Privacy Policy

Bibbit ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information we collect

SmugMug account data

When you sign in with SmugMug, we receive and store an OAuth access token that allows Bibbit to read your galleries and write keyword metadata on your behalf. We also store your SmugMug account identifier and display name.

Scan results

When you run a bib scan, Bibbit processes your photos using our AI service. We store the bib numbers detected in each photo and the photo identifiers returned by SmugMug. We never download or permanently store your actual photo files. Photos are fetched temporarily, processed, and discarded.

Roster data

If you upload a participant roster (a CSV of bib numbers and names), Bibbit stores those bib-to-name mappings so it can label and organise photos by participant. Roster data is associated with your event and is deleted when you delete the roster entries or the event.

Face recognition data

When you run a face scan, Bibbit detects faces in your photos and computes a numerical face embedding (a mathematical representation of facial features) for each one. These embeddings, the face's location in the photo, and the photo's SmugMug URL are stored so Bibbit can group photos of the same person across your gallery. Face embeddings are biometric identifiers; they are associated with your scan, used only to group photos within your own galleries, never sold or shared, and deleted when you delete the scan.

Usage data

We collect standard server logs including IP addresses, browser type, and pages visited. This information is used to operate and improve the service.

2. How we use your information

• To authenticate you and connect to your SmugMug account.
• To scan your event albums and detect bib numbers and faces.
• To write keyword metadata back to your SmugMug gallery.
• To operate, maintain, and improve the Bibbit service.
• To respond to support requests you send us.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-party services

Bibbit integrates with the following third-party services:

• SmugMug — We use the SmugMug API to access your galleries and write keyword metadata. Your use of SmugMug is governed by SmugMug's Privacy Policy.
• AI inference services — Photos are sent to our AI processing infrastructure for bib detection and face recognition. These services do not retain photo data after processing.

4. Data retention

We retain your scan results and account information for as long as your account is active, and only as long as needed to provide the service.

You can delete individual scans at any time from within the app. Deleting a scan immediately and permanently removes its detected bib numbers and all associated face recognition data, including the face embeddings computed from that scan.

You can delete your entire account from your account settings, or by contacting us at hello@bibbit.io. When you delete your account, we immediately remove your profile information and disconnect your linked galleries. Your account stays recoverable for 30 days in case you change your mind — if you sign back in with the same email within that period, your account and scans are restored. After 30 days your account can no longer be recovered, and we permanently delete your scans and all associated face recognition data.

Face recognition data (face embeddings) is destroyed at the earliest of these events: when you delete the scan it belongs to, or within 30 days of deleting your account. We do not retain face embeddings for longer than needed to group photos within your galleries.

5. Security

We use industry-standard measures to protect your information, including encrypted connections (HTTPS) and secure storage of OAuth tokens. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Children's privacy

Bibbit is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us so we can delete it.

7. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated date. Your continued use of the service after changes are posted constitutes your acceptance of the revised policy.

8. Contact us

If you have questions about this Privacy Policy or how we handle your data, please contact us or email us at hello@bibbit.io.