GalaBooth Privacy Policy

Effective date: November 6, 2026 Operator: YS Labs, Yongin-si, Gyeonggi-do, South Korea · contact@yslabs.dev App: GalaBooth — Event Selfie Booth (App Store and Google Play)

The short version

GalaBooth is built to work on your device. It has no accounts, no advertising, and no analytics or tracking SDKs. We do not sell personal information or share it for advertising. Photos taken in the booth stay on the device unless you share or deliver them yourself, or you link the event to a GalaSnap album (see "Optional GalaSnap album link").

1. Photos and GIFs

• Photos and GIFs taken in GalaBooth are processed and stored on the booth device (iPad, iPhone, Android tablet or phone). GalaBooth has no cloud backup or sync of its own. Your device's own backup (iCloud or Google) may include app data, depending on your settings.
• QR delivery: when a guest scans the QR code next to a finished photo, the booth device itself serves the photo to the guest's phone over the local Wi-Fi network. It does not go over the internet or through any of our servers. The link serves only that one photo, works only on the same network, and is open only while the delivery screen is shown; it closes as soon as the next guest starts or the booth is closed. While it is open, anyone on the same network who has the QR link can open that photo.
• Christmas tree frames: when a tree frame is chosen, GalaBooth draws the tree behind the people in each finished photo. A model bundled in the app (Google MediaPipe Image Segmenter) estimates which parts of that one photo show people. It runs once per finished photo, not on the live preview; it does not detect faces or tell people apart. The outline is calculated in memory on the device and discarded as soon as the photo is made. It is never stored, uploaded or sent to us, Google or anyone else, and it works offline. If it cannot be calculated, the tree is drawn in front.
• Saving to the photo library and sharing through the system share sheet happen only when you choose those actions.

2. Optional GalaSnap album link

GalaSnap is a guest photo album app from the same publisher. In an event's settings, the host can link that event to a GalaSnap album by scanning the album's QR code or typing its event code. Nothing is sent for events that are not linked. - What is sent: for a linked event, each finished booth photo (4-cut strip, 2×2 grid or single shot), as a JPEG with a small preview image and the label "GalaBooth". GIFs are never sent. No account, device identifier, location or face data is sent with the photos. - Where it goes: to the GalaSnap service, which stores album photos on Cloudflare. Photos taken while the device is offline wait on the device and are sent when it is back online. - Who can see them: the host of that GalaSnap album and anyone the host shares the album with. Guests who scan the album's table QR code can upload their own photos but cannot browse the album. - Retention and deletion: as described in the GalaSnap Privacy Policy; the host can delete photos in GalaSnap at any time. Unlinking the event stops further sending; copies on the booth device are not affected. - The booth shows guests a short notice while photos from that event are being added to the host's album.

3. Face data (character overlays)

Character costumes place a costume on each face in the live camera preview. Face tracking is off when the capture screen opens. It starts only after someone taps a character (or "Turn on costume"); a notice next to the characters explains this first. Choosing "None" (or "Turn off costume") turns it off, and it turns off automatically at the end of each guest's session.

While it is on, GalaBooth uses Google MediaPipe Face Landmarker, a model bundled inside the app, to find up to two faces and calculate facial landmark points (positions of features such as the eyes, nose, mouth and face outline) and the angle of the head. Once turned on, it applies to anyone in view, up to two faces (for example, two friends posing together), until "None" is chosen or that guest's session ends. - Use: only to place and move each costume on the right face in real time, to keep the same costume on the same person, and to draw the costume into the photo when it is taken. Faces are told apart only by where they are on the screen. Face data is never used to identify or recognize anyone, for authentication, or for advertising, marketing, analytics or profiling. - Storage: face data is processed entirely on your device, in memory. It is never written to storage, never uploaded, and never sent to us, to Google or to any other third party. The model runs offline and needs no network connection. - Sharing: face data is not shared with anyone. - Retention and deletion: landmark values are replaced with every camera frame. The app remembers where a face was for up to about 3 seconds after it leaves the camera view, so the same costume goes back on the same person, and it clears all of this when the guest's session ends or the app is closed. Because face data is never stored, there is no face data to delete. - Photos themselves show people's faces; they are handled as described in sections 1 and 2.

4. Device permissions

• Camera: only to take booth photos.
• Photo library (save): only to save finished photos and GIFs when you ask.
• Network (Android: Internet, network and Wi-Fi state): for QR delivery on the local network, for purchases, and for the optional GalaSnap link. GalaBooth does not ask for local network permission on iOS or Android. No access to contacts or location.

5. Purchases and subscriptions

Event Passes and GalaBooth Pro subscriptions are processed by Apple (App Store) or Google (Google Play). We never see your payment details. To recognize your purchases, the app uses RevenueCat, Inc., a subscription-management service. RevenueCat receives a random app ID generated by the app (not linked to your name, email or Apple ID), the store's purchase and subscription records (product, price, purchase and renewal dates), and the device's language and currency — not your name, email address, advertising identifier, photos or face data. See RevenueCat's privacy policy. This ID is used only to validate and restore purchases. It is never used to contact anyone, build a profile or show ads, and it is not combined with other information.

Apple and Google may give us aggregated, de-identified crash and usage statistics if you allowed this in your device settings. GalaBooth itself contains no crash-reporting or analytics SDK.

6. What we do not collect

No accounts, names, email addresses, contacts, location, advertising identifiers, or content you create in the app — except booth photos a host chooses to send to their own GalaSnap album.

7. Retention and deletion

• Events and photos live on the device. You can delete any event and all its photos in the app; deleting the app removes all app data from the device.
• Photos you exported are managed by you in your Photos/Gallery app. Photos sent to a GalaSnap album are managed in GalaSnap.
• Purchase records held by RevenueCat are kept while your subscription is active and for up to 24 months after your last purchase or subscription ends (to restore purchases and handle refunds or disputes), then deleted. To have them deleted sooner, write to contact@yslabs.dev and include the order number from your App Store or Google Play receipt.
• GalaBooth has no accounts, so there is no account to delete.

8. Your rights in the EEA and UK (GDPR)

• Booth photos on the device: they never reach us; the host who runs the booth decides how they are used.
• Booth photos sent to a GalaSnap album: YS Labs is the controller. We store them to provide the album service the host asked for (Art. 6(1)(b) GDPR, and our legitimate interest in running the service, Art. 6(1)(f)); the host decides which photos are sent and can delete them. Photos sent to GalaSnap are stored with Cloudflare, Inc. (USA and other countries), under Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.
• Purchase status: YS Labs is the controller of the random app user ID and receipt information handled through RevenueCat, processed to provide the purchase you asked for (Art. 6(1)(b) GDPR). RevenueCat processes it on our behalf. Apple and Google process payments as independent controllers.
• International transfers: YS Labs is in South Korea, which the European Commission and the UK Government recognize as providing adequate protection. RevenueCat may process data in other countries, including the United States, under safeguards such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.
• Your rights: access, rectification, erasure, restriction, objection and data portability. For a photo of you, the quickest route is the event host, who can delete it in the app or in their GalaSnap album; you can also write to us and we will help or pass the request on. We reply within one month. You may complain to your local data protection authority.

9. California (CCPA/CPRA)

• Categories collected in the last 12 months: identifiers (a random app user ID), commercial information (purchase records), and — only for events a host links to GalaSnap — booth photos, stored on the host's behalf. Face landmarks are processed only on the device and are not collected by us.
• Sources and purposes: from the app and the stores, to provide purchases and the GalaSnap link you turned on.
• Sale and sharing: we do not sell personal information or share it for cross-context behavioral advertising, and have not done so in the last 12 months. We do not use sensitive personal information to infer characteristics.
• Your rights: to know, delete and correct, and not to be discriminated against for exercising them. Email contact@yslabs.dev; we verify requests with the store order number. An authorized agent may act for you with your written permission.

10. Children

GalaBooth is not directed to children, and we do not knowingly collect personal information directly from children. Its content rating is 12+ on the App Store and 7+ on Google Play. Hosts and booth operators must be at least 13 (14 in South Korea) and need a parent's or guardian's permission if they are under 18, or under the age of majority where they live. Guests of any age, including children, may appear in booth photos. Those photos stay on the host's device unless the host sends them to their own GalaSnap album, where we store them only on the host's behalf. The host is responsible for any consent required where they live (for children, a parent's or guardian's). If you believe a child's photo or information is held by us, write to contact@yslabs.dev and we will delete it.

11. South Korea (Personal Information Protection Act)

See the Korean summary below.

12. Changes

If we change how GalaBooth handles data, we will update this page and its effective date before the change takes effect.

13. Contact

YS Labs · Yongin-si, Gyeonggi-do, South Korea · contact@yslabs.dev

한국어 요약 (개인정보 보호법 고지)

• 처리 목적·항목: ① 구매 확인 — 앱이 생성한 임의 식별자(가명), 스토어 구매 영수증 정보 ② GalaSnap 연결(선택) — 호스트가 연결한 이벤트의 부스 사진(JPEG·미리보기) ③ 얼굴 랜드마크는 기기 메모리에서만 처리하며 수집·저장·전송하지 않습니다. ④ 트리 프레임 선택 시 완성 사진 1장에서 사람 영역(윤곽)을 기기 메모리에서만 계산해 트리를 사람 뒤에 그리고 즉시 버립니다. 얼굴 인식·개인 식별에 쓰지 않으며 저장·전송하지 않습니다.
• 보유 기간: 구매 정보는 구독 기간과 마지막 구매·구독 종료 후 최대 24개월간 보관한 뒤 파기합니다(요청하면 그 전에 파기). GalaSnap 사진은 GalaSnap 처리방침의 보관 기간을 따릅니다. 기기 안의 사진·이벤트는 이용자가 앱에서 삭제합니다.
• 제3자 제공: 하지 않습니다(GalaSnap 전송은 호스트가 직접 켠 기능에 따른 전송입니다).
• 처리 위탁·국외 이전:
  • RevenueCat, Inc.(미국) — 구매 확인. 연락처: compliance@revenuecat.com. 이전 항목: 앱이 만든 임의 식별자(가명)·구매·구독 기록(상품·가격·구매·갱신일)·기기 언어 및 통화 설정. 이메일·광고 식별자는 보내지 않습니다. 이전 시기·방법: 구매·앱 실행 시 네트워크 전송. 보유 기간: 위와 같음. 거부 방법: 구매하지 않으면 전송되지 않습니다(무료 데모는 구매 확인 없이 사용 가능).
  • Cloudflare, Inc.(미국 등) — GalaSnap 앨범 사진 보관. 연락처: PrivacyQuestions@cloudflare.com. 이전 항목: 부스 사진(JPEG·미리보기). 시기·방법: 연결된 이벤트 촬영 시 네트워크 전송. 보유: GalaSnap 처리방침의 보관 기간. 거부: 이벤트를 연결하지 않으면 전송되지 않습니다.
• 파기: 전자 파일을 복구할 수 없는 방법으로 삭제합니다.
• 정보주체 권리: 열람·정정·삭제·처리정지를 contact@yslabs.dev로 요청할 수 있으며, 지체 없이 조치합니다.
• 만 14세 미만 아동: 앱은 아동을 대상으로 하지 않으며 아동의 개인정보를 알고 수집하지 않습니다.
• 자동 수집 장치(쿠키 등): 앱은 쿠키나 광고 식별자를 사용하지 않습니다.
• 안전성 확보 조치: 서버 전송 구간 암호화(HTTPS — RevenueCat·GalaSnap), 기기 밖으로 나가는 데이터 최소화.
• 권익침해 구제: 개인정보분쟁조정위원회(1833-6972, www.kopico.go.kr), 개인정보침해신고센터(118, privacy.kisa.or.kr), 대검찰청(1301), 경찰청(182)에 분쟁 조정·상담을 신청할 수 있습니다.
• 처리방침 변경: 변경 시 이 페이지와 시행일을 시행 전에 갱신합니다. 시행일: 2026년 11월 6일.
• 개인정보 보호책임자: YS Labs 개인정보 보호 담당 · contact@yslabs.dev
• 일반 문의·권리 행사 접수: contact@yslabs.dev