Privacy Policy

Last updated: 10 November 2026

This policy explains what Cameko ("we", "us") collects, why, who it is shared with, how long we keep it, and what you can do about it. Cameko is for adults (18+) only.

The short version

We collect what you give us to run your account and share your photos, and very little else.
We don't show ads, use third-party analytics, or track you across apps or websites.
We never sell your data.
The app removes location and other metadata from your photos before uploading them.
Messages are private to the people in the conversation, but they are not end-to-end encrypted.
You can delete your account in the app at any time.

What we collect

Account

Your email address, handle, and password. We store the password only as a secure hash.
Optional profile details: display name, bio, pronouns, and profile photo.
Your settings, such as a private account and notification preferences.

What you share and do

Posts, with their photos, captions, alt text, hashtags, mentions, and the people you tag.
Stories, and who viewed them. Only you can see who viewed your stories.
Comments and their photos.
Direct and group messages, with their photos, shared posts, reactions, and nicknames.
Likes, saves, follows, and follow requests.
Your close friends list.
The accounts you block or mute.
The accounts you turn on post and story alerts for.
Reports you make, and reports made about your content.

Device and security

A key created on your device for each sign-in, which proves that requests come from you.
An Apple App Attest key, which proves that requests come from the genuine Cameko app.
A push notification token, if you allow notifications.
Sign-in records: when each session was last used, failed sign-in attempts, and one-time email codes.

We don't collect your contacts, your location, advertising identifiers, or analytics. Cameko can't see your photo library. It uploads only the photos you choose to share, and it only asks to add to your library so it can save the photos you take with its camera.

How we use it

To run Cameko and show your content to the people you choose.
To send you notifications.
To send you account emails: verification codes, password resets, and notices when your password or email changes.
To keep Cameko safe. This includes preventing spam and abuse, stopping repeated failed sign-ins, and reviewing reports. When we review a report, we may look at the reported content, including messages.
To meet our legal obligations.

Who can see what

Your handle, display name, profile photo, bio, and pronouns are visible to anyone using Cameko.
Anyone with a link to your profile can see it on cameko.app, even without the app: your profile photo, display name, handle, pronouns, bio, and post and follower counts. If your account is public, the link also shows your most recent posts, and a link to one of your posts shows its first photo and caption.
If your account is public, any Cameko user can see your posts.
If your account is private, only the followers you approve can see your posts.
Stories are visible to your followers, or only to your close friends if you choose.
Messages are visible only to the people in the conversation.
People you block can't see your content.
Other users can search for your handle, and can search hashtags and post captions they are allowed to see.

Who we share it with

We use a small number of service providers to run Cameko. They process data only on our behalf:

Cloudflare: delivers our website and API and stores photos and backups. Cloudflare sees your IP address when your device connects.
Amazon Web Services (SES, Sydney region): sends our account emails.
Apple: delivers push notifications, which can include the sender's handle and a short preview of a comment or message. Apple also checks App Attest.
Pushover: sends internal alerts to our team, for example about new reports or suspicious sign-ins. These alerts can include handles, email addresses, and reported content.

Some of these providers may process data outside Australia. We may also disclose information when the law requires it, to protect someone's safety, or to report child sexual exploitation to the authorities.

How long we keep it

We keep your data while your account exists.
Stories are deleted after 24 hours.
When you delete a post, comment, message, or story, it disappears from Cameko straight away and its photos are permanently deleted shortly after. If the content has been reported, we keep its photos until the report has been reviewed.
Sign-in sessions expire after 180 days without use.

When you delete your account, you have 24 hours to change your mind by signing back in. After that we permanently delete:

your profile, email address, and password;
your posts, stories, and photos;
your likes, follows, saves, blocks, mutes, notifications, and push tokens.

Comments and messages you left in other people's threads become empty placeholders, so their conversations still make sense. Your handle may stay reserved so nobody can impersonate you.

Database backups are kept for up to 30 days, so deleted data disappears from them within 30 days.

Security

Data travels over encrypted connections.
Passwords are hashed.
Each request is signed by your device.
Access to our systems is limited to the people who run Cameko.

No system is perfectly secure. If a breach is likely to cause you serious harm, we will tell you and the regulator as the law requires.

Age

Cameko is only for people 18 and over, and it is rated 18+ on the app stores. We don't knowingly collect data from anyone under 18. If we learn that an account belongs to a minor, we close it and delete its data. Tell us at support@cameko.app if you think a minor is using Cameko.

Your rights

You can:

see and edit your profile in the app;
change your email address and password in the app;
delete your content or your whole account in the app;
email us to request a copy of your data, to correct it, or to object to how we use it.

We will respond within 30 days. If you are unhappy with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or to the data protection authority where you live.

Changes

We may update this policy at any time. When we do, we change the "Last updated" date at the top of this page. It is your responsibility to check this page from time to time.

Contact

Privacy questions and requests: support@cameko.app.