MindPix

Privacy Policy

Last updated: 12 October 2026

Who we are

MindPix is operated by MobileUpp Yazılım ve Bilgi Teknolojileri A.Ş. (“MobileUpp”), Maslak Mah. AOS 55. Sk. No:4/546, Sarıyer / İstanbul, Türkiye, MERSİS 0622142499900001. MobileUpp is the data controller for the personal data described here. Contact: hello@mindpix.co.

What MindPix does

Organisers — a couple running their own wedding, an event planner or a photographer — create events and upload photos. MindPix detects faces in those photos and delivers to each guest the photos they appear in, within the events that guest has joined.

Data we process

  • Account: name, email address, password (stored by our authentication provider), profile photo if you add one.
  • Events: event details, membership and invitations.
  • Photos: photos uploaded by organisers and any photo you upload yourself.
  • Face data: to match photos, the app detects faces and derives facial geometry (biometric data) from event photos and from up to five reference photos you choose to provide. Face matching is optional; you can join an event without it.
  • Purchases: credit and subscription status (payments are handled by Apple and Google; we never see card details).
  • Device and usage: app version, device type, crash reports, notification token and in-app usage events.

Face data and consent

Face data is special-category (biometric) personal data under KVKK and the GDPR. We process it only with your explicit consent, given in the app before matching starts, and only to find your photos in events you have joined. Face detection runs on your device. You can withdraw consent at any time by leaving the event or deleting your account; matching stops and your face data is deleted.

Why we process it

  • To provide the service: accounts, events, photo delivery (contract).
  • Face matching (explicit consent).
  • Payments and credits (contract).
  • Security, crash diagnosis and improving the app (legitimate interest).
  • Notifications you have allowed (consent).

Service providers

Google Firebase (authentication, database, file storage, analytics, crash reports, notifications), Google ML Kit (on-device face detection), Sentry (error reports), RevenueCat (subscription status), Apple App Store and Google Play (payments). Some providers process data outside Türkiye; transfers rely on the safeguards required by KVKK and the GDPR.

How long we keep it

Account data: until you delete your account. Face data: until you leave the event, withdraw consent or delete your account. Photos: for as long as the organiser keeps the event, unless you ask us to remove a photo of you. Backups are overwritten within 30 days.

Your rights

You can ask for access to, correction, deletion or a copy of your data, object to processing, and withdraw consent, under KVKK Article 11 and the GDPR. Write to hello@mindpix.co. You can also complain to the Turkish Personal Data Protection Authority (KVKK) or your local data protection authority.

Children

MindPix is not intended for children under 13. Organisers must not upload photos of children without the consent of a parent or guardian.

This website

mindpix.co sets no cookies, runs no analytics or advertising scripts and loads nothing from other servers. The web server keeps standard access logs for security for a limited period.

Changes

We will post changes here and, for significant changes, tell you in the app.