Privacy Policy

Banyan Camera is operated by Entheos LLC, a limited liability company organized under the laws of the State of Indiana, USA ("we", "us"). Entheos LLC is the data controller for personal information processed through the Banyan Camera mobile app and website (the "Service"). This Privacy Policy explains what we collect, why, who we share it with, and your rights. By using the Service you agree to this policy.

Information we collect

• Account information: email address, display name, and password (stored hashed). Optional profile photo.
• User content: photos, videos, albums, captions, and library metadata you create or upload.
• Sharing data: library memberships, invite codes, and guest session identifiers.
• Device & diagnostic data: basic device info, IP address, app version, and error logs used to keep the Service running.

How we use your information

• Provide and operate the Service (storage, sync, sharing).
• Authenticate you and protect your account.
• Deliver media via our content delivery network.
• Diagnose problems and improve reliability and performance.
• Communicate service-related notices (e.g. password resets).

We do not sell your personal information, and we do not use your photos or videos to train AI models or for advertising.

Legal basis

Where applicable law (e.g. GDPR / UK GDPR) requires a legal basis, we rely on: performance of a contract (to provide the Service you signed up for), legitimate interests(security, fraud prevention, product improvement), consent (where required, e.g. optional cookies or marketing), and legal obligation (tax, accounting, responding to lawful requests).

How we share your data

We share personal data only with the categories of recipients below, and only as needed to operate the Service:

• Service providers / subprocessors — Supabase (authentication, database, file storage), Bunny.net (video processing and CDN), Cloudflare (application hosting and edge network).
• Merchant of Record — Paddle.com. Paddle handles payments, subscription management, tax compliance, invoicing, and related customer service for purchases. Paddle processes payment data as an independent controller under its own Privacy Notice.
• Professional advisers — legal, accounting, and compliance advisors where reasonably required.
• Authorities — where required by law, court order, or to protect rights, property, or safety.

International transfers

Entheos LLC is based in the United States, and our service providers operate globally. Where personal data is transferred out of the UK or EEA, we rely on appropriate safeguards such as the Standard Contractual Clauses or equivalent mechanisms.

Data retention

We retain your account and content for as long as your account is active. You can delete your account at any time from Profile → Danger zone → Delete account in the app. Deletion permanently removes your profile, any libraries you own, and all photos and videos in them — for you and every member. Backups are purged within 30 days.

Your rights

Depending on where you live (e.g. EEA, UK, California), you may have rights to access, correct, export, or delete your personal information. You can exercise most of these directly in the app, or contact us using the details below.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

Security

We use industry-standard measures including encryption in transit (HTTPS), encryption at rest, hashed passwords, and row-level access controls. No system is perfectly secure; please use a strong, unique password.

Changes to this policy

We may update this policy from time to time. Material changes will be announced in the app or by email. The "Last updated" date at the top reflects the latest revision.

Contact

Questions or requests? Email [email protected].