Privacy Notice
Kuha is a disposable camera that lives in your phone. You pick up a roll at an event, you get a fixed number of shots, and the film develops the next morning. To do that we need your name and your email, and we keep the photographs you take. This page says exactly what we hold and how to make us delete it.
Who is responsible
Kuha is a project of POST205. POST205 is the personal information controller and its Data Protection Officer is Toffer Lorenzana. Every request sent through the form below reaches him — use it for access, correction, deletion, or a complaint.
What we collect, and why
| What | Why |
|---|---|
| Your name | It is stamped on your roll so the organiser knows whose photos are whose |
| Your email address | One roll per person, and it is where your developed film is sent |
| The photographs you take | They are the product. They are stored so they can be developed and shown in the event album |
| A device marker | A one-way scrambled value, not readable back to your device, used only to stop one phone claiming several rolls |
| If you contact us: your name, email and what you asked | To answer you about booking Kuha for an event |
That table is the whole list.
The photographs are the sensitive part. Photos taken at an event will usually contain other people. They are shown in that event's album, which anyone with the link can open. If a photograph of you is in an album and you want it gone, say so through the form below and it is removed the same day. Anyone in the photo can ask, not just whoever took it. Reasons optional.
Our lawful basis
We rely on your consent, given when you start a roll, and on what is necessary to deliver the thing you asked for. Withdraw your consent at any time and we delete your roll, your email and your photographs.
Who else handles your data
Your data is stored and processed outside the Philippines, and by starting a roll you consent to that transfer.
| Provider | What they do | Where |
|---|---|---|
| Supabase | Stores the database and the photographs | Tokyo, Japan |
| Netlify | Serves this site and runs its server code | United States |
| Resend | Sends you the email when your film is developed | United States |
| Anthropic | The AI model behind the assistant that answers questions on this site | United States |
| Cloudflare | Domain name resolution | Global |
Your email stays with us. The organiser gets the album and nothing attached to it.
How long we keep it
- Photographs and rolls — kept for 12 months after the event, then deleted.
- Your name and email — deleted with the roll they belong to.
- Enquiries — deleted 12 months after we last spoke.
- The device marker — deleted when the event closes.
Ask us to delete sooner and we will.
How we protect it
- The site is served only over HTTPS.
- The database is locked by row-level security. Nothing in it is readable from the browser; all writes go through server-side code holding a key that never reaches your device.
- The photographs themselves sit in storage at long, unguessable addresses. They are not listed or searchable anywhere, but they are not password-protected either — anyone holding a photo's address, or an album link, can open it. Treat an album link the way you would treat the photos in it.
- The device marker is a keyed one-way hash. We cannot turn it back into a device.
- The sign-up form is protected against automated abuse by a hidden field.
Your rights
Under the Data Privacy Act you have the right to be informed, the right to object, the right to access what we hold, the right to correct it, the right to have it erased or blocked, the right to be indemnified for damage caused by false or unlawfully obtained data, and the right to receive your data in a portable form. Send it through the form below and we will reply within 15 working days. If you are unhappy with the outcome you may complain to the National Privacy Commission at privacy.gov.ph.
If something goes wrong
If a breach affects your personal data and is likely to put you at risk, we will notify you and the National Privacy Commission within 72 hours of knowing about it, as the law requires.
Changes
If we change this notice we will change the version and date at the top.
Make a request
This goes straight to the person responsible. We reply within 15 working days. Photo takedowns, same day.