Privacy Policy
Last updated: September 2026
This policy explains what personal data Yaadein collects, why we process it, and the rights you have over it under the Digital Personal Data Protection (DPDP) Act, 2023. Because Yaadein decides how and why your data is processed, we are a Data Fiduciary under the Act.
1. The data we collect
We collect your name and contact information (email, and phone number if you provide it) when you create an account or an event, and the photographs and videos you upload to a wedding event through our QR codes or web links. We store the couple names and wedding date you enter for each event. If you ask us to find your photos at a wedding that offers it, we also collect a selfie, as section 3 explains.
2. Purpose of processing
We process your name and uploaded media solely to collect, curate, store, and share digital wedding albums with the event organiser and the couple. We do not use your personal wedding photos for our own marketing without your separate, explicit permission.
3. Faces and photo matching
Some weddings include photo matching, which finds each guest's photos for them. On those weddings only:
We detect the faces in photos uploaded to the album and store a faceprint for each one: a set of numbers that describes a face, not a picture of it. A face in a photo is linked to a person only when that person has asked us to find their photos.
If you use Find my photos, you give us your name, an email address or phone number, and a selfie. We use the selfie once to make your faceprint and do not keep the photo itself. We keep your faceprint so that photos of you are found as they are added, and we give you a link to them. From the selfie we also keep a small picture of your face, which the organiser and the couple see beside your name, and we delete it with your faceprint.
If you are the couple, Photos of you in your album finds the photos of you. It starts from a photo of one of you: a selfie you take in the album, or a photo of you that your photographer adds so you do not have to. We use that photo once to make your faceprints. We do not keep your selfie. From your photographer's photo we keep only a small picture of your face, so they can see whose face they set, and we delete it with your faceprint. We keep the faceprints for that album, shared by the two of you, so photos of you added later are found when you open the album. Only the two of you see which photos it found. If your photographer set it up, the album tells you so, and your photographer can see how many photos it found but not which ones. Either of you can remove the faceprints at any time from Photos of you in the album. Whichever was added last, your own selfie or your photographer's photo, is the one used. A faceprint is deleted when the album is erased, when the person who set it up deletes their account, or when the person it is of deletes theirs.
The organiser and the couple can see which photos each matched guest is in, and the organiser can see the name and contact details that guest gave. Other guests cannot browse or search for people by face. Anyone who has your link can see your photos, so share it only with people you choose. The organiser and the couple can also share a guest's photos by link.
Matching is done by Yaadein's own software. We do not send your selfie, or any face, to an outside face-recognition service. Face data is used only inside that wedding's album, and faces from one wedding are never matched against another.
Face data is deleted with the photos it came from, and with the album when it is erased (section 5). You can withdraw at any time, using the unsubscribe link in the album emails we send you or by writing to privacy@theyaadein.com. We then delete your faceprint, stop matching you, remove the contact details you gave from your photos, and take you off the people the organiser and the couple can filter by. Your own personal link keeps working with the photos already found. The unsubscribe link also stops album emails. The photos you appear in stay in the couple's album.
We detect the faces in photos uploaded to the album and store a faceprint for each one: a set of numbers that describes a face, not a picture of it. A face in a photo is linked to a person only when that person has asked us to find their photos.
If you use Find my photos, you give us your name, an email address or phone number, and a selfie. We use the selfie once to make your faceprint and do not keep the photo itself. We keep your faceprint so that photos of you are found as they are added, and we give you a link to them. From the selfie we also keep a small picture of your face, which the organiser and the couple see beside your name, and we delete it with your faceprint.
If you are the couple, Photos of you in your album finds the photos of you. It starts from a photo of one of you: a selfie you take in the album, or a photo of you that your photographer adds so you do not have to. We use that photo once to make your faceprints. We do not keep your selfie. From your photographer's photo we keep only a small picture of your face, so they can see whose face they set, and we delete it with your faceprint. We keep the faceprints for that album, shared by the two of you, so photos of you added later are found when you open the album. Only the two of you see which photos it found. If your photographer set it up, the album tells you so, and your photographer can see how many photos it found but not which ones. Either of you can remove the faceprints at any time from Photos of you in the album. Whichever was added last, your own selfie or your photographer's photo, is the one used. A faceprint is deleted when the album is erased, when the person who set it up deletes their account, or when the person it is of deletes theirs.
The organiser and the couple can see which photos each matched guest is in, and the organiser can see the name and contact details that guest gave. Other guests cannot browse or search for people by face. Anyone who has your link can see your photos, so share it only with people you choose. The organiser and the couple can also share a guest's photos by link.
Matching is done by Yaadein's own software. We do not send your selfie, or any face, to an outside face-recognition service. Face data is used only inside that wedding's album, and faces from one wedding are never matched against another.
Face data is deleted with the photos it came from, and with the album when it is erased (section 5). You can withdraw at any time, using the unsubscribe link in the album emails we send you or by writing to privacy@theyaadein.com. We then delete your faceprint, stop matching you, remove the contact details you gave from your photos, and take you off the people the organiser and the couple can filter by. Your own personal link keeps working with the photos already found. The unsubscribe link also stops album emails. The photos you appear in stay in the couple's album.
4. Children’s data
Yaadein is intended for users who are 18 years of age or older. We do not knowingly collect personal data from minors. If you are under 18, you must have the explicit permission and supervision of a parent or legal guardian to upload photographs to our platform.
5. Data retention and erasure
We retain your photos and personal data only for as long as necessary to provide the album service. Event data is retained for 12 months after the wedding date, after which it is scheduled for erasure. You will be notified at least 48 hours before data is automatically erased once its retention period ends.
6. Your rights as a data principal
Under the DPDP Act, 2023 you have the right to: access the personal data we hold about you; request correction of inaccurate or incomplete data; demand erasure of your uploaded photos and account; and nominate an individual to exercise these rights on your behalf in the event of death or incapacity. You can delete your account and all associated data at any time from your account settings, or by writing to privacy@theyaadein.com.
7. Withdrawal of consent
You may withdraw your consent for us to process your photos at any time, either from your account settings or by emailing privacy@theyaadein.com. Upon withdrawal, we will stop processing and erase your personal data as soon as technically feasible.
8. Data sharing and third parties
We do not sell your personal data. We share it only with the trusted service providers we use to run the platform: Backblaze B2 (photo and video storage), Supabase (database and authentication), Razorpay (payment processing), and Resend (transactional email). Each processes data only to deliver its part of the service.
9. Data storage location
Your data, including uploaded photographs, is stored with reputable cloud providers whose servers may be located outside India. Where data is transferred outside India, we do so lawfully and only to jurisdictions permitted under the DPDP Act, 2023, and we require our providers to apply appropriate security safeguards.
10. Security safeguards
We implement reasonable security practices, including encryption in transit (HTTPS everywhere), time-limited pre-signed upload and view URLs, and access controls, to protect your personal data and photos from unauthorised access, alteration, or accidental breach.
11. Data breach notification
In the unlikely event of a personal data breach affecting your photos or details, we will notify you and the Data Protection Board of India in accordance with the timelines mandated by the DPDP Act, 2023.
12. Grievance redressal
For any concern, complaint, or request regarding your data, please contact our Grievance Officer:
Name: Harsh Sharma
Email: legal@theyaadein.com
Address: 14, Near Bhoomi Apartments, Sector 23, Sanjay Nagar, Ghaziabad, Uttar Pradesh, 201002
We aim to resolve all grievances within the timeframes prescribed by law. If you are unsatisfied with the resolution, you have the right to file a complaint with the Data Protection Board of India.
Name: Harsh Sharma
Email: legal@theyaadein.com
Address: 14, Near Bhoomi Apartments, Sector 23, Sanjay Nagar, Ghaziabad, Uttar Pradesh, 201002
We aim to resolve all grievances within the timeframes prescribed by law. If you are unsatisfied with the resolution, you have the right to file a complaint with the Data Protection Board of India.
13. Language accessibility
This notice is available in English and Hindi using the language toggle at the top of this page. For a copy in any other language specified under the Eighth Schedule of the Constitution of India, please write to our Grievance Officer at legal@theyaadein.com.