verify your identity. We do not store your Google or Apple password.
• Booking and scheduling data: Shoot dates, times, locations, pricing, and deposit information related to photography bookings.
• Payment information: Invoice amounts, payment status, and transaction references processed through Stripe or PayPal. We do not store full credit card numbers.
• Push notification tokens: Device tokens used to deliver booking confirmations, payment alerts, and other notifications you have opted into.
• Photo metadata: File names, thumbnail references, and collection organization data. Photos themselves are stored in the photographer’s Dropbox or Google Drive account, not on our servers.
• Device information: Device type and operating system version, collected automatically for compatibility purposes.

3. How We Use Your Information

We use the information we collect to:

• Authenticate your identity and manage your account
• Deliver photo collections and manage shoot bookings
• Process and track payments and invoices
• Send push notifications for booking updates, payment reminders, and delivery alerts
• Sync data between the photographer and client devices via our cloud bridge
• Maintain and improve the App’s functionality

4. Data Storage and Security

The App uses a local-first architecture. Your App data is stored primarily on your device using an on-device SQLite database. A cloud bridge (powered by Supabase) syncs data between the photographer and client devices. All data transmitted to and from the cloud bridge is encrypted in transit using TLS and encrypted at rest.

Photos are stored in the photographer’s personal Dropbox or Google Drive account and are accessed through secure, authenticated connections. We do not host photos on our own servers.

Photographers connect either a Dropbox account or a Google Drive account as the source for the photographs they deliver. Clients may additionally save a delivered collection to their own Dropbox or their own Google Drive. Proof reads and writes only the files needed for these actions; on Google Drive this is limited to the drive.file scope, which grants access solely to files created or opened through Proof. Proof does not host your photographs.

In the App, authentication tokens and sensitive credentials are stored in your device’s secure storage (Keychain on iOS, Keystore on Android).

Proof Network profiles are stored on our website, not on your device or in the cloud bridge; see section 10.

5. Third-Party Services

The App integrates with the following third-party services, each governed by their own privacy policies:

• Google Sign-In / Apple Sign-In: For authentication. We receive only your name, email, and a unique identifier.
• Dropbox: For photo storage and delivery in the App. Access is limited to folders the photographer has explicitly selected. Proof Network profiles use a folder of their own; see section 10. See Dropbox’s privacy policy.
• Google Drive: For photo storage and delivery, as an alternative to Dropbox. Access is limited to files created or opened through the App. See Google’s privacy policy.
• Stripe / PayPal: For payment processing. Payment credentials are handled entirely by these providers.
• Supabase: For secure data synchronization between devices. Data is encrypted in transit and at rest.
• Expo Push Notifications: For delivering push notifications to your device.

6. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Your data is shared only in the following circumstances:

• With the third-party services listed above, solely to provide App functionality
• Between the photographer and client within the App, as required for photo delivery, booking management, and payment processing
• When required by law, regulation, or legal process

7. Your Rights and Choices

You have the following rights regarding your data:

• Access: You can view your account information within the App’s Settings screen.
• Deletion: You can delete your App account and all associated App data at any time from the App’s Settings screen. This permanently removes your data from both the device and the cloud bridge. It does not remove a Proof Network profile, which you delete on our website (see section 10).
• Notifications: You can manage push notification preferences through your device’s system settings. Opting out of notifications does not affect your access to the App.
• Withdraw consent: You may stop using the App at any time. Deleting the App from your device removes all locally stored data.

8. Children’s Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

9. Data Retention

We retain your App data for as long as your account is active. If you delete your account, all associated App data is permanently removed from the cloud bridge within 30 days. Local data is removed immediately upon account deletion or app uninstallation. Proof Network profile data is kept until you delete your Network profile, and is removed as soon as you do (see section 10).

10. Proof Network profiles

You build a Proof Network profile on our website, proofdelivery.app, not in the App. This section covers what the website holds for it.

What your profile stores. The website stores:

• your email address, when you first signed in and when you last signed in, when you confirmed you are 18 or older, and which versions of our Terms of Service and this Privacy Policy you agreed to;
• your profile: display name, handle, bio, whether you are a photographer, a model or both, city, state, how far you will travel, Instagram and website, and when your profile was created and last changed;
• your choices: whether your portfolio is safe for work, whether your profile is public, which photo you chose for link previews and whether you confirmed it is safe for work, and whether camera details are shown;
• if you are a photographer: your specialties, years of experience, whether you are open to trade shoots and to paid work, and your rate range;
• if you are a model: your categories, whether you are open to trade shoots and to paid work, and your agency;
• for each photo on your profile: its file name, where it is in your Dropbox, its place in your order, and when you added it. Never the photo itself, a thumbnail of it, or a link to it;
• for the Dropbox account you connect: the account’s ID and email address, so we can show which account is connected; an encrypted key that lets the website read your photos; whether it is still connected; and when you connected it;
• for each sign-in session: a one-way fingerprint of your sign-in cookie (never the cookie itself), and when the session started, was last used and ends;
• while you sign in or connect Dropbox: a one-time code that works for 10 minutes and is deleted when it is used.

To read your photos, the website also holds a short-lived access key from Dropbox in its memory until that key expires. It is never stored. Records that have stopped working, such as an ended session or an unused one-time code, are cleared the next time anyone signs in.

Who can see your profile. Your profile is private until you turn on “Public profile”. Then anyone can see your profile at proofdelivery.app/your-handle, and search engines may list it. If you say your portfolio is safe for work, anyone can see your photos too. If you say it is not safe for work, only members who are signed in and have confirmed they are 18 or over can see them. You must answer that question truthfully. Search engines are asked not to index your photos. If you choose a link preview photo, anyone your profile link is shared with can see that photo. Turning “Public profile” off makes your profile private again.

Dropbox. When you connect Dropbox, Dropbox creates a folder named Apps/Proof Network in your Dropbox. Of your files, Proof can see only the ones you put in that folder, and can only read them: it cannot change, delete or share anything in your Dropbox.

Your photos are never copied. When your profile is viewed, each photo is fetched from your own Dropbox at that moment. It passes through our website’s server on its way to the browser, and the server does not store it, on disk or in our database.

Camera details. Photos on profiles and in link previews are sent without the information cameras and editing apps keep inside the file, such as location, serial numbers, names and dates. The photo’s colour profile, which keeps its colours looking right, is kept, and it carries a profile name, a maker and a creation date. If you leave “Show camera details” on (it is on unless you turn it off), people who open one of your photos see the camera, lens, focal length, f-stop, shutter speed and ISO saved in that photo’s file. The website reads them from the file in your Dropbox when the photo is opened and does not store them.

Signing in. You sign in with Google, or with your email and password: the same account you use in the App. From signing in, the website keeps only your account’s ID and your email address. It never keeps your password or any sign-in token.

One cookie. The website sets one cookie, __Host-proof_portal, to keep you signed in. It lasts 30 days from when you sign in, and ends sooner if you don’t use the website for 7 days. Signing out ends it.

Deleting your profile. Once you have completed the welcome step after your first sign-in, you can delete your Network profile at any time on the Edit profile page. Deleting it asks Dropbox to cancel the website’s keys, then removes everything listed under “What your profile stores”. None of that is kept.

Deleting your Network profile does not remove:

• your Proof account, including one that was created when you first signed in on this website. You can delete your Proof account from the App’s Settings screen (see section 7, “Your Rights and Choices”).
• anything you sent through a Proof Network or Founding sign-up form. That is stored separately, and is also passed to the system we use to follow up with sign-ups. To have it removed, email us at [email protected].

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be effective upon posting to this page with an updated “Last updated” date. Your continued use of the App after any changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at: