Rawback ("we", "us", "our") provides an AI-powered platform that helps photographers organize, tag, and share their photo libraries. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Rawback, you agree to the practices described here.
1. Information We Collect
We collect information you give us directly, information generated as you use the service, and information from a small number of third parties that help us run Rawback.
Account information
- Identifiers such as your email address, display name, and profile image.
- Authentication data when you sign in through Google or Adobe, limited to what those providers expose to us.
- Billing details processed by our payment provider when you subscribe to a paid tier. We do not store full card numbers on our servers.
Photo content you upload
- The original photo files you upload, including any embedded metadata (EXIF) such as camera, lens, capture time, and GPS coordinates when present.
- Derived data we generate to power features: thumbnails, perceptual hashes, AI-generated tags, scene descriptions, face detection data (see section 3, Face Recognition and Face Data), and similarity vectors.
Usage and device data
- Logs of requests to the service (timestamps, IP address, user agent, referrer) used for security, abuse prevention, and debugging.
- Aggregated product analytics (which features are used, error rates) used to improve the product.
- Cookies and similar storage used to keep you signed in and remember preferences such as language and theme.
2. How We Use Your Information
- To operate, secure, and improve the Rawback service.
- To run AI features you opt into, including automatic tagging, scene recognition, similarity search, and face grouping. Face grouping is described in detail in section 3, Face Recognition and Face Data.
- To process payments and manage your subscription, credits, and storage quotas.
- To communicate with you about your account, billing, security events, and material changes to the service.
- To comply with legal obligations and to enforce our Terms of Service.
We do not sell your personal information, and we do not use your uploaded photos to train foundation models that we publish to third parties.
3. Face Recognition and Face Data
Rawback includes an optional face recognition feature that groups photos of the same person so you can browse and search your library by the people in it. Face data is sensitive, so we describe how we handle it separately here.
What we collect
When face recognition is enabled, we automatically detect faces in the photos you upload. This produces:
- Face detections: the region of each detected face within a photo (a bounding box), together with attribute estimates such as approximate age or expression.
- Person matches: records linking a detected face to a person you have created, so that photos of the same person can be grouped together.
- Face crops: cropped images of a face, stored for the people you explicitly create in the People feature.
Why we use it
We use face data solely to organize your own library: grouping photos of the same person, and letting you search and filter your photos by the people in them. We do not use face data for advertising. We do not use it to identify people outside of your account. We do not use it to train models.
Who processes it
Face detection and face matching are performed by Tencent Cloud's face recognition service (Tencent Cloud IAI), acting as our data processor. We send it photo thumbnails so that it can carry out these operations on our instructions. It is not permitted to use them for its own purposes.
Where it is stored
Face detection and person-match records are stored in our database. Cropped face images are stored in our object storage. For each person you create, a face template is stored in a private face library at Tencent Cloud that belongs to your account alone.
Your control
You can turn face recognition off at any time in Settings, both on the web and in the iOS app. When it is off, new photos you upload are not sent for face detection or face recognition. Turning it off stops new processing; it does not delete face data that already exists. Use the deletion controls described below to remove that.
Deleting face data
- Deleting a photo removes the face detections and person-match records derived from it.
- Deleting a person removes that person's face templates from Tencent Cloud, the stored face crops, and their match records.
- Deleting your account removes your entire face library from Tencent Cloud, the face crops in our object storage, and the face records in our database.
Retention
We keep face data only for as long as the photo, person, or account it belongs to exists. We do not retain face data independently of them.
4. How We Share Information
We share information only in the following situations:
- Service providers: infrastructure, storage, CDN, email, payment, and analytics vendors that process data on our behalf under contractual confidentiality and security obligations.
- People you choose: photos and albums you explicitly share through public links, restricted shares, or collaboration features are delivered to the recipients you designate.
- Legal requirements: when required by law, subpoena, or to protect the rights, property, or safety of Rawback, our users, or the public.
- Business transfers: in connection with a merger, acquisition, or sale of assets, in which case we will provide notice before your information is transferred.
5. Data Storage and Security
Your data is stored on infrastructure operated by reputable cloud providers, with encryption in transit (TLS) and at rest where the underlying provider supports it. Access to production systems is limited to authorized personnel and protected by authentication and audit logging. No system is perfectly secure, so we cannot guarantee absolute security; if we become aware of a breach affecting your data, we will notify you in line with applicable law.
6. Data Retention
We retain your account data and uploaded content for as long as your account is active. When you delete content or close your account, we remove the associated data from production systems within a reasonable period and from backups within their normal rotation cycle. We may retain a limited subset of information longer when needed to comply with legal obligations, resolve disputes, or enforce agreements.
7. Your Rights
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, to object to or restrict certain processing, and to withdraw consent. You can exercise most of these rights from your account settings, or by contacting us at the address below. We will not discriminate against you for exercising these rights.
8. International Transfers
Rawback is operated globally and your data may be processed in countries other than the one where you live. Where required, we rely on appropriate safeguards such as standard contractual clauses for cross-border transfers.
9. Children
Rawback is not directed to children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.
10. Cookies
We use a small number of first-party cookies and equivalent local storage to keep you signed in, remember preferences, and protect against abuse. You can clear or block these through your browser, though doing so may break parts of the service that require authentication.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you through the product or by email. Your continued use of Rawback after the changes take effect constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or want to exercise your rights, please email us at [email protected].