Legal
Privacy Policy
HM Camera™ · Effective September 2, 2026
What HM Camera is
HM Camera™ is an event photo app used by event operators to capture, brand, and deliver media to their guests. This policy covers the HM Camera app, the hmcamera.com marketing site, and the guest services hosted for galleries, queues, and scan links (including go.hmcamera.com when that hostname is live).
What we collect, and why
Guest name: shown on your private gallery, queue, and confirmation pages to label your photos, and visible to the event’s operator and crew inside the app so they can run the event, find your registration, and include you in that event’s guest list and reports.
Guest email address: used to send you your photos and your place in line. Your address is stored with your registration both on the operator’s device and in HM Camera’s event database, so that whichever device the operator is holding when your photo is ready can deliver it. It is passed to an email delivery service to make that delivery. It is also visible to the event’s operator and crew inside the app, so they can find or correct your registration, and it is included if they export that event’s guest list. Deleting a guest erases the stored address along with their photos. Addresses that permanently fail or opt out are kept on a do-not-send list so we never email them again. We never sell it or use it ourselves for marketing or advertising.
Photos: the media captured of you at the event, stored so your private gallery link works.
QR scan counts: when event QR codes on delivered photos are scanned we record the event, the capturing device, the guest’s copy, the time, and approximate country, then forward you on. The scanner is never identified. No precise location. No advertising use.
Launch-notice email (marketing site): if you ask to be told when the app is available, you email us from your own mail app. We use that address only to reply about availability.
Support chat messages: if you ask a question in the support chat, either the widget on this site or the Help screen inside the HM Camera app, your message and the conversation so far are sent to our Cloudflare Worker to generate a reply. When our AI assistant is enabled, that text is sent to Anthropic, which processes it only to generate the reply on our behalf and does not use it to train its models. Nothing else is sent: not your name, your email address, your account, or your photos. If the assistant is not enabled, your question is matched against a fixed list of FAQ answers and is not sent anywhere external. Chat messages are used only to answer your question and are never used for advertising.
What we don’t do
No advertising. No cross-app tracking. No selling or renting data. Gallery pages are unlisted, excluded from search engines, and reachable only by their unique code. The App Store privacy label for HM Camera answers Used for tracking: No.
Where data lives
Galleries, guest registration details, and media are hosted on Cloudflare infrastructure. Email delivery is performed by the event operator's email provider acting as a processor for delivery only.
Minors at events
Events sometimes include minors, whose name and email may be entered by a parent, guardian, or the event operator on their behalf. We do not knowingly collect this information directly from a child; it is entered by an adult running or attending the event. If you are a parent or guardian and want a minor's information removed, contact us and we will act on it right away.
How long we keep data
Guest details and photos are kept until the event operator deletes them, or until we act on a deletion request. There is no automatic expiration today. If you would like something removed sooner, contact us directly and we will handle it.
Deletion
Event operators can delete any guest at any time, which permanently removes the guest’s records and every stored photo. Guests may request deletion from their event operator, or contact us directly.
Event operators can also delete their own HM Camera account, from inside the app at Settings › Danger Zone › Delete Account. This is permanent and immediate: it erases the account profile and sign-in identity, every event on the account, every guest record in those events, and every photo stored for them. Crew devices tied to the account are signed out at the same time. There is no grace period and no way to undo it, which is why the app asks you to confirm before it runs.
Apple purchase records (the transaction identifiers, product, purchase date, and status HM Camera stores when an operator buys an email top-up pack) are handled differently. We keep these, separated from the rest of the deleted account, for as long as needed to meet tax and financial recordkeeping obligations. This is standard practice for a service that sells through Apple’s in-app purchase system, and it is why these records survive an otherwise complete account deletion.
If a deletion request does not fully complete, for example because of a temporary connection problem, the account stays active so it can be retried rather than reporting success before the data is actually gone.