40Tell legal
Privacy Policy
1. What we collect
We collect account information such as your email address and authentication identifier; profile information such as display name, username, avatar and country; and content you choose to upload, including photos, captions, comments and album memberships. We also collect relationships, reports and settings needed to operate safety and sharing features.
2. Device permissions
If you allow camera access, 40Tell uses the camera to take photos in the app. If you allow photo-library access, 40Tell uses it to save a photo when you choose Save to Photos. You can change these permissions in your device settings. We do not use a permission for a purpose unrelated to the feature that requested it.
3. How we use information
We use information to provide accounts, albums, feeds, search, comments, relationships, moderation and support; to protect users and enforce our rules; to troubleshoot and improve reliability; and to comply with legal obligations. We do not sell your personal information.
4. Who can see content
We show photos and profile information according to your album privacy, relationship and blocking settings. People you allow into a shared album may be able to view or contribute to it. Reports and moderation information is available to authorized moderators only.
5. Storage, retention and deletion
We keep account and profile information while your account is active. You can start account deletion in Settings or send a request through our account deletion page. We sign you out immediately and permanently delete the account and associated personal data after a 30-day recovery period. Signing in again during that period lets you cancel the pending deletion. Photos, albums, comments and other content associated with the account are removed through the deletion process. Reports, moderation decisions, consent records, security logs and backups may be retained for a reasonable period for safety, dispute handling, backups or legal obligations. Some records may remain when retention is required by law, needed to resolve disputes, or necessary to prevent abuse.
6. Third-party providers and sharing
We use a limited number of service providers to operate 40Tell. Firebase Authentication (provided by Google) processes your email address, authentication identifier and sign-in session information so you can create and access your account. If you choose Google Sign-In or Sign in with Apple, the selected provider shares the account information needed to create the Firebase identity; Apple may provide a private relay email address. Cloudflare R2 stores uploaded photos, avatars and generated image variants. Amazon Web Services processes background jobs through Amazon SQS and, when production moderation is enabled, sends photos to Amazon Rekognition to detect potentially unsafe content. Moderation copies are temporary and are deleted after processing unless a longer retention period is required for safety, audit or law.
These providers may process information on our behalf and must protect it consistently with this policy. We do not use third-party advertising, analytics or cross-app tracking in the MVP, and we do not sell personal information. We share content with other 40Tell users only according to the album privacy and relationship settings you choose. We do not share your photos with third-party AI or other providers for unrelated purposes.
By accepting this Privacy Policy and using features that require moderation, you acknowledge this limited provider processing. You can withdraw permission for device access in system settings and can request account deletion in Settings or through our account deletion page. Deletion is subject to the retention exceptions above.
7. Security
We use access controls, signed media URLs and least-privilege provider access to protect information. No online service can guarantee absolute security, so keep your account credentials private and report suspicious activity.
8. Your choices
You can manage album visibility, relationships, blocks, content and device permissions in the app. You may request access, correction or deletion of personal information subject to applicable law.
9. Updates and contact
We may update this policy when our processing changes. The current policy and deletion request flow are published on 40tell.com. Material changes will require renewed consent in the app. For privacy questions, email [email protected].