Legal / Privacy Policy
Privacy Policy
Last updated: 9 October 2026
This policy covers the website fotofoto.app, the foto foto app for iPhone and iPad, and our connectors for ChatGPT and Claude. If anything is unclear, email us at fotofoto@nternet.company.
1. Data controller
Nternet Studio B.V., Jacob van Lennepstraat 78H, 1053 HM Amsterdam, KvK 42054888. You can contact us at fotofoto@nternet.company.
2. What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Sign-in, order confirmations, service emails | Contract performance |
| Name (optional) | On books you share and on the shipping label | Contract performance |
| Photos | Making, saving and printing your photo book | Contract performance |
| Photo metadata (date, place including GPS, camera) | Ordering photos by time and place, finding trips | Contract performance |
| Shipping address and phone number | Delivering your book | Contract performance |
| Order and payment references (Stripe IDs) | Processing and tracking your order | Contract performance, legal obligation |
| IP address, browser or device, city and country | Account security, fraud prevention, your payment at Stripe | Legitimate interest |
| Messages to customer support | Answering your questions | Contract performance |
| Usage data (pages, clicks, errors, speed) | Understanding and improving the product, fixing errors | Legitimate interest, with cookies only after consent |
| Ad click IDs and conversions (website only) | Measuring our ads | Consent |
Your email address is required to use foto foto. Shipping details are required only when you order.
3. Your photos
On the website, your photos stay in your browser until you share a book or order one. Then they are uploaded to our storage at Cloudflare (R2).
In the app, foto foto reads the date and place of the photos in your photo library on your device, to find your trips and suggest photos. The photos in a book are uploaded in the background while you work on it, with their metadata, so we can save and print the book. Anyone with the link to a book can view it.
The order and the layout of your book are made on your device.
Our photo selection tool on the website uses AI models from Google (Gemini) and OpenAI. They receive small copies of your photos, at most 256 pixels, with the date, place and camera of each group of photos. They never receive the full photos. We keep the small copies and their metadata for 7 days, so you can carry on where you were, and then delete them. The app does not send photos to AI models.
The first message of a new conversation with customer support is checked for spam by Google Gemini.
4. Who receives your data
| Provider | What they process | Location |
|---|---|---|
| Cloudflare | Hosting, database, photo storage, sending email | EU / US |
| Stripe | Payments (card details go straight to Stripe), email, address, IP address and device | US (EU entity) |
| Printec | Printing and shipping: name, address, phone, email, the print files | Germany |
| Prodigi | Printing and shipping: name, address, phone, email, the print files | UK |
| Print.one | A card to new customers in the Netherlands: name and address | Netherlands |
| 17TRACK | Tracking number and order number | China |
| PostHog | Usage data and errors | EU |
| AI for photo selection and the spam check (Gemini), ad measurement on the website with consent (Google Ads), our customer support inbox (Google Workspace) | US / EU | |
| OpenAI | AI for photo selection | US |
| Meta | Ad measurement on the website with consent: a hashed email address and your IP address | US |
| Ad measurement on the website with consent: a hashed email address and your IP address | US | |
| Slack | Internal order notifications: name, email, city and country | US |
| Coinbase | Crypto payments through the connectors | US |
| ChatGPT, Claude | When you use our connector there: the photos and book details you share in that conversation, under their own terms | US |
When this list changes, we tell you by email or with a notice on the site. The details are in our Data Processing Agreement.
5. International transfers
For providers in the United States we rely on the EU-US Data Privacy Framework where the provider is certified, and on the Standard Contractual Clauses (SCCs 2021/914) otherwise. For Prodigi in the United Kingdom, the UK adequacy decision applies. For 17TRACK in China, we rely on the Standard Contractual Clauses.
6. Cookies and local storage
- Necessary. A session cookie keeps you signed in on the website. IndexedDB keeps your photos and books on your device. In the app, your sign-in is kept in the Keychain of your iPhone or iPad. These need no consent.
- Analytics. PostHog measures usage without cookies by default, and then your usage is not linked to you. With your consent, it uses a cookie to recognise you on your next visit, and links your usage to your account when you are signed in. The app always measures without cookies.
- Advertising (website only, with consent). The Meta pixel, the Pinterest tag and Google Ads. Google's tag loads before you choose, in consent mode, with ad storage off until you agree. After an order, if you consented, we send Meta and Pinterest a hashed email address and your IP address to measure our ads.
You can change your choice at any time in the cookie settings at the bottom of the site. The app loads no ad tags and does not track you.
7. Security
All data is encrypted in transit (TLS). Photos and data are stored at Cloudflare, with access controls. Our APIs are rate-limited.
If we become aware of a data breach that is likely to affect your rights, we will notify you and the Autoriteit Persoonsgegevens without undue delay.
8. How long we keep it
- Photos and books until you delete them or close your account. Then we permanently remove them from our servers.
- Account data until you close your account.
- Small copies for photo selection for 7 days.
- Order records for 7 years (required under Art. 52 AWR, Dutch tax law). Then we delete them.
- Messages to customer support until you ask us to delete them.
- Data on your device until you sign out or delete your account.
9. Your rights
Under the GDPR, you have the right to:
- Access a copy of your personal data
- Rectification of inaccurate data (you can change your name in your account)
- Erasure of your data (with "Delete account" on the website or in the app, or by email)
- Portability of your data in a structured format
- Restriction of processing in certain situations
- Objection to processing based on legitimate interest
- Withdraw consent at any time, in the cookie settings at the bottom of the site
To exercise any of these rights, email fotofoto@nternet.company. We respond within 30 days.
You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).
10. Automated decisions
foto foto automatically proposes the selection, order and layout of your book. This has no legal or similarly significant effect on you. You review the proposal and change it before you order.
11. Children
foto foto is not directed at children under 16 (the age of digital consent in the Netherlands under UAVG Art. 5). We don't knowingly collect data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes
We may update this policy. If we make significant changes, we will tell you by email or with a notice on the site.
13. Contact
Questions or requests? Email fotofoto@nternet.company.