Privacy Policy

We ask for your consent when you create an account. You confirm that you have read this notice and that you are 18 or older (or that a parent or guardian is consenting for you). We record when you agreed and to which version of this notice. If we change this notice in a way that matters, we will ask again before you upload more photos.

You can withdraw consent at any time by deleting your account (Account → Delete account). Withdrawing does not make earlier processing unlawful. Kathaleaf's public pages can be read without an account; making albums requires one.

We do not sell your personal data. We do not use your photos for advertising, for training AI models, or for anything other than making and delivering your albums.

Your photos, albums, captions, layouts and the PDFs you export are made and kept in your browser on your device. Kathaleaf’s servers do not receive them. Your Kathaleaf account holds only your sign-in, your consent and, if you buy a print in future, what that order needs.

Because they live in the browser, clearing the browser’s data, removing the browser, or (in Safari) not opening Kathaleaf for a week can delete them. Installing Kathaleaf helps against that. The optional encrypted backup does not: it keeps only the print PDFs of your built books (section 4), never your photos or albums, so keep your own copy of any photo you cannot lose.

Kathaleaf does not back up your photos, and never will. If you turn on backup, only the print PDF of a book you have built (up to 1 GB in all), and a small record of it — the book’s name, size, page count and when it was built — are encrypted on your device before they are sent, with a key that is made on your device and never sent to us. Your photos and your albums stay on your device. We store only the encrypted copies and the key in locked (wrapped) form. It is unlocked by your recovery code, by a passkey that supports it, or on a device where backup is already on — none of which we have. So we cannot read your backup, and we cannot recover it for you if you lose all of them.

This holds as long as the app code we serve is not altered. If that code were changed — because we were compelled to, or because our systems were compromised — altered code running in your browser could read the photos on your device and the key. We protect the code we serve, and we tell you about this limit plainly.

What we can see about a backup: that it exists, how many objects it has, their sizes, when they were uploaded and from which IP address. We cannot see the contents of a book, its name, photos, captions or locations. If an authority asks us for a backup, we can hand over only this information and the encrypted copies.

These service providers process personal data on our behalf, only for the purpose listed:

• Fly.io — hosting for our application and database.
• Tigris Data — storage for encrypted backups (which it cannot read) and invoices.
• Resend — sending account and order emails.
• Grafana Labs — monitoring our service for errors and outages. It receives technical data only (which page or feature failed, timings, error messages). We remove email addresses, phone numbers, IP addresses and web addresses with their parameters before anything is sent.
• Meta (WhatsApp) — sending sign-in codes to your phone, if you use phone sign-in.
• Google — Google sign-in, importing from Google Photos or Drive when you ask us to, and Google Analytics (only with your consent).
• Razorpay — payments, once printed orders open. We never see or store your full card or UPI details.
• Our print and courier partners — printing and delivering your album, once printed orders open. They receive the print file and your delivery address only.

We may also disclose data when Indian law requires it, for example to a court or a government agency with lawful authority.

Your data is stored on servers in Singapore. This is a transfer of personal data outside India, which the DPDP Act permits to countries the Government has not restricted. Some of the providers above may also process data in other countries under their own safeguards.

• See and download your data — Account → Download my data gives you a copy of what Kathaleaf holds about you: your account, sign-ins and passkeys, sessions, orders and your backup’s details (never its keys). Your albums and photos are on your device.
• Correct it — edit your name and contact details in Account, or ask us.
• Erase it — Account → Delete account removes your account, passkeys and encrypted backup, and can also erase the albums on this device. Account → Backup → Delete backup removes the backup alone. Order and invoice records are kept for the period tax law requires, then deleted.
• Withdraw consent — for analytics, use Cookie settings at the bottom of any page; for everything else, delete your account.
• Nominate someone — you can nominate a person to exercise these rights if you die or become unable to. Email the Grievance Officer below.
• Complain — to our Grievance Officer (below). If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

We reply to privacy requests within 30 days, and usually much sooner.

You must be 18 or older to create an account, or have a parent or lawful guardian create it and consent for you. Photo books often include photos of children. If you upload them, you confirm that you are their parent or guardian, or have that person’s permission. We do not track or monitor children’s behaviour or target advertising at them, and we never use photos of children for anything except your album.

We use one essential cookie to keep you signed in, plus browser storage to remember things like an upload in progress. These are needed for Kathaleaf to work, so they do not need your consent.

Google Analytics runs only if you choose “Allow analytics”. You can change your choice at any time with the Cookie settings link at the bottom of every page.

We encrypt data in transit, store passwords only as one-way hashes, and give photos time-limited private links rather than public addresses. Access to production systems is limited to the people who run Kathaleaf.

If a breach affects your personal data, we will tell you and the Data Protection Board of India without delay. We will also report it to CERT-In where the law requires. We will explain what happened, what data was involved, and what you can do.

The date at the top shows when this notice last changed. If we make a material change, we will tell you in the app and ask for your consent again before you upload more photos.

Grievance Officer

Prince Anuragi

Email

princanurag07@gmail.com

Phone

Phone: to be published

Hours

Monday–Friday, 10:00–18:00 IST

For anything else, email support@folio.photography. See Grievance redressal for how complaints are handled and the timelines we commit to.

Policy version 2026-10-02