This policy covers Red Drive — the app for iPhone, iPad and the web (drive.redfluent.com) that photographers and studios use to upload photos and videos and deliver them to their clients through private links — and the servers behind it. Red Drive is provided by Redfluent Pte. Ltd. (“we”, “us”), a company in Singapore.
It covers people with a Red Drive account (photographers, studio staff and studio admins) and clients who open a link a studio sends them. For LorryGo and our websites, see the Privacy Policy.
1. What we collect
If you have an account
- Your email address, and your name if you give it. If you sign in with Google (web only), Google tells us your email address and name.
- Your password, stored only as a one-way hash. We cannot see it.
- Your account ID, your account type (personal or studio), the studio you belong to and your role there, and your storage plan.
- The photos, videos and other files you upload, kept exactly as uploaded — including any information saved inside them, such as camera settings, the date taken or, if your camera or phone recorded it, the location. We also make smaller preview copies, and watermarked previews for albums that have a price.
- What you type into the app: album and folder names, client names, prices, link expiry dates, and your studio’s name, logo and watermark text.
- A device ID: a random number the app creates the first time it is used on a device. Our server keeps only a scrambled (hashed) form of it, with a device label (“iOS” or “Web browser”) and when it was first and last seen. We use it to manage the devices signed in to your account.
- A security log: each sign-in attempt, with the time, the email used, the IP address, the device ID (hashed) and the browser or app identifier (user agent).
On iPhone and iPad the app reads only the photos and files you choose to upload. During a live album, new photos from a camera you connect by cable are uploaded to that album as you shoot.
If you open a studio’s link
- You do not need an account.
- If the studio lets you choose photos, your choices are saved on our server so you can continue on another device. The studio sees them.
- When you download, we record the time, the file, your IP address and your browser identifier. The studio can see the download times and IP addresses for its albums.
- We count how many times a link is opened and when it was first and last opened. This count holds no personal details.
- If you pay for photos, the payment is handled by Stripe. We never see your card details. Stripe tells us whether the payment went through and the email address you entered at checkout.
What we do not do
- No advertising, and no tracking of you across other companies’ apps or websites.
- No third-party analytics, crash-reporting or advertising software in the app.
- Your photos are not sent to any AI service.
- We do not sell your data.
2. Why we use it
- To provide Red Drive: store your files, show them to you, and deliver them to the clients you share links with.
- To sign you in and keep your account secure: send email codes to confirm your address or reset your password, limit repeated wrong passwords, and limit how many devices can use an account.
- To apply your studio’s settings, such as prices, watermarks, retouching orders and storage limits.
- To find and fix faults and to stop misuse.
We do not use your data for any other purpose.
3. Who can see it
- Your studio. If you belong to a studio, its admins — and any staff the studio allows — can see the albums you create in the studio’s workspace.
- People with the link. Anyone who has an album’s link, or scans a live album’s QR code, can open that album. Share links only with people you trust. In albums with a price, clients see watermarked previews until they pay.
- Redfluent, which runs the service, when needed to support it or fix problems.
- Service providers, who may only use the data to provide their service to us:
- Cloudflare — connections to drive.redfluent.com pass through its network; on the web, its Turnstile check protects sign-up and password reset from bots.
- Resend — sends the verification and password-reset emails.
- Stripe — processes payments for photos.
- Google — only if you choose Sign in with Google on the web.
- Authorities, only when the law or a court order requires it.
4. Where it is stored
Your files and account data are stored on servers Redfluent operates in Singapore. Connections are encrypted (HTTPS) and pass through Cloudflare’s global network on the way. Stripe and Google handle payments and Google sign-in under their own privacy policies.
5. How long we keep it
- Files stay until their album is deleted (by you or your studio) or your account is deleted. When a link expires, clients can no longer open it, but the files stay in the account until the album is deleted.
- Deleting an album deletes its files, previews, folders and clients’ choices from our servers. Its payment and download records are kept.
- Uploads that never finish are removed after 24 hours.
6. Deleting your account
- In the app, open the account menu, tap Delete account and enter your password.
- Or email ai@redfluent.com from the address you sign in with and ask us to delete your account. Do this if you signed up with Google and never set a password.
- Deleting erases your email address, name and password, removes your devices, signs you out everywhere and removes you from your studio. Your personal albums are deleted with all their files, and their links stop working straight away.
- Albums you created in a studio’s workspace belong to the studio and stay with it: ask the studio, or email us, to have them removed. If you are the only admin of a studio that has other members, make someone else an admin first.
- Security log entries are kept.
7. Your choices and rights
You can ask what personal data we hold about you, ask us to correct it, or ask us to delete it, by emailing the address below. If you are a client of a studio, you can also contact the studio directly. The studio decides who receives its links, so we may need to involve it to deal with a request about its albums.
8. Contact
- Redfluent Pte. Ltd.: ai@redfluent.com
- If you are not satisfied with our response, you can contact the Personal Data Protection Commission of Singapore (pdpc.gov.sg).
9. Changes to this policy
If we change this policy we update the date at the top. If we start collecting a new type of data, we update it first.