heycamy
Policy notice · Private albums

Private albums: 18+ and zero tolerance

Private albums open only in the heycamy app and expire on a timer. They are for intimate photos and videos between consenting adults. They are not a hiding place. If you use heycamy to make, store or share child sexual abuse material or non-consensual intimate images, we will report you.

Consenting adults are left alone

We don't monitor or interfere with private sharing between consenting adults. If you're 18 or older and share private, intimate moments with another adult who wants them, that's between the two of you. We don't browse, judge or moderate those albums.

We act when an album is reported to us, or when we otherwise learn of illegal content. Then everything below applies, in full.

18+ only

You must be 18 or older to make, send or open a private album.

Private albums may only show adults who consented to being photographed or filmed and to that content being shared with the people you send it to.

No minors. Ever. Not in a photo, not in a video, not in the background, not "as a joke", not "edited", not AI-generated.

The first time you create or open a private album, you confirm you're 18 or older (and, when creating, that everyone shown is 18+ and consented). We keep a permanent record of that confirmation, including the time, your device and your IP address.

Zero tolerance

No warnings. No second chances. We lock the album and permanently ban your device from private albums: no making them, no opening them. We preserve the evidence and report you to law enforcement, and to NCMEC whenever a child is involved.

Reports

Illegal content is prohibited. Reported albums are locked and preserved, and child exploitation is reported to NCMEC and police.

Anyone who receives a private album can report it from inside the app or on the album's page. A reported album is locked immediately, preserved and handed to law enforcement. "Private" means private from other people. It does not mean hidden from the law.

Reporting to law enforcement

When we learn of apparent child sexual abuse material, we are required by US federal law (18 U.S.C. § 2258A) to report it to NCMEC's CyberTipline, and we do. NCMEC makes those reports available to police in the United States and around the world.

The moment an album is reported, we preserve it and the records we hold about it: its photos and videos, the sender and recipient names attached to it, the hashed phone numbers of the person who made it and the people it was sent to, the message sent with it, when it was made and opened, the device IDs of the phones that made and opened it, and the IP addresses from their 18+ confirmations. We provide them to NCMEC and law enforcement, and cooperate with investigations and prosecutions. For an album we locked while it was still live, that includes its photos and videos, without waiting for a court order.

Expiring won't save you once reported. A preserved album is kept, whatever its timer says.

Expired albums & court orders

Expired doesn't mean erased. When an album's timer runs out, no one can open it again, not the sender and not the people it was sent to. But we keep it locked on our servers for 30 days to preserve evidence of illegal activity, then delete it for good. A reported album is kept for as long as the case needs it.

While an album is locked we keep its photos and videos and its trail: who made it, who it was shared with and who opened it.

We only unlock it for a court order. When we receive a valid court order, we follow the laws and regulations of the country that issued it, unlock the album and hand over its content and who it was shared with. We will not unlock an expired album without a court order. Every release is logged.

A report of an album that has already expired still locks and preserves it, and we still make the reports US law requires, but its photos and videos are only handed over for a court order.

Read the full privacy policy.

Here's what we hand to police

When an album is reported, or a court order arrives, we build an evidence bundle and hand it to police and NCMEC. This is what one looks like. A real bundle has every value filled in, and the album's photos and videos as described above.

Example — fictional data

heycamy evidence bundle · SR-7Q4K2M

Bundle 20260314T091240Z-a3f9 · generated 2026-03-14 09:12 UTC by redacted

Case

Safety report
SR-7Q4K2M
Court order
LR-M4TQ8XWD · country, court, reference redacted, date and requesting authority redacted, with a copy of the order

Device and phone numbers

Install ID (device)
redacted
Sender's phone number
redacted (hashed)
Recipients' phone numbers
redacted redacted (hashed)

18+ confirmation

Agreed to
private-v3 as album creator
When
2026-03-02 21:47:05 UTC (server) · 21:47:04 (phone)
Where from
IP address redacted · country US · iOS · user agent redacted

Album

Album
redacted · private · 6 photos
Title and note
redacted · redacted
Made
2026-03-11 22:03:18 UTC
Shared with
redacted by name, and texted to 2 numbers
Opened
2026-03-11 22:05:41 UTC by install redacted · iOS · US
Reported and locked
2026-03-11 22:31:09 UTC

Payments

Sales and gifts
None. Private albums are free to share; they can't be sold and can't receive gifts.

Files and fingerprints

content/…/01.jpg
SHA-256 redacted
content/…/06.jpg
SHA-256 redacted
Records
manifest.json, timeline.csv, shares.csv, payments.csv, consent.csv, summary.html, SHA256SUMS.txt
Whole bundle
SHA-256 redacted

Access log

2026-03-11 22:31 UTC
Album locked and preserved · redacted
2026-03-14 09:12 UTC
Bundle built · redacted · IP redacted · US
2026-03-14 09:20 UTC
Bundle downloaded for police · redacted · IP redacted · US

Every file carries its SHA-256 fingerprint, so any change after we hand it over shows. Every look at it is logged, permanently.

These are serious crimes

In the United States, producing, distributing, receiving or possessing child sexual abuse material is a federal crime under 18 U.S.C. §§ 2251, 2252 and 2252A. Production carries a mandatory minimum of 15 years in federal prison. Distribution and receipt carry a mandatory minimum of 5 years. Prior convictions raise both. It is a crime in virtually every country.

Sharing intimate images of someone without their consent is a crime in almost every US state, under federal law, and in many countries.

Report abuse

Report abuse →

In the app, tap Report this album. Anywhere else, use the form and tell us the album link and what you saw. Do not download, screenshot or forward the content, not even to us.

You can also report child sexual abuse material directly to NCMEC at report.cybertip.org. If someone is in immediate danger, call your local emergency number.

If it's you in the images

If you are under 18, or were under 18 when nude or sexual images of you were taken, Take It Down (takeitdown.ncmec.org) can help remove them from participating platforms, without anyone seeing them. You are not in trouble. You can also talk to NCMEC at report.cybertip.org or 1-800-843-5678.

We mean it. Don't test us.

By making, sending or opening a private album you agree to this policy and our privacy policy.