Privacy Policy

Effective date: 23 June 2026 Last updated: 23 June 2026


1. Who we are

Latent ("Latent", "we", "us", "our") provides a digital shared-camera service that lets an event host create a private photo "film," invite guests by QR code or link, and reveal everyone's photos together at a chosen time (the "Service").

The entity responsible for your information is:

  • Service operator: Latent
  • Contact address: 47 East Market St, Richmond NSW 2753, Australia
  • Contact for privacy matters: hello@latent.app

2. Important: how roles work (hosts and guests)

The Service involves two kinds of users, and responsibility for personal information is shared:

  • Hosts create an account and set up a film. For the photos and guest information within a host's film, the host is primarily responsible for deciding why and how that information is collected, and is responsible for informing their guests and obtaining any consent required by law. For these event contents, Latent generally acts on the host's behalf (as a processor / service provider). Hosts agree to this allocation in our Terms of Service.
  • Guests join a film without creating an account and take photos. Guests should understand that their photos and chosen display name become part of the host's film.
  • For information Latent decides the purposes of itself (e.g. host account data, payments, security, and improving the Service), Latent is the controller.

Depending on the circumstances and jurisdiction, Latent and a host may be considered joint controllers or controller and processor. Where required, a separate data processing agreement applies between Latent and hosts.

3. What information we collect

3.1 Information hosts provide

  • Account details: name, email address, and a securely hashed password (or third-party sign-in identifier).
  • Film settings: film name, cover image, event type, shot limits, guest limits, timing, and chosen filter.
  • Payment information: processed by our payment provider (Stripe). We do not collect or store full card numbers; we receive limited confirmation and transaction data (see §6).
  • Any messages you send us.

3.2 Information guests provide

  • A display name you choose when joining a film (you are not required to use your real name).
  • The photographs you capture through the Service. These photos may contain images of you and other identifiable people, and may reveal details such as location, surroundings, and the time of capture.
  • An optional email address, only if you choose to be notified when the film is revealed.

3.3 Information collected automatically

  • A device token: a random identifier stored in your browser so the Service can recognise your device within a film and apply shot limits. It does not contain your name or personal details.
  • Technical and usage data: IP address, approximate location derived from IP, browser type, device type, operating system, referring pages, and interactions with the Service.
  • Cookies and similar local-storage technologies (see §10).

3.4 Camera access

The Service asks your browser for permission to use your device camera solely so you can take photos within the Service at the moment you choose. We do not access your camera in the background and do not access your existing photo library unless you explicitly choose to upload from it (if that feature is offered).

3.5 A note on photographs of people

Photographs that show a person's face may, in some jurisdictions, be treated as sensitive or "special category" information. Latent does not perform facial recognition, facial matching, or create biometric templates or faceprints from your photos. We process photos only to store them within the relevant film and reveal them to that film's participants as designed.

4. How we use information, and our legal bases

We use information to provide the Service (create films, join, capture, store, reveal, download); process payments and prevent fraud; send reveal notifications you opted into; secure the Service and prevent abuse; maintain, debug, and improve the Service; and comply with law and respond to lawful requests.

Where we rely on consent, you may withdraw it at any time (see §9). Where we rely on legitimate interests, you may object (see §9).

5. Content moderation and abuse prevention

Because films can be joined via a shared link, we (and hosts) may review, flag, hide, or remove photos that are reported or detected as unlawful or abusive, and may suspend access to the Service. We may retain limited records of such actions to protect the Service and comply with law.

6. When we share information

We do not sell your personal information. We share it only:

  • With service providers who help us run the Service, under contract and only as needed, including: payment processing (Stripe), cloud hosting and photo storage, email delivery, error logging, and analytics.
  • With the host and other participants of the same film, which is the core function of the Service (your photos and display name are revealed to that film's participants at reveal time).
  • For legal reasons: to comply with law, enforce our Terms, or protect the rights, safety, and property of Latent, our users, or the public.
  • In a business transfer: if Latent is involved in a merger, acquisition, financing, or sale of assets, information may be transferred, subject to this Policy.

7. International data transfers

The Service is available globally and our service providers may process information in countries other than yours. These countries may have different data-protection laws. Where required, we use appropriate safeguards for cross-border transfers, such as Standard Contractual Clauses or equivalent mechanisms.

8. How long we keep information

  • Event photos and film content: retained for 12 months after a film is revealed, after which they are deleted from active systems.
  • Host account data: retained while your account is active and for a reasonable period afterward, then deleted or anonymised, unless we must keep it longer to meet legal, tax, accounting, or dispute-resolution obligations.
  • Payment records: retained as required by financial and tax law (often several years).
  • Guest emails (for notifications): deleted after the film's notification purpose is complete, unless you have a separate account.

You can request earlier deletion (see §9).

9. Your rights and choices

Depending on where you live, you may have some or all of these rights: to access your information; to correct it; to delete it; to object to or restrict processing; to data portability; and to withdraw consent.

  • How to exercise: contact us at hello@latent.app. We may need to verify your request.
  • Guests: because guests are anonymous, to action a request we may need details that let us locate your data, such as the film link/QR you used, your display name, and approximate time.
  • Hosts can also manage and delete film content directly in the Service.

You also have the right to complain to a data-protection regulator, including the Office of the Australian Information Commissioner (OAIC), your local EU Supervisory Authority, the UK Information Commissioner's Office (ICO), or your local regulator.

10. Cookies and local storage

We use cookies and browser local storage to operate the Service (for example, the device token that enforces shot limits and keeps you signed into a film), to remember preferences, to keep the Service secure, and to understand usage. You can control cookies through your browser, but disabling strictly-necessary ones may break the Service.

11. Children's privacy

The Service is not directed at children under 16, who must not create an account. Event photos may nonetheless include images of children attending an event; hosts are responsible for any consent required from parents or guardians of minors who appear in their film.

12. United States — additional disclosures

If you are a US resident, you may have rights under state laws such as the CCPA/CPRA. We do not sell or "share" personal information for cross-context behavioural advertising as those terms are defined by such laws. To exercise your rights, contact us at hello@latent.app.

13. Security

We take reasonable technical and organisational measures designed to protect personal information, including private storage of photos, access controls, time-limited access links, and encryption in transit. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Third-party services

The Service relies on third parties (such as Stripe for payments). Their handling of your information is governed by their own privacy policies, which we encourage you to review.

15. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where required, provide additional notice.

16. Contact us

Questions, requests, or complaints about privacy:

  • Email: hello@latent.app
  • Post: Latent, 47 East Market St, Richmond NSW 2753, Australia