Privacy

Private sharing, without a permanent photo library.

Last updated: August 17, 2026.

Who operates AasaanShare

AasaanShare is operated in New Zealand by Ashish Ansurkar. Ashish Ansurkar is the agency that collects and holds the personal information described in this statement. Privacy enquiries can be sent to [email protected].

How album media is handled

When an owner prepares an album, AasaanShare uploads the selected original photos and videos together with generated display renditions to private cloud object storage. Authorized viewers receive short-lived, signed media links delivered through a content delivery network. This lets an album remain available while the owner's phone is offline.

Shared media is used to provide the album and is not published as a public photo library, sold, or used for targeted advertising. Viewers can access only albums for which their device has a current authorization.

Information we process

To provide private sharing, we process an owner email address, hashed sign-in and session credentials, device credentials, People display names and invitation email addresses, invitation and access records, album expiry and revocation state, and limited audit events. For selected album media, we process the file content and technical metadata needed to store and deliver it, such as generated media identifiers, media type, dimensions, file size, and integrity hashes.

We collect limited reliability measurements such as upload and download totals, timing buckets, rendition types, and service errors. Operational logs and security controls may also process request identifiers, timestamps, source addresses, and a salted one-way source-address hash. We do not intentionally include photo or video content in reliability diagnostics.

Why we use it

We use this information to authenticate owners, register invited devices, authorize and revoke access, deliver sign-in and invitation emails, prepare and deliver album media, investigate reliability, and prevent abuse. We do not sell personal information or use it for targeted advertising.

Joining the early-access list is voluntary. An owner must provide the account, device, and selected media information needed to create and operate an album, and an invited viewer must provide the device and verification information needed to access it. Without that information, AasaanShare cannot provide the relevant account, sharing, or viewing feature.

Service providers

We use Cloudflare Workers to run the application and media delivery service, Cloudflare D1 for account, authorization, and album metadata, Cloudflare R2 and Cloudflare's network for object storage, content delivery, DNS, and web protection, and Resend for email. These providers process information to operate their respective services. Depending on their infrastructure and service location, information may be processed or stored outside New Zealand. AasaanShare remains responsible for personal information held by these providers on its behalf.

Retention and your choices

Album access ends at its configured expiry or when the owner revokes it. Revocation starts deletion of the album's stored media, but deletion and content-delivery cache removal may take time or require an operational retry. Expiry prevents new authorized access but does not itself guarantee immediate deletion from storage. Superseded media may also remain until storage cleanup is completed. During the closed beta, AasaanShare does not promise a fixed maximum deletion period. Revocation cannot erase files a viewer has already downloaded, copied, or captured.

We keep account, device, authorization, audit, and security information only as long as needed to operate, secure, and meet legal obligations for AasaanShare. You can ask to access, correct, or delete your account information by emailing [email protected].

Early-access list

When you join our early-access list, we collect your email address, device preference, subscription state, and optional campaign labels. Cloudflare Turnstile and a salted source-address hash protect the form from abuse. Every update email includes an unsubscribe link.

Contact

For privacy questions, account deletion, or a security concern, contact [email protected].