heycamy
Your photos, your albums, our promises
heycamy is a voice-driven AI photographer. It shoots, makes collages and albums, and sends them to the people you choose. This page explains what we collect to do that, who helps us, how long we keep it, and exactly when we hand anything over.
Consenting adults, and zero tolerance
We don't monitor or interfere with private sharing between consenting adults. If you're 18 or older and share private, intimate moments with another adult who wants them, we don't browse, judge or moderate those albums. We act when an album is reported to us, or when we otherwise learn of illegal content.
Zero tolerance for:
- child sexual abuse material, or any sexual content involving a minor, including drawn, edited or AI-generated;
- sextortion, blackmail and threats;
- sharing intimate images without the consent of the person in them ("revenge porn"), including deepfakes;
- recording someone intimately without their consent;
- harassment and stalking;
- trafficking and coercion;
- pretending to be someone else to get intimate images.
Any of these gets the album locked and preserved, your device permanently banned, and a report to law enforcement, and to NCMEC whenever a child is involved. Child sexual abuse material is always reported, as US law requires. See the 18+ policy.
What we collect
- Albums you share: the photos and videos in them, their title, the note sent with them, the sender and recipient names you give, and when they were made and expire.
- An install ID: a random ID for your copy of the app, sent with every album request. It's how we know which phone made, opened or reported an album. It isn't your name, phone number or advertising ID.
- Phone numbers, in hashed form: when you share an album with people by text or from your contacts, the app sends their phone numbers, and yours if the app knows it. We keep only a keyed hash of each number (a one-way code that can be matched against a number we're given, but can't be turned back into it), so we can find what a person has shared when they're reported. We never store the numbers themselves.
- Opens and reactions: when an album is opened in the app, we note the install ID, the time, the platform and the country. We keep the reactions people leave.
- 18+ confirmations: for private albums, when you confirmed, the wording you agreed to, your install ID and your IP address.
- Payments: for paid albums (only albums that aren't private can be sold; private albums never take money), what was bought, when, how much, the payment reference from Stripe or the App Store, and which seller account was paid. We never see or store your card number.
- Reports: what you tell us when you report an album, and the details of the album you report.
- Launch sign-ups: if you ask us to tell you when heycamy launches, the contact details you give and the wording you agreed to.
What we use it for
- Making, delivering and expiring your albums, and taking payments for them.
- Keeping heycamy safe: enforcing the 18+ policy, handling reports, banning devices that break it, and preserving evidence of illegal activity.
- Meeting our legal obligations.
We don't sell your data, and we don't use your photos for advertising.
Who helps us
- Cloudflare hosts heycamy and stores albums and records.
- Stripe and Apple's App Store process payments.
- ElevenLabs makes the voices you hear, and a vision model on OpenRouter looks at a photo when you ask the AI photographer about it.
They only get what they need for that job.
Expired content & legal requests
Expired doesn't mean erased. When an album expires, no one can open it again. But we keep it locked on our servers for 30 days so that we can preserve evidence of anyone taking part in illegal activity. After 30 days we delete it.
We only unlock it for a court order. If a court order is delivered to us, we follow the rules and regulations of the country that issued it, unlock the album and hand over its content, the trail of money and who it was shared with. We will not unlock your content without a court order.
Reported albums are different. If an album is reported and we lock it while it is still live, we may give its content and records to law enforcement and NCMEC without a court order. If it had already expired when we locked it, its content still only leaves for a court order.
While an album is locked we keep its photos and videos, its title and note, who made it (install ID), who it was shared with (names and hashed phone numbers) and who opened it, its reactions, its 18+ confirmations and its payment records.
For each court order we record the country, the court, the order's reference and date, the authority that asked and the order itself, and who at heycamy handled it. Releasing an album keeps it locked beyond the 30 days for as long as the case needs. Every look at a released album is logged.
Separately, a reported album is locked and preserved straight away, whether or not it has expired, and apparent child sexual abuse material is reported to NCMEC as US law requires. Content from an album locked while live can go with that report; content from an album that had already expired needs a court order. See the 18+ policy.
How long we keep things
- Albums: every album expires. A private album expires when its sender chooses, at most 7 days after it's shared; every other album expires 7 days after it's shared, or sooner if the sender chooses. Then it's locked for 30 days, then deleted.
- Opens, reactions, hashed phone numbers and payment records: as long as the album they belong to.
- 18+ confirmations, reports, bans and court-order records: kept permanently, because they're the record of who agreed to what and what we did about it.
- Reported or released albums: as long as the investigation or case needs them.
Your choices
You choose what goes into an album, who it goes to and how long it lasts. Private albums open only in the heycamy app, where screenshots and screen recordings are blocked. Depending on where you live, you may have the right to ask what we hold about you, to correct it or to delete it. We'll honour that unless the law, or the evidence a court order or an open report needs, requires us to keep it.
Children
Private albums are for adults only. If you think a child's images are on heycamy, report it.
Changes and contact
When this policy changes in a way that matters, we'll ask you to confirm it again in the app. To report an album or reach us about safety, use heycamy.app/safety.
Last updated October 8, 2026.