Privacy Policy

Last updated: October 31, 2026

Camera6 is run by Codecarpet, s.r.o. (details at the end). This policy covers the website camera6.com, the Camera6 apps for iPhone and Android, and the team service behind them.

1. The free app (no account)

If you use the app without signing in, photos go from your phone straight to a folder in your own Google Drive or Dropbox. They never pass through Camera6's servers, and we have no copy.

  • The date, time and location stamp is drawn on the photo on your phone.
  • The sign-in to Google or Dropbox and its access token stay on your phone. We never receive them.
  • Photos wait in the app's private storage until they are uploaded, and are deleted from the phone once they are.
  • If you disconnect, photos that were not yet uploaded are deleted from the phone.

2. Information we collect for teams

  • Your name and email address, and your password as a one-way hash we cannot reverse. With Google sign-in we receive your name, email and Google account id.
  • The teams you belong to and your role in each.
  • Photos you or your team take, with the time, the location if your team turned it on, and the job or reference typed before shooting.
  • For team admins who connect Google Drive, Dropbox or OneDrive: an access token for that service, encrypted at rest, and the folders you choose as destinations.
  • Billing details are handled by Stripe. We keep the customer and subscription ids, never your card number.
  • Technical logs and error reports needed to keep the service running.

3. Camera and location on your phone

  • The apps use the camera only while the camera screen is open.
  • Location is read only when you take a photo, and only if you allow it. In team mode it is used only if your team turned the location stamp on.
  • The apps do not save photos to your photo library, and do not read it.
  • The apps contain no advertising and no tracking SDKs.

4. Where team photos are kept

  • With Google Drive, Dropbox or OneDrive as the destination, a photo stays on our servers only until it has been sent there, then it is deleted from our servers.
  • With Camera6 storage as the destination, photos stay on our servers until your team deletes them, or until your team's retention period ends if it set one.
  • When a team is deleted, its photos and storage are deleted with it.

5. Google user data

When a team admin or a free-app user connects Google Drive, Camera6 asks for the drive.file scope. It lets Camera6 see and change only the files and folders Camera6 itself created or that you chose in Camera6, not the rest of your Drive. We use it only to create destination folders and upload your photos.

Camera6's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, do not use it to train AI models, and do not let people read it except to fix a problem you report, for security, or where the law requires.

6. Who processes data for us

We do not sell, rent or trade personal information. We share it only with the services that run Camera6 for us, and only what each needs:

  • Our hosting providers, which run the servers and store photos.
  • Stripe, for payments.
  • MailPace, to send emails such as invitations and password resets.
  • Honeybadger, for error reports.
  • Fathom Analytics, for visitor counts on the website. It uses no cookies and no personal data.
  • Google, Dropbox and Microsoft, when your team connects them, to deliver photos.

We may also disclose information when the law requires it.

7. Security

All connections use HTTPS. Provider tokens are encrypted at rest. The apps store their sign-in in the phone's secure storage. No system is perfectly secure, and we will tell affected users promptly if a breach affects their data.

8. Your rights

Under the GDPR you can access, correct, export or delete your personal data, object to its processing, and complain to a supervisory authority; in Slovakia that is the Office for Personal Data Protection. Admins can delete photos and disconnect services at any time. To delete your account, use camera6.com/delete-account, or email us from its address and we will do it within 30 days.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Codecarpet, s.r.o.

Velka Okruzna 1309/17

010 01 Zilina

Slovakia

VAT ID: SK2023719742

[email protected]