Privacy Policy

Emmarv is a small, invite-only app album by Odd Hours Labs (“we,” “us”) for a private group of friends to share one photo a day during a time-boxed Album. This policy explains what information we collect, why, and how it’s handled.

Information we collect

Account information: your name, email address, and profile picture, provided either by Google (if you sign in with Google) or by you (if you sign in via email magic link).
Content you post: photos you upload, the groups and Albums you join, your pairwise vote comparisons, and any co-author credits you give or receive.
Basic usage data: timestamps for when photos, votes, and Albums are created, used only to run the app’s core mechanics (one photo per day, weekly voting windows, Album start/end dates).

How we use it

Your information is used only to operate Emmarv: authenticating you, showing your photos to the members of your group, running weekly votes, and generating the Recap page when an Album ends. We do not sell your data, run ads, or share it with anyone outside the service providers below.

Service providers

We rely on a small number of infrastructure providers to run Emmarv:

Google: if you choose “Continue with Google,” Google handles authentication and shares your name, email, and profile picture with us.
Supabase: hosts our database and stores your uploaded photos in a private storage bucket, accessible only via short-lived signed links generated by our servers.
Resend: delivers magic-link sign-in emails if you choose email login instead of Google.
Vercel: hosts the application itself.

Who can see your content

Photos and votes are visible only to members of the same group during an active Album. When an Album ends, a Recap page is generated showing that Album’s photos and weekly winners. Recap pages are reachable by anyone with the unique link. The link acts as the access control, so don’t share it outside your group unless you’re comfortable with that.

Cookies

We use a single session cookie (via Auth.js/NextAuth) to keep you signed in. We don’t use advertising or third-party tracking cookies.

Data retention & deletion

We keep your account and content for as long as you use Emmarv. There is no self-serve account deletion yet. If you’d like your account and photos removed, email us at lukelee1188@gmail.com and we’ll take care of it.

Children’s privacy

Emmarv is not directed at, and should not be used by, anyone under 13 years old.

Changes to this policy

If this policy changes in a meaningful way, we’ll update the date above and, where practical, let the group know directly.

Contact

Questions about this policy or your data? Reach us at lukelee1188@gmail.com.