Privacy Policy
Last updated: October 19, 2026
Luna Shoots is an app in which a photographer keeps a record of each shoot and shares it by link with their crew and clients. This policy explains what personal data is processed, why, who can access it, and how to delete it.
1. Who is responsible for your data
The controller of personal data is the sole proprietor (FOP) Kozer Vitalii Vitaliiovych, taxpayer number 3530905692, Ukraine.
Contact for any question about your data: [email protected].
Data is processed under the Law of Ukraine "On Personal Data Protection". Because the data is stored on servers in the European Union and users may be located in the EU, you also have the rights given by the EU General Data Protection Regulation (GDPR) — see section 8.
2. Two different kinds of data
This is the most important thing to understand about Luna Shoots: the service holds data about you and data that you enter about other people. Different rules apply to each.
2.1. Data of a registered user
- email address — it is also your login;
- password — stored only as a cryptographic hash; we cannot see it;
- name and professional role;
- phone number — optional;
- Instagram and Telegram handles — optional;
- avatar: an uploaded photo or an emoji with a colour;
- interface language and currency — first chosen from your phone's language and region settings, then changeable by you;
- subscription status — see 2.6.
2.2. Data about other people that a user enters
When creating a shoot, a user enters details about crew members and clients: name, role, phone, email, Instagram or Telegram handle, notes about the person and an image attached to a note, as well as the person's reply about taking part and the reason for declining, if they gave one.
These people do not register in the app and may not know their data has been entered. For this data the user who entered it is the controller, and Luna Shoots acts as a processor on their behalf. The user is responsible for having a legal basis to enter other people's contacts and undertakes to inform those people on request.
If you received a link from a photographer and want to know about or delete your data, please contact the photographer first. We will help pass on your request if you write to [email protected].
2.3. Matching a contact to an account
If a crew member's email or phone number entered by a photographer matches exactly one registered account with a confirmed email, the service links them: the shoot appears in that person's own account. The photographer is not told whether a contact has an account. Matching happens inside the database, both when a crew member is added and when an account is created or its email or phone is changed.
2.4. Shoot contents
- date, start and end time, status;
- location name and address, a note about it, one image or video of the location;
- reference images and links;
- client's name and contact, separate notes for the client;
- prepayment amount;
- delivery deadline for the finished files and the date they were delivered;
- links to raw and finished photos, if the user added them.
2.5. Technical data
- access link tokens;
- notifications about crew members' replies;
- service logs of hosting providers — request addresses and times;
- a mark that you have been shown the subscription offer, so it is not shown again.
2.6. Subscription and purchases
Apple takes and processes subscription payments. We never receive your payment details — card number, billing address — and do not see your Apple ID.
To know whether you have access, we keep about your account:
- which plan you have, whether it is the free trial, and the date access lasts until;
- whether the subscription will renew automatically;
- the store it was bought through, and whether it is a test purchase;
- if we have given you free access for a set period — a record of that.
Purchases are verified by RevenueCat (section 6). It receives your Luna Shoots account identifier (without your name or email), the purchase details Apple passes on (product, dates, price, currency, store country), and the technical data it needs to work: operating system version, app version, language, IP address.
Two days before the free trial ends, your phone shows a reminder — scheduled on the device, like shoot reminders.
3. What we do not collect
- no analytics or visit counters;
- no advertising and no tracking across apps or websites;
- no tracking cookies — on the web the browser keeps only your sign-in session and, on a shared shoot page, the language you chose;
- no location data from your device: a shoot's location is text you type. While you type an address, that text is sent to Apple (Apple Maps) to suggest addresses and places;
- no access to your address book: when you pick a person from your phone's contacts, the app receives only that one contact's name and numbers;
- no access to your photo library beyond the files you pick yourself;
- no payment details — Apple processes payments (2.6);
- we do not sell data or share it with third parties for marketing.
Shoot reminders are scheduled by your phone itself as local notifications; their settings are stored only on that phone and are not sent to us. Your phone's region is read on the device to suggest a currency and an example phone number; the region itself is not stored. The Directions button opens the shoot's address in Google Maps — an ordinary link, after which Google's policy applies.
4. Links — the most important section
A shoot is shared by a link containing a unique code that cannot be guessed. Anyone who has the link can see the shoot without registering and without a password.
Links do not expire. They do not go stale on their own. Access ends only when the photographer removes the crew member or deletes the shoot — the link stops working immediately after that.
A crew member sees the notes about themselves; a client never receives notes about the crew. Do not publish links in public places.
5. Why we process data, and on what legal basis
| Purpose | Legal basis (GDPR art. 6(1)) |
|---|---|
| Creating and running your account, storing your shoots, showing them by link | Performance of the contract with you — (b) |
| Service emails: confirming registration, changing email, resetting a password | Performance of the contract — (b) |
| The subscription: verifying purchases, granting access, the reminder before the trial ends (2.6) | Performance of the contract — (b) |
| Data about crew members and clients entered by a photographer | Processed on the photographer's instructions; the legal basis is the photographer's (see 2.2) |
| Matching a crew contact to a registered account (2.3) | Legitimate interest — showing a registered person the shoots they take part in — (f) |
| Service logs, security, preventing abuse | Legitimate interest — keeping the service safe and working — (f) |
| Answering requests from authorities | Legal obligation — (c) |
6. Who we share data with
We use the following providers, and each processes only what its function needs:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, authentication, storage of uploaded files | EU (Frankfurt, Germany) |
| Cloudflare | Hosting web pages, DNS, email forwarding | Global network |
| Resend | Sending service emails — registration confirmation, email change, password reset | USA |
| RevenueCat | Verifying purchases and keeping subscription records (2.6) | USA |
| Apple | Distributing the app through the App Store and TestFlight; taking and processing subscription payments; address suggestions as you type (Apple Maps) | Under Apple's privacy policy |
Some of these providers are companies based in the USA or process data outside the EU. Such transfers are protected by the European Commission's standard contractual clauses or by the EU–US Data Privacy Framework, as set out in each provider's data processing agreement.
Data may also be disclosed to public authorities where the law requires it.
7. Security and retention
- all connections use HTTPS;
- passwords are stored only as a hash;
- access to database rows is restricted by the database itself: a user can read only their own records;
- uploaded files are kept in private storage and served through temporary signed links with a limited lifetime;
- on a device the session is kept in the system's secure storage (Keychain); in a browser, in local storage.
Retention
- account data is kept for as long as the account exists;
- deleting the account in the app ("Profile" → "Delete account") deletes shoots, clients, contacts, crew members, links, uploaded files and our subscription records;
- purchase records at Apple and RevenueCat are kept under their policies and financial record-keeping rules; to have your data deleted at RevenueCat, write to us;
- deleted shoots and removed crew members become unavailable by link immediately, but their records stay in the database until the account is deleted;
- backups are kept by the hosting provider for a limited time and are overwritten automatically.
8. Your rights
You have the right to:
- know what data about you is processed, and get a copy of it;
- correct inaccurate data;
- have data deleted — yourself in the app, or on request;
- restrict processing or object to it, including processing based on legitimate interest;
- receive your data in a portable format;
- withdraw consent, where processing is based on consent;
- lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights, or, if you are in the EU, with the data protection authority of your country.
Send requests to [email protected]. We reply within 30 days.
9. Age
The service is intended for people aged 16 and over. We do not knowingly collect data from younger children.
10. Changes
We may update this policy. The date at the top of the page is always current; we will notify you of material changes by email.