Privacy Policy

We may collect:

• account information, including your name, email address, authentication identifiers and profile details;
• event information, including event names, dates, guest limits, invitations, settings and administrator details;
• photos, videos, captions, favourites and related upload information contributed to an event;
• technical and usage information, including device, browser, app, IP address, diagnostic, crash and interaction data;
• payment and transaction information. Payment providers process card or in-app purchase details; Nommo does not store full card numbers; and
• communications and support requests you send to us.

We collect information directly from you, from event organisers and guests, automatically through the service, and from providers used for authentication, payments, hosting, diagnostics and email delivery.

We use personal information to create and operate accounts and events, process uploads and film effects, provide galleries and downloads, authenticate users, process payments, send service communications, prevent misuse, troubleshoot problems, improve Nommo and comply with legal obligations.

Event organisers determine who may join an event and how its gallery is revealed. Contributors should only upload content they are authorised to share. Organisers are responsible for obtaining any permissions or consents needed for their event, including where children appear in content.

We may disclose information to event organisers, authorised event administrators and participating guests according to event settings. We also use service providers including Firebase and Google Cloud for authentication, databases and storage; Vercel for hosting; Stripe and Apple for payments; Sentry for diagnostics; and email delivery providers.

These providers may process information in Australia and other countries where they or their infrastructure operate. Privacy protections in those countries may differ from Australian law.

Event media is retained for the period configured for the service and is then automatically deleted. The current default is seven days after the event wrap-up time. Event history, account records, transaction records, security logs and legally required records may be retained for longer.

Deletion from active systems may not immediately remove information from encrypted backups, logs or provider systems where limited retention is necessary for security, recovery or legal compliance.

We use reasonable technical and organisational safeguards designed to protect information. No online service or storage system can guarantee absolute security.

You may request access to or correction of personal information we hold about you, or make a privacy complaint, by emailing privacy@nommofilm.com. We may need to verify your identity before acting on a request. We will respond within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

We may update this policy as Nommo or applicable law changes. The effective date above identifies the latest version.