Privacy Policy
The short version: GalaBooth is built to work on your device. We do not sell your data, and the app has no accounts, tracking or advertising. Photos taken in the booth stay on the device unless you share or deliver them yourself, or link the event to a GalaSnap album (see "Optional GalaSnap album link" below).
Photos and videos
Photos and GIFs captured in GalaBooth are processed and stored on your device. GalaBooth performs no cloud backup or synchronization. The only upload is the optional GalaSnap album link described below, and it is off unless the host links an event to an album. When a guest receives a photo through the QR (Quick Response) delivery feature, the transfer happens directly between the two devices over the local network — the photo does not travel through the internet or any external server. Saving to the photo library and sharing via the system share sheet happen only when you explicitly choose those actions.
Optional GalaSnap album link
GalaSnap is a guest photo album app from the same developer. In an event's settings, the host can link that event to a GalaSnap album by scanning the album's QR code or typing its event code. Nothing is sent for events that are not linked.
- What is sent: for a linked event, each finished booth photo (4-cut strip, 2×2 grid or single shot) is sent as a JPEG image with a small preview image and the label "Photo Booth". GIFs are never sent. GalaBooth does not send an account, a device identifier, location or face data with the photos.
- Where it goes: to the GalaSnap service, which stores album photos on Cloudflare. Photos taken while the iPad is offline wait on the device and are sent when it is back online.
- Who can see them: the host of that GalaSnap album, and anyone the host shares the album with. Guests who scan the album's table QR code can upload their own photos but cannot browse the album.
- Retention and deletion: photos in a GalaSnap album are kept and deleted as described in the GalaSnap privacy policy; the host can delete them in GalaSnap at any time. Unlinking an event in GalaBooth stops further sending; the copies on the iPad are not affected.
The booth shows guests a short notice when photos from that event are being added to the host's GalaSnap album.
Face data (character overlays)
GalaBooth's Halloween characters place a costume on each face in the live camera preview. Face tracking is off when the capture screen opens. It starts only after someone on the capture screen taps a character (or the "Turn on costume" button); a notice next to the characters explains this before anything starts. Choosing "None" (or "Turn off costume") turns it off again, and it switches off automatically when each guest's session ends.
While face tracking is on, GalaBooth uses Google MediaPipe Face Landmarker, a face-landmark model bundled inside the app, to find up to two faces. For each camera frame it calculates facial landmark points (the positions of features such as the eyes, nose, mouth and face outline) and the angle of the head.
- Use: only to place and move each costume on the right face in real time, to keep the same costume on the same person, and to draw the costume into the photo when it is taken. Faces are told apart only by where they are on the screen. Face data is never used to identify or recognize anyone, for authentication, or for advertising, marketing, analytics or profiling.
- Storage: face data is processed entirely on your device, in memory. It is never written to storage, never uploaded, and never sent to us, to Google or to any other third party. The model runs offline and needs no network connection.
- Sharing: face data is not shared with anyone.
- Retention and deletion: landmark values are replaced with every camera frame. The app remembers where a face was for up to about 3 seconds after it leaves the camera view, so the same costume goes back on the same person, and it clears all of this when the guest's session ends or the app is closed. Because face data is never stored, there is no face data to delete.
- Photos you take show people's faces; they are handled as described in "Photos and videos" above.
Device permissions
GalaBooth requests the camera permission solely to take booth photos, and the photo library permission solely to save finished photo strips and GIFs when you ask it to. Neither permission is used for any other purpose.
What we do not collect
GalaBooth has no user accounts, no analytics or tracking SDKs (Software Development Kits), no advertising, and no access to your contacts or location. We do not receive your name, email address, or any content you create in the app, except booth photos a host chooses to send to their own GalaSnap album as described above.
Purchases and subscriptions
GalaBooth Pro subscriptions and Event Passes are processed by Apple through the App Store, or by Google through Google Play on Android; we never see your payment details. To recognize an active subscription across app launches, the app uses RevenueCat, a subscription-management service. RevenueCat receives an anonymous app-generated identifier and App Store or Google Play purchase receipt information — not your name, email address, photos, or face data. See the RevenueCat privacy policy for details.
Data retention and deletion
All events and photos live on your device. You can delete any event — including all of its photos — inside the app, and deleting the app removes all app data stored on the device. Photos you exported to the photo library are managed by you in the Photos app. Photos sent to a GalaSnap album are managed in GalaSnap (see "Optional GalaSnap album link").
Who we are and your rights (EEA and UK)
GalaBooth is published by YS Labs, Yongin-si, Gyeonggi-do, Republic of Korea (contact@yslabs.dev). If you are in the European Economic Area or the UK, the GDPR (General Data Protection Regulation) applies as follows:
- Booth photos on the device: they are kept on the host's device and never reach us; the host who runs the booth decides how they are used and shared.
- Booth photos sent to a GalaSnap album: the host who links the event is the data controller, and GalaSnap (also operated by YS Labs) stores the photos as the host's processor, on the legal basis the host relies on. See the GalaSnap privacy policy.
- Purchase status: YS Labs is the controller for the anonymous identifier and purchase receipt information handled through RevenueCat, to provide the purchase you asked for (GDPR Art. 6(1)(b)). RevenueCat processes it on our behalf. It is kept while needed to restore and verify your purchases and deleted on request (include the order number from your App Store or Google Play receipt so we can find it). Apple and Google process your payment as independent controllers.
We are based in the Republic of Korea, which the European Commission and the UK Government recognize as providing an adequate level of data protection. RevenueCat may process data in other countries, including the United States; for such transfers we rely on the safeguards it offers, such as the EU-U.S. Data Privacy Framework or the EU Standard Contractual Clauses.
You can ask to access, correct, or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. For a photo of you, the quickest route is the event host, who can delete it in the app or in their GalaSnap album; you can also write to us and we will help or pass the request to the host. We reply within one month. You also have the right to complain to your local data protection authority.
Children's privacy
GalaBooth does not knowingly collect personal information from anyone, including children — other than booth photos a host chooses to send to their own GalaSnap album.
Changes to this policy
If we ever change how GalaBooth handles data, we will update this page and revise the effective date above before the change takes effect.
Contact
Questions about privacy or the app: contact@yslabs.dev