Privacy Policy
Last updated: 13th Sep 2026
IDPHOTOS ("we", "us") operates the idphotos app. This policy explains what we collect, why, where it is kept, how long for, and how to have it removed. If anything here is unclear, ask us at contact@idphotos.studio and we will explain it.
The short version
- We measure your photograph to crop and adjust it to an official specification.
- We do not identify you. We never match your face against any other photograph or collection.
- Deleted after 30 days. Every photo is deleted after 30 days, whether you buy it or not.
- Stored in Australia. Some checks may be processed outside Australia, but nothing is retained there, used for training, or used to identify you.
What we collect
The photograph you provide: From your camera or photo library, at the moment you choose it. Nothing is uploaded before then.
Measurements taken from that photograph: Position of your chin, top of head, head angle, expression, eye state, background, and lighting to verify compliance against published document specifications.
An account identifier: If you sign in, a reference supplied by Apple or Google and an email address where provided.
A record of what you bought: When, what product, and for how much.
For a printed order: a shipping name, postal address and phone number. Collected by Stripe at checkout — no address or phone form was ever built, validated or stored by us — and kept so the order can be posted, and so somebody can be reached about it if a courier needs to.
How the app is used: Which screens you open, when a check starts, when a purchase completes, and when you look at the tracking for a printed order. These events go to Google Firebase Analytics, tagged with your account identifier and an identifier for this installation, so we can see which parts of the app work and which do not. Never your photograph, never your address, and never the carrier tracking number itself.
What we do with the photograph
We measure it, crop and straighten it to the required size and head height, and adjust exposure/colour balance. We do not edit the background — it has to already be plain white or light grey, and we ask for a retake rather than paint one in if it is not.
We never alter your face. No smoothing, no reshaping, no removing marks, freckles, scars or lines.
What we do not do with it
- We do not identify you or match your photo against any database.
- We do not create a face template. Measurements exist only for the single check.
- We do not train AI models on your photo.
- We do not sell your data or share it for advertising.
- Nobody reviews it by hand. There is no human checking tier.
How long we keep things
| Data | Retention Period |
|---|---|
| Any photograph, bought or not | 30 days (starts from upload, or resets upon purchase) |
| Your account | Until you delete it from Settings |
| Sales transaction record | Indefinitely as required by law (amount, product, date, and for a printed order the shipping name, address and phone number — never a photo) |
Where it is stored
Photographs and accounts are stored in Australia.
To check specific compliance requirements (such as glasses, head tilt, or hats), a resized, metadata-stripped copy of the photograph may be processed by Google Gemini models outside Australia. It is looked at, an answer is returned, and it is immediately discarded. It is never retained, trained on, or linked to your identity.
Who we share it with
We use these providers to run the service, and each receives only what it needs to do its part.
- Google — stores photographs and runs the compliance checks described above, and, through Firebase Analytics, receives the usage events described above.
- Supabase — stores accounts.
- Cloudflare — carries requests between the app and our servers.
- Stripe, Apple, Google — process payments. We never see or store your card details.
- Apple, Google — when you choose to sign in with them, they tell us an identifier for you. We tell them nothing about your photographs.
We do not sell your information to anybody, for any purpose.
Your choices and rights
You can delete any photograph or delete your account at any time directly inside the app settings. You can also request a copy of held data by contacting us at contact@idphotos.studio.
Contact
IDPHOTOS
contact@idphotos.studio
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.