This Privacy Policy explains how Torvmark Labs, operating under the Torvi Studio brand (we, us, our), handles information in connection with One More (the App), our photo booth for iPhone and iPad.
On this page
1. Who is responsible
Torvmark Labs (sole proprietorship, organisation number 938 284 792), Hovsveien 27D, 1769 Halden, Norway. Contact: hello@torvistudio.com. Torvi Studio is our brand.
We are responsible for personal information we handle to provide and support One More, including support correspondence. You choose the content photographed, imported, stored and shared with the app. We do not receive a central, administrable copy of your photo library. Apple handles its own account, payment and platform services under its policies.
For processing for which we are responsible, we use contract performance (GDPR Article 6(1)(b)) for requested app functionality and contractual support; legitimate interests (Article 6(1)(f)) for necessary troubleshooting, security and general enquiries, balanced against your rights; and legal obligation (Article 6(1)(c)) where applicable. A device permission is a technical choice, not a blanket legal basis or consent from everyone pictured. Hosts must inform guests and establish any basis or permission required for their photography and sharing.
2. Information we and our partners handle
One More stores event names and dates, captions, templates, imported backgrounds and logos, settings, completed photos, thumbnails and original images from photo sequences locally. These may include names, faces and other information you choose to record.
The camera is used for photography and QR scanning when opened. Optional hand-gesture and person detection run on the device using Apple Vision. They do not identify who a person is or create identity profiles. Camera images are not sent to an AI service for analysis; saved photos can still sync to iCloud if you enable sync.
Face ID or the device passcode can protect host access. The app receives an authentication result, not biometric templates or the passcode. Imports use the files you select through Photos or Files. Saving to Photos requires the relevant permission. The public mobile version does not record microphone audio or access contacts or location.
3. Storage, sync and connected services
No separate Torvi Studio account is required. Optional sync uses CloudKit in your private iCloud database under your Apple Account. It can transfer events, custom templates, logos, backgrounds, finished photos and originals between devices. Associated text, date and layout metadata, technical record IDs, account context, change status and file checksums support sync and duplicate detection.
Sync runs while the app is active and depends on network access and available iCloud storage. It is not an independent historical backup. Turning it off retains local and already synced content. Device backups are separate and may contain app data depending on your system settings. We do not promise that uninstalling the app removes backups.
The local remote shutter uses encrypted MultipeerConnectivity to exchange pairing IDs or invitation tokens, event name, booth status, countdown, photo number and control commands. It does not send the photo library to the remote controller. The Watch companion exchanges event name, status, countdown and shutter commands through WatchConnectivity. A connected audience screen may show live camera images and saved photos.
4. Purchases and subscriptions
Apple processes payment. StoreKit provides verified purchase entitlements and product/transaction information so the app can activate and restore Basic or Plus. We do not receive your payment-card details. Store purchase history is separate from your photo library.
Basic, Plus and the Basic-to-Plus upgrade are one-time, non-consumable purchases. The public mobile version has no subscription. See the terms for watermark behaviour, upgrades and restoration.
5. Analytics, advertising and consent
The public mobile app has no advertising SDK, third-party analytics SDK, advertising tracking or photo upload to a Torvi Studio server. It uses local OSLog diagnostics, including purchase error codes and sync progress. It does not implement its own external crash-report upload. Apple may process diagnostics and share reports according to your platform choices; TestFlight has separate feedback, crash and usage reporting.
Camera, Photos, local network, iCloud and optional detection controls serve separate functions. Accepting these terms or granting camera access is not consent from photographed guests. Turn off hand gestures or person detection in the app and change system permissions in your device settings.
These One More pages use the site's functional language and theme preferences, shared across Torvi Studio subdomains, with cookies lasting up to one year and local storage as a fallback. Hosting may process IP addresses, request times, browser information and requested URLs for delivery and security. The website privacy overview separately describes services used elsewhere on the site, including any newsletter tools. They are not embedded analytics or advertising in One More.
6. Data sharing
Apple provides iCloud, StoreKit and optional platform diagnostics. See Apple Privacy Policy and the privacy information for the Apple services you enable. Processing locations and international safeguards depend on those services; this policy does not promise a particular server country or end-to-end encryption for every data type.
Sharing, exports to Photos or Files, connected displays and printing happen at your direction. Receiving apps, storage services, printers and other people may retain copies under their own rules. There is no public web gallery or guest download link in the public mobile version.
When you contact support, we receive your email address, message, attachments and app/device details you send. Email is handled through Webhuset. Please use redacted or non-personal examples instead of identifiable guest photos. We do not sell your personal information. If you need information about safeguards relevant to data we handle, contact us.
7. Retention and deletion
Photos and events have no automatic expiry in the app. You control local removal. Deleting an event does not automatically delete its finished photos: memories retain their original names and files and must be managed separately.
With iCloud enabled, the explicit delete-from-all-devices action for a memory removes its cloud image attachments when sync succeeds and propagates deletion. A deletion record with metadata is retained to prevent the photo returning. This is not an immediate erasure of every copy or all metadata.
Ordinary local deletion, disabling sync or uninstalling is not cloud deletion. Synced content can download again. Exported files, Photos-library copies, shared copies, printouts, device backups, Apple purchase history and support correspondence are separate.
We retain support correspondence for as long as needed to handle the enquiry, relevant follow-up and any applicable legal claims or obligations, then delete it when it is no longer needed. No fixed automatic deletion period is promised for email, provider backups or server logs. Contact us about deletion of information you have sent to support.
8. Your rights and choices
You can edit or remove local content, export finished and individual photos, disable sync, disable optional detection and change camera, Photos and local network permissions in system settings. Export is not a promise of a complete, restorable app backup. Use the support guide for deletion and sync steps.
Where applicable, you may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. If processing relies on consent, you can withdraw it without affecting earlier lawful processing. Contact us about data we hold; we may need proportionate identity verification. We cannot centrally retrieve or erase your device library or all copies held by recipients. For Apple's account data use Apple's privacy controls.
You can complain to Datatilsynet or your local data protection authority. We normally respond to rights requests within one month; legally permitted extensions may apply, and we will explain them.
9. Children
One More is a photo booth set up by an event host, not a children's social network. It does not require guest accounts or use advertising profiles. Photos may nevertheless include children. Hosts should provide appropriate information, obtain any required guardian permission and avoid unnecessary public display or sharing. Contact us if a child's personal information has been sent to support and should be removed.
10. Changes to this policy
This policy describes the public mobile app, not experimental Party cloud sharing, direct Instax printing or other development-only features. We will update it when relevant functionality or data handling changes. The revision date above identifies this text. Significant changes will be communicated where required.
11. Contact
Torvmark Labs (sole proprietorship, organisation number 938 284 792), Hovsveien 27D, 1769 Halden, Norway. Contact: hello@torvistudio.com. Torvi Studio is our brand.
For questions about your library, purchases or privacy, contact us. Send the app version, device and a description of the issue, without passwords, pairing codes or unnecessary personal photos.