OurPlace OurPlace
Features Blog FAQ Download Free

Privacy Policy

Last updated: 10 March 2026

1. Who We Are

OurPlace is a trade name of PixelParty Group LTD (Company No. SC854567), a company registered in Scotland, United Kingdom. We are the data controller for the personal data processed through the OurPlace app and website.

  • Email: privacy@ourplace.family
  • Support: support@ourplace.family
  • Website: https://ourplace.family

2. What Data We Collect

2.1 Account Data

When you create an account, we collect:

  • Email address — provided directly or via Google/Apple sign-in
  • Display name — provided directly or from your Google/Apple profile
  • Profile photo URL — from your Google/Apple profile, if available
  • Authentication method — whether you signed in via email, Google, or Apple

2.2 Photos & Media

When you upload photos to a space, we store:

  • Image files — the original photo plus server-generated resized versions (thumbnail at 165×165 and preview at 640×640, both in WebP format)
  • Captions — any text you add to a photo
  • Date taken — extracted from the photo's EXIF metadata (DateTimeOriginal, CreateDate, or DateTime) before upload, or the file's last-modified date as a fallback. We read EXIF data locally on your device solely to organise your photos chronologically. Raw EXIF data (GPS coordinates, camera model, etc.) is not stored on our servers.
  • People tags — names and bounding-box coordinates if you tag people in photos
  • Uploader identity — your user ID and display name, so space members can see who shared a photo

2.3 Subscription & Billing Data

If you subscribe to OurPlace Premium, we receive from Apple or Google:

  • Transaction receipt / purchase token — to verify your subscription is valid
  • Subscription status — active, cancelled, in grace period, or expired
  • Product identifier and billing cycle — which plan you chose (monthly or annual)
  • Expiry date — when your current billing period ends

We do not receive or store your payment card details, bank account information, or billing address. All payment processing is handled entirely by Apple (App Store) or Google (Google Play).

2.4 Device & Technical Data

  • Platform — whether you use iOS, Android, or the web app (stored with your analytics profile and push notification tokens)
  • Push notification tokens — a unique token issued by Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM) to deliver notifications to your device. Tokens are stored alongside the platform they belong to and when they were last registered.

We do not collect your device model, operating system version, IP address, advertising identifiers (IDFA/GAID), device serial numbers, or precise location.

2.5 Analytics Data

We use Firebase Analytics to understand how the app is used so we can improve it. This includes:

  • App events — such as sign-up, login, photo upload, space creation, space joined, upgrade sheet opened, and subscription purchases. Events include contextual parameters (e.g. upload count, authentication method) but no photo content.
  • User properties — platform, subscription tier, album count, and authentication method.
  • Automatic events — Firebase automatically records first_visit, session_start, and user_engagement events.

Firebase Analytics does not use advertising identifiers in OurPlace. We do not engage in cross-app tracking, and we do not request Apple's App Tracking Transparency (ATT) permission because we do not track you across other companies' apps or websites.

2.6 Crash Reports

On iOS and Android, we use Firebase Crashlytics to detect and fix app crashes. When a crash occurs, Crashlytics automatically collects a crash trace (stack trace and error message) along with your anonymised user ID. We do not collect device model, OS version, or any personal content from crash reports beyond the error itself.

2.7 Notification Preferences

We store your notification preferences (activity notifications and weekly reminders) as opt-in/opt-out flags, along with a timestamp of when you were last asked about permissions.

3. How We Use Your Data

Purpose Data used Legal basis (UK GDPR)
Authenticate your identity and maintain your account Email, display name, auth method Contract (Art. 6(1)(b))
Store and display your photos within your family spaces Photos, captions, date taken, people tags Contract (Art. 6(1)(b))
Send push notifications about activity in your spaces FCM tokens, notification preferences Consent (Art. 6(1)(a))
Manage your subscription and unlock premium features Subscription status, purchase token, billing cycle Contract (Art. 6(1)(b))
Improve the app and fix bugs Analytics events, crash reports Legitimate interest (Art. 6(1)(f))
Send weekly reminder notifications (if opted in) FCM tokens, last reminder timestamp Consent (Art. 6(1)(a))

4. Device Permissions

OurPlace requests the following device permissions. Each is optional and requested at the point of use:

Permission Why we need it When requested
Camera To let you take a photo directly from the app and share it to a space When you tap "Take a photo"
Photo Library (read) To let you select existing photos from your device to upload When you tap "Photo library"
Photo Library (write) To let you save shared photos from a space back to your device gallery When you download a photo
Notifications To alert you when someone shares a photo, comments, reacts, or requests to join your space During onboarding or in Settings

You can change any permission at any time in your device's system Settings. Denying a permission will only disable the related feature — the rest of the app continues to work normally.

5. Third-Party Services

We rely on the following third-party services to operate OurPlace. Each processes data only as necessary to provide its specific function:

Service Provider Purpose Data shared
Firebase Authentication Google LLC User sign-in and identity management Email, display name, auth tokens
Cloud Firestore Google LLC Database for account data, spaces, photo metadata, notifications All structured data described in Section 2
Firebase Storage Google LLC Hosting uploaded photos and resized image variants Photo files
Firebase Cloud Messaging (FCM) Google LLC Delivering push notifications to your device FCM tokens, notification payloads (space name, actor name, event type)
Firebase Analytics Google LLC Anonymous usage analytics to improve the app App events and user properties (see Section 2.5)
Firebase Crashlytics Google LLC Crash detection and debugging Crash traces, anonymised user ID
Firebase Resize Images Extension Google LLC Generating thumbnail and preview versions of uploaded photos Original photo files (processed server-side)
Google Sign-In Google LLC Optional OAuth authentication Google profile (email, name, photo URL)
Sign in with Apple Apple Inc. Optional OAuth authentication Apple ID profile (email, name — may be relayed/hidden per Apple's settings)
App Store / Google Play Billing Apple Inc. / Google LLC Processing subscription payments Purchase tokens and receipts (no card details reach us)

We do not use any advertising networks, data brokers, social media tracking pixels, or third-party analytics platforms beyond Firebase Analytics.

6. Data Sharing

We do not sell, rent, or trade your personal data or photos to any third party.

Your photos and content are only visible to members of the spaces you belong to. We share data with third parties only in the following circumstances:

  • Service providers — the third-party services listed in Section 5, which process data on our behalf under their own data processing agreements.
  • Legal obligations — if required by law, court order, or regulatory authority.
  • Safety — to protect the rights, safety, or property of our users or the public, where we reasonably believe disclosure is necessary.

7. International Data Transfers

OurPlace is operated from the United Kingdom. Our primary data infrastructure is provided by Google Firebase, which may process and store data in data centres located in the European Economic Area (EEA), the United States, and other regions where Google operates.

Where data is transferred outside the UK or EEA, it is protected by:

  • Google's Standard Contractual Clauses (SCCs) and Data Processing Addendum
  • Apple's compliance with SCCs for Sign in with Apple and App Store billing

For more information, see Firebase Privacy and Security documentation.

8. Data Retention

Data type Retention period
Account data (email, name, profile photo) Until you delete your account
Photos and captions Until you or the space owner deletes them, or you delete your account (which deletes all spaces you own)
Push notification tokens (FCM) Updated each session; removed on sign-out, account deletion, or after repeated delivery failures
Subscription data Until you delete your account
Analytics data (Firebase) 14 months (Firebase default), then automatically deleted
Crash reports (Crashlytics) 90 days (Firebase default)
Notification history Until you delete your account

9. Your Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data.
  • Erasure — ask us to delete your personal data. You can delete your account and all associated data directly from the app's Settings screen, or by visiting ourplace.family/delete-account.html.
  • Restriction — ask us to restrict how we process your data in certain circumstances.
  • Data portability — request your data in a structured, commonly used format.
  • Object — object to processing based on legitimate interest (e.g. analytics).
  • Withdraw consent — where processing is based on consent (e.g. notifications), you can withdraw at any time via the app's Settings or your device's system Settings.

To exercise any of these rights, contact us at privacy@ourplace.family. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:

  • Website: ico.org.uk
  • Phone: 0303 123 1113

10. Children's Privacy

OurPlace is a family app, but account creation requires you to be at least 16 years old (or the minimum age of digital consent in your country). We do not knowingly collect personal data from children under this age. If you believe a child under 16 has created an account, please contact us at privacy@ourplace.family and we will delete the account promptly.

Photos of children may be uploaded by adult family members to private spaces. These photos are only visible to invited space members and are not publicly accessible, indexed, or used for any purpose beyond displaying them within the space.

11. Cookies & Local Storage

OurPlace uses only essential cookies and local storage:

  • Authentication tokens — stored in IndexedDB (native app) or localStorage (web) to keep you signed in.
  • Upload queue — stored in localStorage so that interrupted uploads can resume if the app restarts.

We do not use tracking cookies, advertising cookies, or third-party cookies of any kind.

12. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you through the app or by email. The "Last updated" date at the top of this page will always reflect the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact

If you have questions or concerns about this policy or how we handle your data:

  • Privacy enquiries: privacy@ourplace.family
  • General support: support@ourplace.family
  • Post: PixelParty Group LTD, Scotland, United Kingdom
OurPlace OurPlace

Your family's private place for memories

Product

Features Blog OurPlace vs FamilyAlbum OurPlace vs Google Photos

Company

Privacy Policy Terms of Service Digital Services Act Delete Account Support Contact Us

Download

App Store Google Play

Follow Us

Instagram Facebook

OurPlace is a trade name of PixelParty Group LTD (Company No. SC854567), registered in Scotland.

© 2026 OurPlace. All rights reserved.