Legal
Privacy Policy
EFFECTIVE 18 JULY 2026
The short version
Clique is a shared disposable camera: a host creates a roll, guests shoot on it, and everyone sees the photos when the roll develops. To make that work we store your photos and a small amount of account data. We don’t run ads, we don’t sell your data, we don’t use third-party analytics or tracking, and we don’t use your photos for anything except showing them to the people on your roll.
Who we are
Clique is made by Story Goes AB, a Swedish company registered in Stockholm (org. nr 559396-8836). For everything this policy describes, Story Goes AB is the data controller under the GDPR. The fastest way to reach us is hello@getclique.app.
What we collect
Hosts create an account with Sign in with Apple. We store the name and email address you choose to share, a random account identifier, and an optional display name.
Guests don’t create accounts. Joining a roll creates an anonymous session tied to a random identifier, plus the name you enter for your host. We use Apple’s DeviceCheck to recognize a device that already joined a roll, so you can pick your session back up from the same phone without signing in.
Photos you shoot on a roll are uploaded to that roll, along with basic capture details (when the shot was taken and which look it used).
Purchases of larger roll sizes are processed entirely by Apple. We never see your payment details — we store Apple’s transaction receipt so we can credit the purchase to your roll.
Notifications — if you allow them, we store your device’s push token so we can tell you when your roll fills up or when the photos are ready.
Reports — if you report a photo, we store which photo it was, the reason you picked, and that your session filed it. The host of that roll sees the photo and the reason, never who reported it.
The launch waitlist — if you give us your email address on our website before Clique is out, we store that address and nothing else, so we can tell you once when the app is available. We delete the list after that email goes out, and you can ask us to take you off it sooner at any time.
That’s the full list, beyond the transient technical logs — like IP addresses — that any internet service generates. We collect no location data, no contacts, no browsing history, and no advertising identifiers.
Our legal bases
The GDPR requires a legal basis for each thing we do with your data. Ours are:
- Running the service — storing your account, photos, and rolls: performance of our contract with you (Art. 6(1)(b));
- Push notifications — your consent (Art. 6(1)(a)), given in the iOS permission prompt and withdrawable anytime in iOS Settings;
- The launch waitlist — your consent (Art. 6(1)(a)), given when you enter your email address, withdrawable anytime by emailing us;
- Keeping the service safe — abuse prevention and content moderation: our legitimate interest in a safe service (Art. 6(1)(f));
- Purchase records — bookkeeping and tax law: legal obligation (Art. 6(1)(c)).
Who can see your photos
Photos stay hidden until the roll develops — not even the host can see them early. Once developed, the album is visible to the host and the people who joined the roll. The host can additionally share an album link; anyone with that link can view the album if the host chooses that option. Hosts can remove any photo from the album, and guests can delete their own photos.
Where your data lives
Photos and app data are stored with Supabase on servers in Frankfurt, Germany (AWS eu-central-1). This website is hosted on Vercel. Apple provides sign-in, payments, and push delivery. These providers process data on our behalf; none of them are allowed to use it for their own purposes. Processing stays in the EEA wherever possible; where Apple’s services involve a transfer to the United States, it’s protected by the EU–US Data Privacy Framework or Standard Contractual Clauses.
How long we keep it
Your photos and rolls stay until you delete them. You can delete your account in the app (Profile → Privacy → Delete account). When you do, your account, identifiers, and any undeveloped rolls and photos are permanently deleted. Developed albums that were already shared with guests stay available to them, with your name and account scrubbed — the same way a printed photo stays with the person you gave it to.
One exception: records of purchases are kept as long as tax and accounting law requires, with your account identity removed when you delete your account.
The launch waitlist is deleted once the launch email has been sent.
Your rights
You can download a copy of your data in the app (Profile → Privacy → Download my data), delete your account as described above, or email us to ask about, correct, or delete anything we hold about you. If you’re in the EU or UK, these are your GDPR rights to access, rectification, erasure, and portability — we honor them for everyone, and you can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY, imy.se) or your own country’s data-protection authority. If you’re in California, the CCPA gives you similar rights to know, delete, and correct — and we don’t sell or share your personal information.
Security
Your photos and data travel encrypted, and every request is scoped by access rules to your own account and rolls — a guest on one roll can’t see another roll’s photos, and nobody sees a roll’s photos before it develops.
Children
Clique is not directed at children under 13 (or the equivalent age of digital consent where you live), and we don’t knowingly collect data from them.
Changes
If we change this policy, we’ll update this page and the date at the top. Meaningful changes will be called out in the app.
Contact
Questions, requests, or concerns: hello@getclique.app. We usually reply within a day.