Privacy Policy

Fondays ("Fondays", "we", "us") helps you collect, organize, and print photos from weddings, parties, trips, and other events shared with the people who were there. This policy explains what information the Fondays app collects, how we use it, and the choices you have, for everyone who creates an account, joins an event pool, or orders a printed product.

Fondays is operated by Ondravan Private Limited (CIN U62011TN2026PTC195416), 19/35 Mount Road, Little Mount, Saidapet, Chennai 600 015, Tamil Nadu, India. We are the data fiduciary responsible for the information described here.

We collect the information needed to run shared photo pools and fulfil physical orders:

• Account details: when you sign in with Google or with Apple, we receive your name, email address, and profile photo from that provider, and store an identifier linking your Fondays account to it. Fondays never sees or stores a password.
• Photos & media: images and videos you upload to an event pool, along with the caption and dimensions we need to display them. Fondays does not ask for or record your device's location.
• Event & pool data: pool names, dates, guest lists, roles (host/member), and invites you send or accept.
• Messages & reactions: messages you send in a pool's chat, notes you leave on a photo, replies, emoji reactions and likes, and how far you've read so we can show what's new.
• Blocks & reports: the people you block, and any report you file about a photo or a message.
• Order & shipping details: items ordered (prints, photobooks, framed pieces), the shipping address and contact phone number you provide for delivery, and order status, when you buy a physical product.
• Purchase records: which subscription or event pass you hold and when it expires. Payments are processed by Apple, Google, or our payment gateway; Fondays never receives or stores your card details.
• Country: used to show the right prices and currency. We take it from your app store account where available, otherwise from your device settings or the approximate region of your connection.
• Device & usage data: app version, device type, a push notification token if you allow notifications, and server logs of requests to our API that help us fix bugs and prevent abuse.
• IP addresses: the IP address and device type you signed up from, and the IP address of requests to our service, including when you open a pool. We use them to keep the service secure, stop abuse, and meet the logging rules in the law. How long we keep them is under Data retention.
• How you found us: if you installed Fondays from an ad on the App Store, Apple tells us which ad campaign and search keyword it was, and we keep that with your account to learn which ads bring people who use Fondays. Apple provides this without tracking you across other apps or websites, and we don't share it with anyone.

Photos you add to a pool are visible to the other members of that pool, as set by the host's pool settings. Your photos remain yours. We don't sell them, license them, or use them to advertise Fondays.

"Photos of me" works from tags, not from your face. When you upload a photo you're recorded as a subject of it, and people in a pool can be tagged in photos. Fondays does not use facial recognition and does not collect or process biometric data.

You can remove your own uploads, leave a pool, or ask a host to remove a pool at any time from within the app. Leaving a pool does not remove the photos you added to it, so delete them first if you want them gone.

Every pool has a chat. Messages, notes on photos, reactions and likes are visible only to the people who have joined that pool. Nothing in a pool's chat is public.

You can delete your own message for everyone, and the pool's host can delete any message in their pool. When a message is deleted for everyone, its text is erased from our database straight away and the chat shows only that a message was deleted.

You can block anyone. Their messages, notes and reactions stop being shown to you in every pool, and you stop getting notifications about them. They are not told. You can undo a block from Me > Blocked people in the app. You can also report a message by holding it, or a photo from its menu.

While you have a pool open, other members can see that you're there ("here now"), and while you type they see that you're typing. Neither is stored in our database: presence clears about a minute after you leave, and typing is never saved.

Chat notifications say who wrote and in which pool, never what they wrote.

We use the information above to:

• Operate event pools: uploading, organizing, and displaying photos to the right members.
• Fulfil orders: printing and shipping photobooks, prints, and framed pieces to the address you provide.
• Run pool chat: deliver messages, notes and reactions to the members of a pool, and show what's unread.
• Send essential notifications: pool invites, chat activity, order updates, and account security alerts.
• Keep pools safe: act on reports, apply the blocks you set, and remove content or accounts that break our terms.
• Improve Fondays: understand which features are used, and diagnose crashes.
• Prevent abuse: detect spam, fraud, or violations of our terms.

We do not sell your photos or personal information to advertisers.

We share information only where it's needed to run the service:

• Other pool members: see the photos you add, the messages, notes, reactions and likes you leave in that pool, your name and your username. They never see your email address or your phone number. A host can turn the invite link off and remove a member at any time.
• Print & fulfilment partners: receive the specific images, shipping address, and contact phone number needed to produce and deliver your order, and nothing else.
• Apple and Google: process subscription and event pass purchases made in the app, and confirm to us what you bought. Apple also tells us which App Store ad, if any, led to your install.
• Razorpay: processes payments for physical orders. They handle your card or UPI details directly; we receive only a confirmation.
• Zoho Books: issues the GST tax invoice for a physical order, so it receives the buyer's name, address, email, phone and what was bought.
• Shiprocket and its courier partners: book and carry a physical order, so they receive the delivery name, address and phone number.
• Vultr: hosts our servers and database in India.
• Cloudflare: stores and serves your photos from object storage on our behalf.
• Google Firebase: delivers push notifications to your device.
• Google Block Store (Android): keeps a copy of the app's encryption key for your account, so reinstalling Fondays can reopen encrypted pools. It is backed up to your Google account only when that backup is end-to-end encrypted, so Google cannot read it.
• Resend: sends our emails (receipts, shipping updates, and warnings before a pool's photos are deleted), so it receives your email address and the contents of that email.
• Sentry: receives technical crash and error reports so we can fix faults. Reports are scrubbed of personal details before they leave your device or our servers, and are stored in the European Union.
• Legal requests: if required to comply with law or to protect the rights and safety of our users.

Photos in a pool. How long we keep them depends on the plan the pool's host is on. On a paid plan we keep them for as long as the plan is active. On the free plan we keep them for a limited period after the pool is created. The current window is shown in the app and on our pricing page.

Nothing is deleted without warning. When a free pool's window is close to ending we email the host. When it ends, the full-size originals stop being served and the pool is locked: the photos are still there, everyone can still see them, and nothing has been deleted. A grace period then follows, during which we email the host again. Throughout the lock and the grace period, anyone can still save the photos they took, and upgrading the pool restores every original, including ones that had already locked.

Only when the grace period ends without an upgrade are the files deleted. That deletion cannot be undone. Removal from our storage is immediate; copies held in our content delivery network's caches fall out within 24 hours, so a link someone already had may keep working for a short time after that point.

Messages. A pool's chat is kept for as long as the pool exists, including after the pool closes, when it becomes read-only. Deleting a pool deletes its chat. A message deleted for everyone has its text erased immediately. Deleting your account removes your messages, notes, reactions, likes and blocks. When someone reports a message, the report keeps a copy of that message and who wrote it, so it can still be reviewed if the message is later deleted; we keep reports for as long as we need them to handle the report and meet our legal obligations.

Account data. We keep it for as long as your account is active. If you delete your account in the app, we remove your personal data and uploaded photos immediately. If you ask by email instead, we do it within 30 days of verifying the request. Copies in our encrypted backups expire within a further 30 days. The exceptions are a copy still needed to complete an order already placed, and records we must keep for longer by law. Indian tax rules, for instance, require us to keep records of completed purchases, and the IT Rules require us to keep a closed account's name, email address, sign-in identifier and the IP address it was opened from for 180 days, which we then erase automatically.

Removed content and logs. When we remove a photo or message for breaking our terms, the law requires us to keep it for 180 days, where nobody else can see it, in case of an investigation. Our server logs (which record requests to our service, with the IP address and device type) and our record of who opened which pool and when (also with the IP address and device type) are kept for one year, which covers what Indian cyber-security and data protection rules require, and are then deleted. The IP address and device type you signed up from are kept for one year after sign-up, then erased from your account.

Our Account deletion page sets out exactly what is erased, what is kept, and how to make the request.

Our servers and database are hosted in India. Photos are stored on Cloudflare's object storage and served through its global network, which means copies may be cached in other countries to load quickly wherever you are. Some of the providers listed above work outside India: Resend and Google in the United States, and Sentry in the European Union. Our processors are bound by contract to protect your data and use it only for the services they provide us.

Ondravan Private Limited is the controller of your personal data. We rely on these legal bases:

• Contract: to run your account and your pools, deliver chat, and make and ship what you order.
• Legitimate interests: to keep the service secure, prevent abuse and fraud, act on reports, and fix crashes. You can object to this at any time.
• Legal obligation: to keep tax records of purchases and to answer lawful requests.
• Consent: for anything optional, such as push notifications. You can withdraw it at any time in your device settings.

We are based in India and you share your data with us there: our servers and database are in India, and the providers above handle it in the countries named in the section before this one.

You have the right to access, correct, delete, restrict or port your data, and to object to how we use it. Write to privacy@fondays.com. You can also complain to the data protection authority where you live.

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to withdraw consent you've given. You can manage most of this directly in the app under Me, or by contacting us below. You can also turn off notifications at any time from your device settings.

To delete your account and photos, see Account deletion.

If you're in India and aren't satisfied with how we've handled a request, you can raise a grievance with our Grievance Officer, Vijayakumar Sakthivel (Director, Ondravan Private Limited), at privacy@fondays.com. We acknowledge grievances within 24 hours and resolve them within 7 days.

Everything you send us travels encrypted in transit, over TLS, between your device, our servers and our storage. Your photos and files are also encrypted at rest, with AES-256, in the object storage that holds them.

Your account record (your name, email, orders and delivery addresses) lives in our database on a private server that is not reachable from the internet: no public port, access by key only, and a short list of named people. Particularly sensitive values in it, such as two-factor secrets, are individually encrypted on top of that. Our database backups are encrypted before they leave the server.

Access to our production systems is limited to the small number of people who need it to run the service. Our admin tools require two-factor authentication, and access to your data is logged. Our staff have no tool for browsing the photos or chats in your pools: they only see a photo or a message when someone reports it, and that view is logged too.

No system is perfectly secure, and we continually review our practices as Fondays grows. If you find a vulnerability, write to support@fondays.com.

Fondays is for people aged 18 and over, and we don't knowingly collect personal information from anyone younger. If you believe an account belongs to someone under 18, or a child has been added to a pool, contact us and we'll remove it.

We'll update this page when our practices change, and update the "Last updated" date above. If a change is material, we'll tell you by email or in the app before it takes effect.

Questions about this policy or your data? Email us at privacy@fondays.com, or write to Ondravan Private Limited, 19/35 Mount Road, Little Mount, Saidapet, Chennai 600 015, Tamil Nadu, India.