Privacy

Private sharing, without a permanent photo library.

Last updated: August 26, 2026.

Who operates AasaanShare

AasaanShare is operated in New Zealand by Ashish Ansurkar. Ashish Ansurkar is the agency that collects and holds the personal information described in this statement. Our contact address for privacy enquiries is hello@aasaanshare.com.

What this statement covers

This statement applies to the AasaanShare website, account service, mobile application, private album viewer, waitlist, support, and related communications. It explains the information AasaanShare collects directly from you, information an album owner provides about an invited person, and technical information created while the service operates.

Information we process

Account and profile information. We process owner email addresses, display names, usernames, profile images, hashed sign-in and session credentials, device identifiers and labels, device platform, verification status, and account preferences.

People, invitations, and album activity. An owner may give us an invited person's display name and email address. We also process invitation, verification, device authorization, access, contribution, download-completion, revocation, album expiry, removal, recovery, notification, and credit-entitlement records. Invited people receive a notice explaining that the owner supplied their information when they verify an invitation.

Photos, videos, and media metadata. We process selected original files, generated display renditions, media identifiers, media type, dimensions, duration, file size, integrity hashes, and other information needed to store and deliver the files. Original files may contain embedded metadata supplied by the device or file, including capture time, device information, and location information where present.

Payments and credits. We process transaction identifiers, payment status, selected product, quantity, currency, account association, refunds, and Album Credit ledger records. Stripe processes payment details; AasaanShare does not receive or store complete card numbers.

Waitlist, support, and feedback. If you join the early-access list or contact us, we process the email address, platform choice, confirmation and unsubscribe status, message, and other information you choose to provide. Do not send private media, invitation links, passwords, verification codes, or device credentials through support or feedback channels.

Technical, security, and reliability information. We process push-notification tokens, delivery receipts, upload and download totals, timing buckets, rendition types, service errors, request identifiers, timestamps, source addresses, a salted one-way source-address hash, and limited audit events. We do not intentionally include photo or video content in reliability diagnostics.

Where information comes from

We receive information directly from owners, viewers, contributors, waitlist members, and people who contact us. We also receive invited-person information from the album owner, payment status from Stripe, email delivery status from Resend, push-delivery status from Expo, and technical information generated by devices, browsers, Cloudflare, and our security and reliability systems.

Why we use information

We use information to create and authenticate accounts, maintain profiles, register invited devices, authorize and revoke access, deliver sign-in and verification emails, send requested album notifications, prepare and deliver media, support contributions and downloads, apply album access periods and credits, process purchases, respond to support requests, investigate reliability, enforce our terms, and prevent fraud, security threats, and abuse.

Providing waitlist and optional profile information is voluntary. Account, device, verification, payment, and selected-media information is required when you use the corresponding feature. Without it, AasaanShare cannot provide that account, sharing, viewing, notification, or payment feature.

We do not sell personal information, use it for targeted advertising, or use private photos, videos, or associated personal information to train generative or general-purpose artificial intelligence models.

How album media is handled

When an owner or authorized contributor adds media, AasaanShare uploads the selected original photos and videos together with generated display renditions to private cloud object storage. Authorized viewers receive short-lived, signed media links delivered through a content delivery network. This lets an album remain available while the owner's phone is offline.

Shared media is used to provide the album and is not published as a public photo library. Viewers can access only albums for which their device has a current authorization. An owner can control viewing, download, and contribution permissions, but AasaanShare cannot erase a file that another person has already downloaded, copied, screen-recorded, or captured.

Push notifications

If you grant notification permission, we use an Expo push token to send transactional album messages, such as a new share, album changes, contributions, and warnings before access expires or stored media is removed. Notification messages may include the album title, contributor display name, or a name derived from the owner's email address. You can disable notifications in your device settings. Disabling notifications does not change album access or retention deadlines.

Cookies and information stored on your device

The website uses essential, secure cookies for owner sessions and authorized browser devices. These cookies are not used for cross-site tracking or targeted advertising. The mobile app uses operating-system secure storage for account sessions and invitation credentials and stores local album and media references needed to operate the app. Removing the app or clearing browser data may remove local credentials but does not by itself delete information held by AasaanShare.

Unshared draft names, recipient choices, and local media references remain on the owner's device. Draft media and sharing choices are sent to AasaanShare only when the owner confirms sharing and activation begins.

Service providers

We use Cloudflare Workers to run the application and media delivery service, Cloudflare D1 for account, authorization, and album metadata, Cloudflare R2 and Cloudflare's network for object storage, content delivery, DNS, web protection, and human-verification controls; Resend for transactional email; Stripe for website payment processing; and Expo's push service together with Apple Push Notification service or Google Firebase Cloud Messaging for mobile notifications.

The public website currently requests font files from Google Fonts. The optional feedback link opens a board hosted by UserJot. Those services may receive ordinary web-request information, such as an IP address, browser information, and timestamp. Information submitted directly to an external feedback board is also subject to that service's privacy terms.

Providers process information only for their respective functions. Depending on their infrastructure and service location, information may be processed or stored outside New Zealand. We select and use providers with privacy and security safeguards and remain responsible for personal information they hold on our behalf as required by New Zealand law.

Security

We use access controls, hashed or opaque credentials, short-lived signed media links, restricted service permissions, audit records, transport security, and provider security controls. No Internet transmission or storage system is completely secure, so we cannot promise that unauthorized access or loss will never occur. If a privacy breach creates a risk of serious harm, we will notify affected people and the New Zealand Privacy Commissioner when required by law.

Retention

Album access ends immediately when an album expires or the owner removes it. An album removed before its expiry can be restored by its owner until its original expiry. After an album expires, we retain its stored media for a 72-hour renewal grace period; after that period, scheduled cleanup permanently deletes the stored media. Deletion and content-delivery cache removal may take time or require an operational retry, and superseded media may remain until cleanup is completed. Removal cannot erase files a viewer has already downloaded, copied, or captured.

Session and verification credentials expire or are revoked according to their purpose. Push-delivery receipt records are normally short-lived, and invalid device tokens are disabled when reported by the notification provider. We keep account, profile, device, invitation, authorization, audit, support, and security records only as long as reasonably needed to operate and secure AasaanShare, resolve disputes, enforce our terms, and meet legal obligations.

We retain purchase, refund, and Album Credit ledger records as needed for accounting, fraud prevention, support, and legal obligations. An account-deletion request does not require us to erase records that must lawfully or reasonably be retained for those purposes. We will remove or de-identify other account information when it is no longer needed.

Your privacy rights and choices

You can ask whether we hold personal information about you and request access to or correction of that information. You can also request account closure or deletion of information that is no longer required, subject to records we need to retain. We may need to verify your identity before acting on a request. Contact hello@aasaanshare.com.

If you are unhappy with our response, you can complain to the Office of the New Zealand Privacy Commissioner.

People under 18

AasaanShare accounts and access are intended for people aged 18 or over. The service is not directed to children, although an album may lawfully contain family media depicting children. If you believe a person under 18 has provided account information to us, contact us so we can investigate.

Changes to this statement

We may update this statement when the service, providers, or legal requirements change. We will publish the revised statement with a new date and provide additional notice when a change materially affects how we use personal information.

Contact

For privacy questions, account deletion, or a security concern, contact hello@aasaanshare.com.