Privacy policy.

Effective date: 21st October 2025
Last updated: 21st November 2025

Entity Name: Postaphoto Ireland Ltd
App Name: Twelve – Print Photos Instantly
Contact: hello@twelvephotos.com

Welcome to Twelve by Postaphoto Ireland Ltd ("Company", "we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy outlines how we collect, use, store, and protect your data when you use our mobile app, website, and associated services ("Services").

If you have questions about this Privacy Policy or how your data is handled, please contact us at hello@twelvephotos.com.

1. Overview

At Twelve, we care deeply about your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our app to upload, print, and receive your photos. We are committed to transparency, control, and compliance with data protection regulations, including GDPR and Google Play requirements.

2. Who We Are

Twelve is a trading name of Postaphoto Ireland Ltd, registered in Ireland (CRO 769950), with our registered office at Ashford House, Ballindud, Co. Waterford.

3. What Data We Collect

We collect only what’s necessary to provide you with a seamless and secure photo-printing experience. Here’s what we may collect:

a. Personal Information

  • Name and email address (when registering or contacting support)

  • Photo uploads (to create and print orders)

  • Delivery address (for shipping prints)

b. Device and App Information

  • Device ID (used to improve app performance and manage sessions)

  • IP address and location (used only for app optimisation and delivery)

  • In-app activity (to track engagement and improve user experience)

c. Payment Data

  • Payment is handled securely by Stripe, Apple Pay, and Google Pay.

  • We do not store any payment details. All payments are tokenised and processed externally.

4. How We Use Your Data

  • To process and deliver your photo prints

  • To send order updates, product announcements and promotions

  • To provide customer support

  • To improve app functionality and user experience

  • With your explicit consent, your photos may be used for promotional purposes (never without consent)

5. Photo Storage & Deletion

  • All uploaded photos are stored securely on Google Cloud servers in the EU.

  • Users may delete their photos manually within the app at any time.

  • After deletion, photos are soft-deleted and retained for 30 days before permanent deletion (purged from our servers).

  • We never share or sell your photos. You remain the owner of your images.

6. Account Deletion

  • Users can delete their account and all associated personal data (including order history and photos) via the Profile section in the app.

  • Once deleted, your data will be permanently erased from our system within 30 days.

  • You can also request account deletion by contacting hello@twelvephotos.com

7. Permissions We Request

To function correctly, Twelve may request the following permissions:

  • Camera Access – to take photos in-app

  • Photo Library Access – to upload from your gallery

  • Location Access – to help with delivery and performance optimisation

  • Push Notifications – to send order updates and reminders

All permissions are optional and will be clearly explained before use.

8. Third-Party Services

We use trusted third-party services to operate the Twelve app:

  • Stripe (payments processor)

  • Google Pay / Apple Pay (alternative payment methods)

  • Google Firebase / Cloud (infrastructure, analytics and storage)

These providers are GDPR compliant and their privacy policies apply to their services. We never allow them to use your data for their own purposes.

9. Cookies & Analytics

We may use cookies or tracking technology to understand app usage and improve your experience. This includes anonymous analytics to help us refine the user journey.

10. Data Safety & Security

  • We implement industry-standard security protocols (SSL, secure cloud infrastructure)

  • Access to personal data is restricted to authorised personnel only

  • We monitor and update our systems regularly to prevent unauthorised access

11. Your Rights

You have the right to:

  • Access your data

  • Correct any inaccuracies

  • Delete your data (including photos and your account)

  • Withdraw consent at any time

  • File a complaint with the Data Protection Commission in Ireland if you believe your rights have been violated

12. Children’s Privacy

Twelve is not intended for children under 16. We do not knowingly collect data from children without verifiable parental consent.

13. Changes to this Policy

We may update this Privacy Policy from time to time. You will be notified of any significant changes via the app or email.

14. Contact

For any questions, concerns, or data requests, please contact:

Data Protection Officer (DPO): Jack Molloy
📧 hello@twelvephotos.com
📍 Postaphoto Ireland Ltd, Ashford House, Ballindud, Co. Waterford, Ireland