Privacy Policy

Who we are

Hugr (hugr.one) is operated by Hugin & Munin Inc. (“we”, “us”). This policy explains what information we collect when you use Hugr, how we use it, who we share it with, and the choices you have. Questions? Contact us at support@hugr.one.

Information we collect

• Account information. When you sign in with Google, Microsoft, or Apple, we receive your name, email address, profile picture, and an account identifier from that provider. We never see your password.
• Photos you upload, together with thumbnails and resized copies we generate, and basic metadata such as the filename, upload time, who uploaded it, and the date the photo was taken (read from the photo’s embedded metadata).
• Data derived from your photos: face fingerprints, general visual fingerprints, and automatically generated labels and captions describing what a photo shows (described below).
• Names you attach to faces, and the events you create and their details.
• Collaborator details. If you contribute to an event through an invite link, the name the event owner gave that invite, if any, is recorded with your uploads.
• Consent records: which version of this policy you accepted, and when.
• Subscription information from our payment provider, Paddle (see Payments).
• Technical information. A session cookie that keeps you signed in, a cookie that remembers your language, and short-lived server logs (which can include IP addresses, but never your email address) used for security and troubleshooting. We count visits to and clicks on our public home page in aggregate on our own servers, without cookies or third parties: to count unique visitors we keep a short code derived from your IP address and browser that changes daily, never the IP address itself, along with your browser's user-agent string and the site that linked you to us. These records are deleted after 90 days. We do not use advertising trackers.

Google user data

If you sign in with Google, Hugr requests only the basic sign-in scopes (openid, email, and profile). From your Google account we receive your name, email address, profile picture, and Google account ID. We use them only to create and identify your Hugr account, sign you in, and show your name and picture in the app. We do not access your Google Photos, Drive, Gmail, contacts, or any other Google data.

This information is stored in our account database for as long as your account exists, and is deleted when you delete your account. We do not sell it, use it for advertising, or use it to train AI models, and we do not share it with third parties except as required by law.

Hugr’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke Hugr’s access at any time from your Google Account permissions.

Face detection & recognition

We automatically detect faces in uploaded photos and compute a mathematical “fingerprint” (an embedding) for each face so photos of the same person can be grouped and searched by name. This is biometric-adjacent processing — we’re calling it out explicitly here rather than folding it into general language about “processing your data”, because it’s the part of our service that most directly touches your likeness.

Image similarity search

We also compute a general-purpose visual fingerprint of each photo, not tied to any one person, to power similarity search and duplicate detection across your library and shared events. On some pages your browser computes this fingerprint locally to show an instant estimate; that step happens on your device.

How we use information

We use the information above only to provide and secure Hugr: signing you in, storing and showing your photos and events, search and face grouping, running your subscription, preventing abuse, and responding when you contact us. We do not sell your data, use it for advertising, or use your photos or face data to train AI models.

Who can see what

Event owners can see everything in their events. Invite-link collaborators can upload and see their own contributions plus whatever the owner has shared via the link. Face fingerprints and labels are not shared outside the event or account they belong to.

An event owner can also publish a view-only preview link. Anyone who has that link can open the event without an account and watch its photos as a slideshow, seeing the event name, description and resized copies of the photos. The owner can revoke the link at any time, and it can be set to expire.

Where it’s stored

Photos are kept in secure cloud storage; metadata, labels, and fingerprints are kept in our databases. Data is encrypted in transit (HTTPS) and access is restricted to the systems and people who operate Hugr.

Payments

If you subscribe to a paid plan, the purchase is handled by Paddle (Paddle.com Market Ltd), our reseller and Merchant of Record. Paddle collects your payment details, email, and billing address in its own checkout — we never see or store your card details. We receive and keep only what we need to run your subscription: Paddle’s customer and subscription IDs, your plan, its status, and renewal dates. Paddle processes your payment information under its own privacy policy.

Printing

If you order prints, we send Walgreens the photos you selected (at full resolution) and the name, phone number, and email address you enter in the print form, so Walgreens can print the order and tell you when it’s ready for pickup at the store you choose. This happens only when you place a print order. We don’t keep your name, phone number, or email from the print form; we record only the Walgreens order number, the event, the store, and how many photos and prints the order had. Walgreens handles your order, including payment at pickup, under its own privacy policy.

Third parties

We share personal information only with:

• Paddle, to process payments, as described above.
• Walgreens, when you order prints: the selected photos and the contact details you enter, as described under Printing.
• Sign-in providers (Google, Microsoft, Apple), which you choose to sign in with and which receive the sign-in request.
• Content delivery services your browser loads files from when you use Hugr: Google Fonts (typefaces), jsDelivr (a JavaScript library), and Hugging Face (the model used for in-browser image scoring). These see your IP address and browser details, as with any website request, but never your photos or account data.
• Authorities, when we are legally required to.

We do not sell your personal information to anyone.

Retention

Data is kept until you delete it. Deleting a photo removes its face and embedding data. Deleting your account removes everything tied to it — your events, images, face and embedding data, and login information, including the information received from Google or your other sign-in provider. If you have an active subscription, it is cancelled first. Server logs are kept only for a short period. Paddle keeps its own record of your purchases (such as invoices and tax records) as the law requires; for that data, contact Paddle under its privacy policy. Likewise, Walgreens keeps its own record of print orders and the photos sent to it; for that data, contact Walgreens under its privacy policy.

Anonymous collaborators

If you upload photos via an invite link without creating an account, the same face detection and embedding processing applies to your photos. We don’t require an account to contribute to an event, but the event owner and other collaborators may see photos you contribute.

Your rights

You can delete individual photos at any time, and delete your entire account (and everything in it) from account settings. You can also ask us for a copy of your data or to correct it. If you contributed photos anonymously via an invite link and want them removed, contact the event owner or reach out at support@hugr.one.

Children

Hugr is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.

Changes to this policy

If we make a material change to how we handle your data, we’ll ask you to review and re-acknowledge this policy the next time you sign in.