Privacy policy

Effective: Friday 23 October 2026

My Good Side (mygoodside.app) is run by Margarita Margarita Pty Ltd, ABN 67 612 908 442, Queensland, Australia. In this policy, "we" and "us" means that company.

Privacy contact: hello@mygoodside.app

My Good Side is a shared photo album for get-togethers. A host names the occasion and shares a link or QR code. Guests add their name and their photos, videos and notes, and everything lands in one stream. This policy explains what we collect, why, where it's kept, and what you can ask us to do.

This policy is free to read here. If you need it in another form, email hello@mygoodside.app. We follow the Australian Privacy Principles.

1. What we collect

• The occasion name (for example, "Sam turns 40"), typed in by the host.
• Your name, shown under what you add. A nickname is fine. If you don't give a name, you can't add to an album.
• Photos, videos and notes you add, and when you added them. These can show other people, including children.
• Photo and video details. Your phone re-saves photos before upload, which removes hidden details such as location. Videos may keep their original details, including location, unless your phone shrinks them first. If you don't want to share location, turn off location for your camera before filming.
• A one-way fingerprint of a key kept in your browser, stored with what you add so the album knows what's yours. Your browser makes the key and keeps it. It's sent to us only when you remove something, so we can check it's yours; we store only its one-way fingerprint. The host key works the same way.
• Usage analytics through Google Analytics 4: pages viewed, and events such as album created, photo added, video added, "Find my good side" run, download, and the paywall being shown or used. Album names and album links aren't sent to Google. Google's code uses its own cookies or similar browser storage.
• Technical data, such as IP address and browser type, seen by our hosting providers (Netlify and Supabase) and by Google when your browser loads the site. Google says it uses your IP address to estimate your general location and then discards it.
• Payment records, if you pay to open an album (see section 5).

Kept in your browser: your name for each album (also stored with what you add), your private key and the host key (for hosts), both sent to us only when you remove something, your "Find my good side" picks, a list of up to 12 recent albums, and, while you're paying, the album you're paying for, until the payment goes through. Clearing your browser data removes them.

We don't ask for an account or a password.

2. Why we collect it, and who sees it

We use your information only to:

• run the album and show what's added, under the name given, in the order it happened
• let the host manage the album, including "Start over"
• open an album once someone has paid
• keep the service secure and stop misuse, for example limits on uploads
• understand how the app is used so we can improve it.

"Find my good side" checks sharpness and brightness on your own device. It doesn't use facial recognition.

Everyone who has the album link can see the album. Apart from the people in your album, we share information only with the providers in section 4, or where the law requires it. We don't sell your personal information, and we don't build advertising profiles.

3. Who can see your album

• An album is reached through an unlisted link or QR code. It isn't private: anyone you share it with, or who it's forwarded to, can see the album and add to it. Treat the link like a key.
• Each photo or video is stored at a long web address that includes a random part. Anyone with that address can open the file, and everyone in the album can see these addresses. Files aren't end-to-end encrypted.
• Guests can remove only what they added, and only from the same browser they used to add it. Items added before 14 October 2026 can only be removed by the host. The host can remove anything in the album, or wipe it. For anything else, ask the host or us (section 7).
• Please only upload photos of people who are happy for you to share them.

4. Where it's stored and who helps us

• Supabase: album records and photo and video files, stored in Australia (Sydney).
• Netlify: hosts the website.
• Google (Google Analytics 4): usage analytics.
• Stripe: takes payments (see section 5).

Netlify, Google and Stripe may store or process some personal information outside Australia, including in the United States and other countries where they operate.

5. Payments

• Albums are free up to a limit. Anyone in the album can pay A$29, one-off, including GST, to open the whole album for everyone. Our refund policy is at mygoodside.app/refunds.
• Payment happens on Stripe's checkout page. Stripe is a separate business. It handles your card details and the email address you give for your receipt under its own privacy policy (stripe.com/au/privacy), and sends your receipt. We never see or store your card number.
• When a payment goes through, we store: the album code, Stripe's IDs for the checkout session and the payment event, the amount, the currency and the time. We use this to open the album, keep a record of the payment, and make sure each payment is handled only once. We don't store your name or email.
• If an album is paid for more than once, we'll automatically refund the duplicate payment. Refunds go to the person who paid, back to the original payment method. We keep a record of any refund or payment problem (album code, Stripe's IDs, amount, currency, reason and time).
• Your receipt and payment details are kept by Stripe. We may look them up in our Stripe account to help with a refund or a question about a payment.

6. How long we keep it, and deleting

• We keep albums until the host wipes them or asks us to delete them. Items stay until the person who added them, or the host, removes them. If we ever add an automatic expiry, we'll update this policy first.
• When something is removed or wiped, we delete the record straight away and remove the file from storage, usually within minutes. If removing the file fails, we try again. Some files from items removed before 14 October 2026 may still be stored until a one-off clean-up is finished.
• Web caches may still serve a removed file for a short time.
• We can't delete copies people have already saved, such as downloads, zips, screenshots or copies in someone's browser.
• We don't run automatic backups of the album database. If we take a manual copy for safety, we keep it securely and delete it once it's no longer needed.
• Payment records are kept as long as we need them for tax and accounting.
• Google Analytics data is kept for the limited period set in our Google Analytics settings.

7. Access, correction and removal

• You can ask to see, correct or delete the personal information we hold about you, including photos of you that someone else uploaded. Email hello@mygoodside.app with the album link, which item it is (its position in the stream, or the time it was added), and what you'd like done.
• We'll respond within 30 days.
• We may need to check you're the right person, for example the host or the person in the photo, before acting.
• You can remove what you added at any time from the same browser you used to add it. Items added before 14 October 2026 can only be removed by the host. Hosts can remove anything in their album, or wipe it, at any time.
• Analytics: you can block or clear cookies in your browser, or use Google's opt-out browser add-on (tools.google.com/dlpage/gaoptout).

8. Children

You must be 18 or over to create an album or pay. Photos of get-togethers, such as kids' parties, may include children. Only upload photos of children if you're their parent or carer, or have their parent's or carer's permission. Parents and carers can ask us to remove a photo of their child (see section 7).

9. Security

We use access rules on our database and storage so people can only change what they're allowed to, limits on file size, type and upload rate, and security settings on the website. No system is completely secure. If you think an album has been misused, contact us straight away at hello@mygoodside.app.

10. Complaints

Please contact us first at hello@mygoodside.app. We'll look into it and reply within 30 days. If you're not happy with our response, you can contact the Office of the Australian Information Commissioner (OAIC): phone 1300 363 992, or visit oaic.gov.au, which has an online complaint form.

11. Changes to this policy

We'll update this page if anything changes, and change the "Effective" date.