Privacy Policy

We collect the following personal data when you use TasVid:

• Account data: email address, phone number, name
• Photos: images you upload to events
• Profile picture: your public avatar shown to other members of events you're part of
• Face reference photo(s): one or more separate photos you provide only if you use the "Find Me" face-search feature — one for yourself, plus optionally one per named child profile you add — never shown to other users, used only to generate biometric data (see below)
• Biometric data: face feature vectors derived from your face reference photo(s) by AWS Rekognition, used solely to find matching photos across events
• Device token: for push notifications
• LinkedIn account link: if you choose to connect LinkedIn (optional), we store your LinkedIn member ID and an access token so an event admin can tag you in a LinkedIn post about a photo you appear in. You can disconnect this at any time from Settings.

• To provide the TasVid service — creating events, sharing and viewing photos
• To match your face across event photos when you explicitly trigger a face search
• To send notifications about your events and account
• We never sell your data to third parties
• We do not use your data for advertising

If you provide a face reference photo and use the "Find Me" feature, that photo is sent to AWS Rekognition (Mumbai region, India) to generate a face vector. This vector is stored in AWS and associated with your account. Your face reference photo is kept separate from your public profile picture — it is never shown to other users, in member lists, "Who's In This Photo" tags, or anywhere else.

Your consent is required before this feature is used, and you must declare whether the reference photo is of yourself or of a child you are the parent or legal guardian of — see "Parents & Guardians" below. You can withdraw consent at any time via Settings → Account → Revoke Face Recognition, or by deleting your account. Withdrawal deletes your face reference photo and face vector from AWS permanently.

Face data is processed in India (AWS ap-south-1 region) and is not transferred outside India.

TasVid is commonly used by schools and event organisers to share photos of children with their parents. If you use the "Find Me" feature to search for photos of your child rather than yourself, you add a separate, named face profile for that child (e.g. "Emma") — kept entirely apart from your own "self" reference photo. Adding a child's profile requires you to confirm, at the moment you provide their photo, that you are the parent or legal guardian of that child and are consenting on their behalf. This is a distinct consent from searching for your own photos, captured separately for each child profile you add.

• You can add more than one child profile (e.g. for multiple children), each with its own reference photo and its own guardian consent.
• The reference photo you provide for a child is used only to generate biometric data for that specific child's search — it is never displayed publicly, never shown to other event members, and never used for any purpose other than finding that child's photos.
• You can delete any single child's profile independently — this permanently removes that child's reference photo and biometric data without affecting your own "self" profile or any other child's profile.
• We do not knowingly collect or process children's personal data outside of this explicit, guardian-consented flow, and we do not use children's data for tracking, behavioural monitoring, or advertising of any kind.
• If you believe a child's data has been processed without appropriate guardian consent, contact our Grievance Officer below and we will investigate and, where appropriate, delete the data promptly.

• Photos are stored in AWS S3 (Mumbai) with private access controls
• Authentication is handled by Firebase (Google)
• All data in transit is encrypted via HTTPS/TLS
• Access to your photos requires a valid session token

Under India's Digital Personal Data Protection Act, you have the right to:

• Access: know what data we hold about you
• Correction: update your name, email, or phone in Settings
• Erasure: delete your account and all associated data (photos, face reference photo, biometric data, event history) via Settings → Delete Account. Deletion is permanent after a 7-day grace period.
• Withdraw consent: stop face recognition and delete your face reference photo via Settings → Account → Revoke Face Recognition at any time
• Grievance: contact our Grievance Officer at the email below for any data-related concern

• Photos are retained until the event is deleted by the event organiser
• If you delete your account, your events and all photos in them are permanently deleted
• Photos you uploaded to someone else's event remain in that event even if you delete your account — only the event organiser can delete those
• Your face reference photo and biometric data (face vectors) are deleted immediately when you revoke consent or delete your account
• Account data is permanently erased 7 days after account deletion is confirmed

• Firebase (Google): authentication and push notifications
• AWS S3 & Rekognition: photo storage and face matching (Mumbai region)
• LinkedIn: only if you choose to connect your account, to enable being tagged in an event admin's LinkedIn post

In accordance with the Digital Personal Data Protection Act 2023, you may contact our Grievance Officer for any data-related concerns or requests:

Designation: Director
Email: admin@renshia.com

We will respond to your grievance within 30 days of receipt.