FotoPal Sports privacy policy

Who we are, and who decides

FotoPal Sports is run by JR Photo and Video Pty Ltd (ABN 15 677 761 787), an Australian company ("FotoPal", "we").

Your sports photographer (the studio) photographs your club, holds the team roster and sells you the photos. The studio decides what player and photo information it collects and how long it keeps it; it is responsible for that information. FotoPal runs the FotoPal Sports apps and gallery websites and handles that information on the studio's behalf and under its instructions.

For your own account (your sign-in, your device and your use of the apps) FotoPal is responsible.

What we collect

• Contact details: your name, email address and, if your club or studio has it, your mobile number. These come from the club or studio roster, or from you when you sign in or register.
• Your players: the names, teams, jersey numbers and positions the studio holds for the players you are the parent or guardian of, and a date of birth only when you have consented to it.
• Photos of your players: the studio's picture day photos, and any photos you upload yourself with Shoot Your Own.
• Orders: what you bought, prices, any name printed on a product, and the order and payment status. Card details are entered into Stripe's payment form and never reach FotoPal.
• Account and device identifiers: your account ID and, if you turn on notifications, a push notification token for your phone.
• Messages and reports: problems you report about an order or a photo, and the notes you add.
• Studio staff (Studio app): name, email, the studio roles you hold, the devices you use, and security events such as sign-ins and screenshots in sensitive screens.

What we don't do

• No advertising, no ad tracking and no selling of personal information.
• No analytics or tracking SDKs in the apps. We don't track you across other apps or websites.
• No face recognition. The on-phone checks in Shoot Your Own only look at brightness, sharpness and framing.
• We don't use your location. (A studio that takes card payments at events with a card reader uses Stripe's software, which needs the phone's location while a payment is taken.)
• Photos you upload are only visible to you, the player's other guardians and the studio. They are never shown to the club or other families.

How we use it

• To sign you in (we email you a one-time code) and link you to your players.
• To show you your players' galleries and let you order prints, products and downloads.
• To take payment (Stripe) and pass your order to the studio and its print lab.
• To send emails and notifications you asked for, such as "your photos are ready" and order updates.
• To keep the service safe: moderating uploaded photos, investigating reports, and preventing misuse.

Shoot Your Own

If your studio offers Shoot Your Own, you can upload a photo of your player that you took yourself. Before you upload you confirm you are the player's parent or legal guardian and agree to the terms of use.

Each upload is first checked by an automated safety screen (Microsoft Azure AI Content Safety, run in Australia). The background is then removed by our cut-out service, which runs on servers in the United States (Modal). If the studio has turned on the optional Pal AI colour suggestion, a copy of the cut-out is sent to Google Gemini (outside Australia) for a colour and lighting suggestion; you are told before you upload when this applies.

A person at the studio checks every photo before it can be printed or ordered. Photos you don't keep are deleted within 24 hours.

Who we share it with

• Your studio, and the print lab it uses to make your order.
• Stripe (payments). The studio is the seller; Stripe processes your card for it.
• Service providers who run parts of the service for us: Supabase (database and sign-in, Sydney), Cloudflare (websites and photo storage, R2 in Australia), Resend (email), Expo (push notifications), Microsoft Azure (safety screen, Australia), Modal (background removal, United States), and Google Gemini only when a studio turns on Pal AI.
• Some of these providers are outside Australia (mainly the United States). We use them under contracts that require them to protect the information and only use it to provide their service.
• Authorities, only when the law requires it.

How long we keep it

• Galleries are open for about 60 days after picture day by default (your studio may choose a different period). After that, photos are archived for about 2 years so you can ask for them again, then deleted.
• Shoot Your Own photos you don't keep are deleted within 24 hours.
• Order and payment records are kept for at least 5 years because tax law requires it.
• Security and audit records are kept for as long as needed to protect the service.

Deleting your account

In the FotoPal Sports app: Settings → Delete my account. On the web: https://photos.fotopalsports.com/account/delete. Studio staff: More → Delete my login in the Studio app.

When you delete your account we remove your sign-in, your contact details, your notification tokens and your links to your players, and delete Shoot Your Own photos that haven't been ordered.

Orders are kept for tax purposes with your name, email and address removed.

Your players' roster details and the studio's photos belong to the studio's records. Deleting your account sends the studio a request to delete them, which the studio must deal with within 30 days.

Access, correction and complaints

You can ask to see or correct the information we hold about you by emailing support@fotopal.ai. For roster details (a player's name or team) your studio can also correct them.

If you have a privacy complaint, email us first. If you're not satisfied with our answer, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Children

The apps are for adults: parents, guardians and studio staff. Children don't have accounts. Information and photos about players, who are often children, are provided by their parent or guardian, the club or the studio, and are handled with extra care: private galleries, guardian consent for uploads and dates of birth, and human checks on uploaded photos.

Contact

JR Photo and Video Pty Ltd, FotoPal Sports. Email support@fotopal.ai.

We will update this policy when the service changes and show the new date at the top.