Privacy Policy

This Privacy Policy explains how Rewind (“Rewind”, “we”, “us”) collects, uses, and protects your personal information. Rewind is operated by Luke Steffens (trading as Rewind), based in South Africa. We process personal information in line with the Protection of Personal Information Act (POPIA).

Information we collect

• Account details: the email address you use to sign in (Rewind uses passwordless email sign-in, so we do not store passwords).
• Event content: event names and settings you create, and the photos and captions you and your guests upload.
• Technical data: basic device and log information used to operate and secure the service.
• Payment data: payments are handled by Paystack. We receive confirmation of payment but never see or store your card details.

How we use your information

• To create and run your events and reveal galleries.
• To sign you in and keep your account secure.
• To process payments and provide receipts.
• To respond to support requests and send service-related emails.
• To maintain, improve, and protect Rewind.

How photos are shared

Photos and captions uploaded to an event are visible to the participants of that event once the gallery is revealed. Guests can save the photos they appear in. We do not make your event photos public or use them for advertising.

Service providers

We share information only with the providers needed to run Rewind:

• Supabase — database, file storage, and authentication.
• Paystack — payment processing.
• Resend — sending account and service emails.
• Vercel — application hosting.

We do not sell your personal information.

Data retention

We keep your account and event data for as long as your account is active or as needed to provide the service. You can ask us to delete your account and associated data at any time.

Your rights

Under POPIA you may request access to, correction of, or deletion of your personal information, and you may object to certain processing. To exercise these rights, email hello@rewindapp.co.za.

Security

We protect data with access controls and encryption in transit. No online service can be guaranteed completely secure, but we take reasonable steps to safeguard your information.

Children

You must be 18 or older to create a Rewind account. Hosts are responsible for obtaining any consents needed for guests, including minors who may appear in event photos.

Changes

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above.

Contact

Questions about your privacy? Email hello@rewindapp.co.za.