Privacy Notice

1. Who we are

This Privacy Notice explains how Paahun Global Ltd (trading as SNOVA) handles personal information when organisers create events, guests scan event QR codes, use the browser camera, upload or capture photographs/videos, view galleries, contact us, or use optional social-publishing features.

2. Our roles

SNOVA may act in different data-protection roles depending on the activity:

• Controller: for organiser account data, billing, customer support, service security, fraud prevention, legal compliance, and SNOVA's own website analytics/communications.
• Processor: for Event Content and guest-related information processed solely on an event organiser's instructions, where the organiser determines the purpose and means of processing.
• Independent controller: where SNOVA must process information for its own legal obligations, security, abuse prevention, or to exercise or defend legal claims.

3. Personal information we may collect

4. Photographs, videos and personal data

A photograph or video may be personal data where an individual is identified or identifiable. SNOVA does not claim ownership of Event Content. The organiser and/or contributor remains responsible for the content they choose to capture, upload, display or publish, subject to the licences in our Terms.

5. Lawful bases

Where legitimate interests are used, SNOVA will assess necessity, proportionality and impact on individuals, with extra care where children may be affected.

6. Children and young people

SNOVA organiser accounts are intended for adults aged 18 or over. Because family, school, community and public events may include children, SNOVA treats children's information as requiring enhanced protection.

• A guest under 13 must not independently create an account or provide consent to an online service where parental authorisation is required; use should be supervised or authorised by a parent/guardian.
• Guests aged 13-17 should use SNOVA only where the event organiser permits this and in a manner appropriate to their age.
• Event organisers must consider whether they have an appropriate lawful basis and any necessary parent/guardian permissions for capturing, displaying or publishing images of children.
• SNOVA will not use event photographs of children for its own marketing without separate, specific permission from the person with appropriate authority.
• SNOVA should not enable public social posting of photographs featuring children unless the organiser expressly confirms that the necessary permission/lawful basis is in place.
• Face measurements are made on the phone for each photo and stored with it. A guest is only matched to photos when that guest takes a selfie for Find my photos (see section 15). Measurements are never used to identify a child, and organisers of children's events should keep guest selfies switched off.

7. Sharing personal information

We may share information with service providers that help us host, store, secure, communicate, process payments, provide AI and image analysis, or support social post preparation. Where an organiser uses Social Studio, selected images and event details are sent to our AI provider to analyse images and draft captions, and a second AI model scores the draft before it is offered for approval. Where an organiser has connected a Facebook Page or Instagram business account, the approved post, its images and its caption are sent to Meta for publication on that account, and performance figures are read back from Meta. Providers must be subject to appropriate contractual and security obligations. We may also disclose information where required by law, to protect rights/safety, or in connection with a corporate transaction.

8. International transfers

Where personal information is transferred outside the UK, we will use an applicable UK transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to approved EU Standard Contractual Clauses, together with supplementary safeguards where required.

9. Retention

We retain information only for as long as necessary for the stated purposes. Event Content retention should follow the plan/event settings and our published retention schedule. Organisers should be able to delete events and content, subject to limited backups, legal retention duties and security logs.

10. Your rights

• Access your personal information.
• Correct inaccurate or incomplete information.
• Request erasure where applicable.
• Restrict processing in certain circumstances.
• Object to processing based on legitimate interests or direct marketing.
• Request portability where applicable.
• Withdraw consent at any time where processing is based on consent.
• Complain to the UK Information Commissioner's Office (ICO).

To exercise rights, contact privacy@snova.uk. We verify identity proportionately and answer requests normally within one month under UK GDPR, unless a lawful extension applies. Event organisers can also delete their events, photos and prepared posts directly inside the app, which removes the underlying records, and disconnecting a connected Facebook Page or Instagram account deletes the stored access token immediately. Where SNOVA is acting only as processor for an event organiser, we may refer the request to that organiser or assist them.

11. Automated and AI-assisted processing

SNOVA uses AI at four points in Social Studio: analysing gallery images for subject, mood and technical quality; drafting captions, hashtags and post ideas; scoring each draft with a separate model that rates specificity, fit with the chosen image and factual restraint; and summarising how past posts performed so future suggestions stay closer to what works for that organiser. AI processing is carried out by our AI provider on our instructions.

The organiser reviews and approves posts. On the automatic setting, a post that scores highly enough may publish without a further review, after the organiser has approved the first post of that run — the organiser remains responsible for what is published either way, and can switch automatic publishing off at any time. The score is a guide, not a guarantee of quality, accuracy or suitability. SNOVA does not use these features to make legal or similarly significant decisions about individuals, and does not use guest photographs to train third-party AI models.

12. Security

We use appropriate technical and organisational measures designed to protect personal information, including access controls, encryption in transit, secure authentication, logging, backups, least-privilege access and supplier due diligence. No service can guarantee absolute security.

13. Changes and contact

We may update this notice as the service or law changes. The current version will be posted on snova.uk. Privacy contact: privacy@snova.uk.

14. The Snova app

The Snova app for iPhone and Android works like the website, with a few extra permissions that you choose to give in your phone's settings.

• Camera and microphone — to take photos and video clips for the event you joined. Nothing is recorded unless you press the shutter.
• Photos — only to add a picture you choose from your phone, or to save event photos to your phone. The app asks for add-only access and never reads your photo library on its own.
• Location — only for events where the organiser has turned on venue lock, to check that a photo is taken at the venue, and for organisers who choose 'use my current location' to set the venue. Location is used when the photo is taken; it is not tracked in the background.
• Face measurements — the app measures faces in each photo on your phone. These measurements are stored with the photo and used only for Find my photos and grouping (see section 15).
• Notifications — if you allow them, we store a notification token for your device to tell you about your event (for example, when your photos are ready). You can turn notifications off at any time in your phone's settings.
• Device identifier — guests don't create an account. The app creates a random identifier on your phone so your photos, your gallery and any block an organiser applies stay with your device. It isn't linked to your name unless you give one when joining.
• Sign in with Apple and Google — organisers can sign in with Apple or Google instead of a password. We receive your name and email address (or Apple's private relay address) from them, and nothing else.
• In-app purchases — paid event plans bought in the app are paid through Apple or Google. They handle your payment details; we receive confirmation of the purchase, the plan and the event it is for.

15. Finding your photos with a selfie

Some events let guests find the photos they appear in by taking a selfie. Comparing your selfie with the event's photos involves processing biometric data, so we only do it when you choose to: taking the selfie is your explicit consent under Article 9(2)(a) UK GDPR. You can use the event without it.

• Your selfie is used only to find your photos in that event. It is not used to identify you anywhere else, not shared with other guests, and not used to train AI models.
• The selfie and the face data made from it are deleted when the event's photos are deleted, or sooner if you ask us or remove it yourself.
• When setting up an event, the organiser decides whether guests are asked for a selfie when they join: off, optional or required. The event's page says so before you join. Finding your photos after the event always asks for a selfie, which you can choose not to take.
• You can withdraw your consent at any time by contacting us; this does not affect processing that took place before you withdrew.

Face geometry on photos: when a photo is taken with the Snova app, the phone itself measures the position and shape of any faces in it (face geometry), and those measurements are stored with the photo. They are used only to power Find my photos and to group photos of the same people within that event. They are never used to identify anyone by name, never shared outside the event, never sold and never used to train AI models, and they are deleted with the photo.

16. Location and venue lock

When an organiser turns on venue lock, the location of your phone (or the location stored in a photo) is compared with the venue when the photo is taken, so only people at the event can add photos. We keep the result of that check with the photo, and the location only as long as the photo itself.

17. Deleting your account

Organisers can delete their Snova account at any time in the app (More → Delete account) or in Profile on snova.uk. This removes your account and your events, photos, guest records and prepared posts, apart from limited records we must keep for legal, tax and security reasons. Guests who don't have an account can ask us to delete their photos and selfie at privacy@snova.uk.