Privacy Policy

1. Introduction & Service Provider Identity

Fliqa Album is a digital wedding album service operated by FliqaIndia Private Limited ("FliqaIndia", "we", "us", or "our"). We provide a dedicated Android application (package identifier com.fliqaindia.album) and associated web services at album.fliqaindia.com.

This Privacy Policy governs the collection, use, and disclosure of technical and session information when you access or use the Fliqa Album Android application and website. Our architecture is deliberately designed around a Privacy-by-Design model: album viewers are never required to register an account, submit email addresses, or share social credentials to view their albums.

2. Scope of This Policy

This policy applies to:

• The Fliqa Album Android Mobile Application: The native application used by couples, family members, and invited viewers to stream and view wedding albums.
• The Fliqa Album Public Website: Public informational and support pages hosted at https://album.fliqaindia.com.
• The Private Administration Console: The authenticated management portal used exclusively by authorized photography studio personnel.

3. Information We Collect

We strictly minimize the collection of personal information based on your interaction with the service:

A. Album Viewers (Android Application)

We do not require user account registration, names, phone numbers, or passwords from viewers. To provide the service, we process:

• Album Access PIN: The 8-digit numeric code you enter to open your wedding album. PINs are verified securely against cryptographic hashes.
• Local Device Session Token: Upon successful PIN verification, an encrypted session token is stored on your device via expo-secure-store. This token allows your device to resume viewing within a 24-hour window without re-entering the code.
• Technical Diagnostic Logs: Standard server access logs including IP address, user-agent string, operating system version, and HTTP response codes to ensure platform stability and prevent denial-of-service attacks.

B. Album Content (Provided by Studio Administrators)

• Album Metadata: Album title, couple names, page count, and status flags (Draft, Published, Disabled).
• Master PDF Files: The multi-page digital wedding album documents created and uploaded by your authorized photography studio.
• Curated Audio: Background soundtrack MP3 files assigned to the album.

C. Authorized Studio Administrators

For studio administrators accessing the private console, we collect authorized email addresses and authentication credentials managed securely through Firebase Authentication, alongside a session cookie (fliqa_admin_session).

4. How We Use Information

We process collected information solely for the following operational purposes:

• To verify your 8-digit PIN and stream the matching wedding album PDF to your Android device.
• To generate temporary, 2-hour presigned Cloudflare R2 streaming URLs that prevent unauthorized public scraping of high-resolution wedding photography.
• To maintain platform security, enforce rate-limiting against automated brute-force attacks, and monitor system health.
• To respond to official support communications submitted to support@fliqaindia.com.

We do NOT sell, rent, monetize, or share your wedding photographs, names, or access logs with third-party advertisers or data brokers.

5. Third-Party Infrastructure & Data Processors

Fliqa Album relies on industry-standard, SOC-2 compliant cloud infrastructure providers to host and deliver album content:

• Google Cloud & Firebase: Cloud Firestore and Firebase Authentication hosted in the asia-south1 (Mumbai, India) region for lowest latency and data sovereignty.
• Cloudflare R2: Private cloud object storage used to store encrypted PDF album masters and audio assets, served via temporary signed S3-compatible URLs.
• Hostinger International: LiteSpeed web application hosting and production server infrastructure for the album.fliqaindia.com domain.

6. Security Practices

We implement rigorous technical and administrative security measures:

• HTTPS / TLS 1.3: All communications between your Android device, web browser, and production servers are encrypted in transit.
• Zero Public Buckets: Cloudflare R2 buckets are completely private; no file can be accessed without a short-lived cryptographic signature.
• Rate Limiting: Automated defenses restrict rapid sequential PIN guesses to mitigate brute-force attempts.
• Hardware-Backed Storage: On supported Android devices, session tokens are stored using Android Keystore hardware-backed encryption via expo-secure-store.

7. Data Retention & Deletion

Temporary viewing sessions stored on your Android device automatically expire after 24 hours. You may also immediately delete your local session by clearing app storage in your Android device settings.

Album master PDFs and Firestore records are retained for as long as your photography studio maintains your album on the platform. If you wish to request the permanent deletion of your album master from cloud storage, please review our Data Deletion Guidance or email support@fliqaindia.com.

8. Children's Privacy

Fliqa Album is a digital wedding album viewing service intended for couples, families, and adult event guests. We do not knowingly collect personal information from children under 13 (or under 16 where applicable). If a parent or guardian discovers that album content contains imagery of a minor that requires removal, please contact us immediately.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational or regulatory changes. The current version will always be available at https://album.fliqaindia.com/privacy-policy with the updated revision date.

10. Contact Information

For questions, privacy requests, or data deletion inquiries regarding this policy, please reach out to our team at: