Privacy Policy

Kapture is a digital disposable camera for events. A host creates an event, guests join by scanning a code, and the photos they take land in one shared album.

This policy covers kptr.co.za and the Kapture app. If you have a question about anything here, email support@kptr.co.za and a person will answer.

A host has an account with us and decides how their event runs. A guest has no account at all. They scan a code, give a name, and take photos.

For an event's photos, the host is the one making the decisions: who is invited, whether the album is revealed, and what happens to it afterwards. We hold and process that content on the host's behalf and under their instructions. For a host's own account details, we make the decisions ourselves.

This matters if you are a guest and want photos removed: ask the host first, because it is their album. If you cannot reach them, email us and we will help.

From hosts:

• Your email address and a password, which is stored hashed, so we never see it. If you sign in with Google instead, we receive your name, email address and profile picture, and nothing else.
• Your name and profile picture, if you set them.
• Your events: names, dates, join codes, reveal settings and guest limits.
• A record of what you have paid for: the plan, the amount, the status and the event it was for. Card details go to our payment provider and never reach us.

From guests:

• The display name you enter when you join, so the host can tell whose photos are whose.
• Your email address, which you give when you join. It is how we tell you the album is live: on a delayed reveal it is the only way you would hear.
• A device identifier stored on your phone, so that closing the camera and coming back does not make you a stranger who has to start again.
• The photos, videos and voice notes you capture, along with when they were taken, which filter was used, and whether they were taken offline and uploaded later.

We do not use advertising trackers, we do not build profiles of you, and we do not sell anything to anyone.

Running the event: showing the album to the people entitled to see it, keeping to the guest and capture limits on the host's plan, and letting the host approve, reject and download.

Telling people things they asked to be told: every guest gets a message when the album is revealed. We only write to you about anything else if you ticked "Learn more about Kapture" when you joined, and you can stop those at any time.

Taking payment, and honouring refunds.

Keeping the service working and safe: diagnosing faults, preventing abuse, and the content screening described below.

Every photo is checked by an automated classifier for explicit content before anybody can see it. A photo that has not been checked yet is shown to nobody, including the host.

This is a machine making a judgement, and machines get it wrong in both directions. Nothing is deleted on the strength of it alone: a flagged photo waits for the host, who decides. There is no human at Kapture looking through your album.

We use a small number of specialist providers to run Kapture. Each receives only what it needs to do its job, and none of them may use it for anything else:

• Our database, file storage and sign-in provider, where photos, voice notes and account records are held.
• Our video hosting provider, for videos only.
• Our payment processor, which is the merchant of record and handles card details. We receive the outcome of a payment, never the card.
• Our email delivery provider, for reveal notifications, password resets and the like.
• Our web hosting provider, which serves the site and the app.
• Google, but only where a host chooses to sign in with Google, and only for that sign-in.

If you want the specific companies behind those roles, ask us at support@kptr.co.za and we will tell you. We would rather answer that than publish a list that goes stale the moment we change a supplier.

We will also disclose information if the law genuinely requires it. If that ever happens and we are permitted to tell you, we will.

Event media, meaning photos, videos and voice notes, is permanently deleted once the event's plan runs out of storage. On a paid plan that is twelve months from the day the event was created. On the free event it is four weeks.

The free event is a taste of the product, not a place to keep things. Four weeks is long enough to come back for the album and deliberately not long enough for anyone to mistake it for a backup. If you want your photographs to last, run the event on a paid plan or download them.

Either way the event and its records remain, but the files themselves are gone and cannot be recovered.

The demo event on our homepage is wiped every twenty-four hours. It is a shop window, not anybody's memories.

A host who deletes their account removes everything: their events, every photo, video and voice note behind them, their guest lists, unused plans and payment records. There is no grace period and no undo, which is why the form asks for a password and the address typed out in full.

Birthdays and weddings mean children are often in the photos. Kapture has no way to know that, and no way to judge whether the people in a photo agreed to be in it.

That responsibility sits with the host, who chose the guest list and shared the code. If you are a parent who wants a photo of your child removed, ask the host. If that does not work, write to us and we will help.

Kapture is not intended for use by children as hosts. Accounts are for adults.

Passwords are hashed and never visible to us. Hosts can turn on two-factor verification from account settings, and we would encourage it. Access to event data is enforced in the database itself rather than only in the app, so a photo belonging to somebody else's event cannot be read even by a request that goes around our interface.

No system is perfect. If we ever suffer a breach that puts your information at real risk, we will tell you and the relevant regulator, promptly and plainly.

When we change how Kapture handles information, this page changes with it and the date at the top moves. If a change materially affects hosts, we will email them rather than rely on you noticing.

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Hosts can do most of that from account settings without asking anyone.

How that works, what we will and will not claim about POPIA and the GDPR, and what to do if you are not satisfied, is set out on our POPIA and GDPR page.

Questions, requests and complaints all go to the same place: support@kptr.co.za.