What we keep, and why

Rheveal is a camera and a gallery for an event. Most of what we hold is photos you chose to take. Here's the rest of it, in plain language.

Who "we" are

Rheveal is made by Mhilo LLC — confirm legal name and address. Questions about anything on this page: hello@rheveal.app.

If you're a guest

• The photos you take. Stored in a private bucket; the gallery serves them through short-lived links. Each carries the time it was taken and its size. Nothing else is read off your camera — no location, no device fingerprint.
• A first name, if you gave one. It's optional, and it's shown to the host next to your frames so they know whose they are.
• An email or phone number, if you left one. Only ever to send you the gallery when it's released, and only because you asked. It isn't shared with the host, and it's never used for anything else.
• A random token in your browser. It's how your phone remembers which camera is yours. It isn't tied to an account, because you don't have one.

If you're a host

• Your email address, to sign you in — we send a magic link rather than keeping a password.
• Your events: names, dates, roll sizes, and everything guests shoot on them.

What we don't do

• No analytics scripts, no advertising trackers, no third-party cookies — on this site or in the camera.
• We don't sell or share personal information. The companies below process it on our behalf, and that's the whole list.
• We don't run recognition or any kind of analysis on faces.

Who else touches it

• Supabase — the database and the private photo storage.
• Vercel — hosts the camera, the gallery and the host dashboard.
• Resend — sends the release email. Replies come to us.
• Hostinger — hosts this page.

Who can see what

• The host sees every photo taken on their event, and the first name on each if one was given.
• Once released, the gallery is public to anyone with the link. That's how a shared roll works. The host can hide any photo from it, before or after release.
• Your own shots are visible to you on your phone, in "My shots", as they develop.

Taking it back

• Pull a photo you took. From "My shots", any time before release. It leaves the gallery; the exposure stays spent — that's the camera, not a loophole.
• Remove your email or phone. "Remove my info" in the camera, or the one-tap link in the release email. It's deleted, not just unsubscribed.
• Ask the host to hide a photo of you. They can do it in a tap. If you can't reach them, write to us with the gallery link.
• Hosts can delete an event. That removes every photo on it, permanently, from storage first. There's no undo, and the confirmation says so.

How long we keep it

Photos and event details stay until the host deletes the event. Confirm: do we want a default expiry (e.g. galleries removed N months after release)? None exists today.

Children

Rheveal is built for hosts who are adults. Confirm the age line — 13 / 16 / 18 — for your jurisdiction.

Changes

If this page changes in a way that matters, the datestamp at the top moves and we'll say what changed here.