Capsule — Privacy Policy

Last updated: July 18, 2026

Capsule ("the app") lets you and your invited friends collect photos of an event in a shared capsule that unlocks for everyone on a date you choose. This policy explains what data the app handles and why. The short version: we store only what the feature needs, we don't run ads, we don't sell data, and we don't track you across other apps.

Who is responsible

Dominik Zander
Contact: capsule@ds3-ecom.com

What we collect and why

• Account: You sign in with Apple. We receive a unique user identifier and — only if you share it — your name, which is used as your display name inside capsules. We do not receive or store your email address or password.
• Capsules and photos: The photos you add to a capsule, a small blurred preview, and capsule details (title, event and reveal dates, member list) are stored on our servers so they can be shared with the capsule's members. Photos are locked server-side until the capsule's reveal date: before that date, no member (not even the capsule's host) can download the full photos.
• Purchases: Payments are processed entirely by Apple. To unlock larger capsules we process your purchase through RevenueCat (receipt validation), tied to a pseudonymous user identifier. We never see your payment details.
• Notifications: Reveal-day reminders are local notifications scheduled on your device. They are optional and no notification data leaves your device.

Photos, camera and photo library

The app uses your camera and photo library only when you actively take or pick a photo for a capsule, and asks for add-only access when you save a revealed photo to your library. We never scan or upload your library in the background.

Where data is stored

Capsule uses Google Firebase (Firebase Authentication and Cloud Firestore, operated by Google LLC) to store accounts, capsules and photos, and RevenueCat, Inc. to process purchase receipts. Data is transmitted encrypted (TLS). Access to sealed photos is enforced by server-side security rules.

What we don't do

• No advertising, no ad networks.
• No sale or sharing of your data with data brokers.
• No tracking across apps or websites; the app contains no analytics SDK.

How long we keep data

Capsule content is kept as long as the capsule exists. Members can leave a capsule at any time; the host can delete a capsule, which permanently removes its photos. You can delete your entire account in the app (Settings → Delete account); this permanently deletes your account and the capsules you created. Deletion is immediate and cannot be undone.

To keep storage sustainable, we may archive or permanently delete capsules that have been inactive for 12 months or more (measured from the capsule's reveal date or its last activity, whichever is later). Revealed photos can be saved to your photo library in the app at any time — please save anything you want to keep long-term.

Your rights

Under the GDPR you have the right to access, correct, delete and receive a copy of your personal data, and the right to lodge a complaint with a supervisory authority. Most of this you can do directly in the app (view your content, delete photos you uploaded via deleting the capsule, delete your account). For anything else, email capsule@ds3-ecom.com.

Children

Capsule is not directed at children under 13. Capsules are only visible to people who were invited with a code; there is no public feed.

Changes

If this policy changes, the updated version will be published at this address with a new date.