Privacy Policy
Last updated 12 October 2026
The short version
- Your photos are analysed on your own device. Your photo library is never uploaded just because you joined a space.
- A photo or video only leaves your device when you approve someone's request for it. It is relayed to them and deleted from our servers within 7 days.
- To make searching possible we store descriptions of the photos you add to a space, including face descriptors, which are biometric data. We only do this with your explicit consent, and you can withdraw it at any time.
- No adverts, no selling your data, and no tracking or analytics in the app or on this website.
- You can ask us to see, correct or delete your information at any time.
1. Who we are
Constellation (the mobile app, its service and this website) is provided by Pendragon Development ("we", "us"). We are the controller of the personal information described here under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Questions about privacy, or any request about your information: support@pendragondevelopment.com.
If an organisation (for example an event organiser) runs a space you join, they decide who can join it. They do not get access to your photos or the descriptions of them unless you approve a request.
2. What we collect and why
| Information | Why we need it | Lawful basis |
|---|---|---|
| Account details: your name, email address and password (stored only in scrambled, hashed form) | To create your account and sign you in | Contract |
| Spaces: the spaces you create or join, their names, and who is a member | To run private spaces and show members what they belong to | Contract |
| Details of photos and videos you add to a space: file name, type, size, dimensions, capture date and a fingerprint (hash) used to spot duplicates | To list your items in the space and find exact duplicates | Contract |
| Analysis results for those items, created on your device: where faces are, face descriptors (numerical "embeddings"), detected objects, and a similarity descriptor of the whole image | So that searches by other members can be matched against your items on your device, and so your index can be restored on another device | Explicit consent (face descriptors are biometric data) |
| Search requests and responses: the example face or image descriptors, dates and options you search with, and other members' approve/reject answers with the matching item IDs | To pass your search to the space's members and their answers back to you | Explicit consent (they can contain face descriptors) |
| Photos and videos you approve for sharing | To deliver them to the person who asked. See section 3. | Contract |
| Notification token, if you allow notifications | To tell you about new requests and answers | Contract |
| Technical logs: time, the part of the service used and error details | To keep the service secure and fix problems. Logs never contain your photos. | Legitimate interests |
"Contract" means we need the information to provide the service you've chosen to use. "Explicit consent" means we ask you before the app analyses or shares face data, and you can withdraw consent at any time by removing your items from a space or deleting your account; withdrawing doesn't affect anything already done. "Legitimate interests" means it is needed to run a secure, working service and does not override your rights.
3. Your photos and videos
- Analysis happens on your device. The app downloads analysis models to your phone and runs them there. Your originals are not sent to us to be analysed.
- Searches are requests, not downloads. When someone searches a space, matches are found on each member's own device and shown to that member as a request. Nothing is shared unless the owner approves.
- Approved items are relayed temporarily. An approved photo or video is uploaded, encrypted, to a private storage area, made available only to the person who asked through short-lived links, and deleted automatically within 7 days.
- Nobody at Pendragon Development looks through your photos, and we never use them, or the descriptors, to train models or for any purpose other than running Constellation.
4. What we don't do
- No adverts, and we never sell or rent your information.
- No tracking, analytics or advertising SDKs in the app.
- No facial recognition against named identities: searches compare example images, not names.
5. Who we share it with
Other members of a space you're in can see that you're a member and your search requests and answers in that space. Approved photos go only to the person who requested them.
We use these service providers, who process information only on our instructions:
- Amazon Web Services (Amazon Web Services EMEA SARL): hosting, database, temporary file storage and content delivery, in the London (eu-west-2) region.
- Google Firebase Cloud Messaging and Apple Push Notification service: delivering notifications, if you allow them. They receive a notification token and the notification text, not your photos.
We may also disclose information if the law requires it.
6. Where it's stored and how it's protected
Your account and space information is stored in the UK (AWS London region). Content delivery may serve the app's analysis models from locations closer to you. Information is encrypted in transit (HTTPS) and at rest. Access to our systems is restricted to the people who run the service.
7. How long we keep it
| Information | Kept for |
|---|---|
| Approved photos and videos being relayed | Deleted automatically within 7 days of upload, or sooner when the item is removed |
| Search requests and responses | Deleted automatically 30 days after they are made |
| Details and analysis results of items in a space | Until you remove the item, leave or delete the space, or delete your account |
| Account and space membership | Until you delete your account |
| Technical logs | 14 days |
8. Your rights
You have the right to access, correct or delete your information, to restrict or object to how we use it, to receive a copy in a portable form, and to withdraw consent at any time. Email support@pendragondevelopment.com and we'll respond within one month. To delete your account and everything linked to it, email us from the address on your account.
If you're unhappy with how we've handled your information, please tell us. You can also complain to the Information Commissioner's Office at ico.org.uk.
9. Children
Constellation is not intended for children under 13, and we don't knowingly collect their information. If you think a child has given us information, contact us and we'll delete it.
10. This website
This website doesn't use cookies, analytics or third-party scripts. Our hosting provider keeps standard access logs (such as IP addresses) for security.
11. Changes and contact
If we change this policy we'll update the date at the top, and tell you in the app if the change is significant. Contact: support@pendragondevelopment.com.