01 What we collect, and why
- Account — your name and email address. If you sign in with Apple, Google or Discord, they tell us your name and email; we never see that password. Why: to create your account and sign you in. Legal basis: contract.
- Profile — your photo, your city, and for artists a bio, specialties, and up to 10 photographs and 3 short films. Why: so clients can choose an artist. Basis: contract.
- Identity check — a government document and a live selfie, collected and checked by Stripe. We receive only the result (verified or not) and Stripe's reference for it. Why: so nobody trades on PixIt without being who they say. Basis: contract, and our legitimate interest in keeping both sides safe.
- Location — your precise position while the app is open and you are matching with artists or travelling to a shoot, and the address of a shoot you post. Only if you allow it. Why: to find artists nearby and show a client their artist is on the way. Basis: consent — turn it off in your device settings and those features stop working.
- Jobs, messages and reviews — the briefs you post, what you send in in-app chat, files delivered, reviews, reports and blocks. Why: that's what the app is for, and to deal with disputes and safety reports. Basis: contract and legitimate interests.
- Payments — amounts, dates, currency and status, and Stripe's references for them. Card numbers go to Stripe directly; we never receive them. Why: to take, hold, release and refund payments. Basis: contract, and our legal duty to keep financial records.
- Payouts (artists) — your bank account is held by Stripe Connect; we see whether payouts are set up and Stripe's account reference, never your bank details. Why: to pay you. Basis: contract.
- Push notification token — Why: to send you the notifications you've turned on, such as a new job nearby or a message. Basis: consent; turn them off any time in your device settings.
- Support emails you send us — Why: to answer them. Basis: legitimate interests.
- Telling Meta you joined (only if you say yes) — when you create an account, and when you make your first paid booking, we tell Meta (Facebook and Instagram) that it happened: whether you joined as a client or a photographer, the booking's value, and a scrambled (SHA-256 hashed) copy of your email address and our account number for you, plus the network address and device type your phone used. Why: so our ads on Facebook and Instagram reach people like you. Basis: consent — asked once in the app (on iPhone, by Apple's "Allow tracking?" question), and nothing is sent without a yes.
We do not sell your data. Apart from the item above, which only happens with your yes, we don't use your data for advertising. The app contains no analytics or crash-reporting service.
02 Who else handles it
We use other companies to run PixIt. They only get what they need for their job, under a contract that stops them using it for anything else.
- Supabase — hosts our database and files. Stored in London, UK.
- Stripe — takes payments, pays artists out (Stripe Connect) and runs the identity check. US and EU. Stripe is the controller for card, bank and identity-document data under its own privacy policy.
- Apple and Google — sign-in, push notifications and app distribution. US.
- Discord — sign-in, if you choose it. US.
- Resend — sends our account emails (sign-in codes and links). Sent from the EU (Ireland).
- Hostinger — hosts this website and our hello@wearepixit.app mailbox. UK.
- Meta (Facebook and Instagram) — only if you said yes to the last item in section 01. Meta matches the scrambled details against its own accounts to measure and target our ads, and is a controller of that data under Meta's own privacy policy. Ireland and US.
- Photon (komoot) and OpenFreeMap — turn the address you type into a place, and draw the map. Your search text and the map area you're looking at are sent to them; nothing that names you. Germany / EU.
Where a provider is outside the UK, the transfer is covered by the UK International Data Transfer Addendum or the UK's adequacy regulations for that country.
When a client books an artist, the artist sees the client's first name, the job details and the shoot's location. Clients see artists' public profiles, portfolios, ratings and prices. Nobody else receives your data unless the law compels us — a court order, or a lawful request from the police or a regulator — or someone's safety depends on it.
03 How long we keep it
- Your account: while it exists. Delete it and your sign-in, name, photo, city and portfolio are removed immediately, and if you were verified we tell Stripe to erase your ID document and selfie.
- If you never booked or worked a shoot, everything goes with it and nothing of you remains.
- If you did, UK tax law requires us to keep the financial record of each booking for six years. We strip your name, photo, location and profile out of it, so what stays is no longer about an identifiable person — it reads "Former member". Messages and reviews attached to those bookings stay with them, under that name, for the same period so disputes can still be resolved.
- Push tokens are deleted when you sign out on that device.
- Your yes or no to Meta, and a note of which of the two events we sent, is kept while your account exists and deleted with it. What Meta keeps after we send it is governed by Meta's policy.
- Backups held by our hosting provider roll over within days, after which deleted data is gone from them too.
04 Your rights
Under UK data-protection law (the UK GDPR and the Data Protection Act 2018) you can ask us to:
- show you what we hold about you (a copy, usually within a month);
- correct it;
- delete it — which you can also do yourself, any time, from your profile in the app: Delete my account;
- give you a copy in a form you can take elsewhere;
- stop using it for a particular purpose, or object to our legitimate-interests uses;
- withdraw consent for anything based on it, like location, notifications, or telling Meta you joined — on iPhone in Settings › Privacy & Security › Tracking, on Android with the switch on your profile in the app. Nothing more is sent from then on.
Email theitgroupapps@gmail.com and we'll reply within one month. If you're not happy with how we handle it you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
05 Children
PixIt is not for anyone under 18. We don't knowingly collect data from them, and the identity check stops anyone under 18 trading. If you think a child has given us data, email us and we'll delete it.
06 Security
Data is encrypted in transit and at rest with our hosting providers. Access to it is limited to the people who need it to run PixIt. No system is perfect; if we ever have a breach that puts you at risk we'll tell you and the ICO as the law requires.
07 Cookies and tracking
The app sets no cookies; it keeps your sign-in on your own device. This website sets none either — see our Cookie Policy.
Telling Meta that you joined or booked (section 01) counts as "tracking" in Apple's terms, so on iPhone we ask with Apple's own "Allow tracking?" question and send nothing unless you tap Allow. On Android we ask the same question in the app. Either way it is only those two events, sent from our server — there is no Facebook or Meta code inside the app watching what you do.
08 Changes
If how we handle data changes, this page is updated first and the effective date above changes. For anything significant we'll tell you in the app or by email.
09 Contact
- Data controller: Iam The Protagonist Ltd, trading as PixIt and The It Group
- Registered in England & Wales, company number 16842280
- Registered with the Information Commissioner's Office, registration number ZC272634
- 60 Hay Lane, London, NW9 0NB, United Kingdom
- Email: theitgroupapps@gmail.com