What we keep,
and what we don't.
We are a small photography community in Pune, not a company with a data department. This page says plainly what we hold, why we hold it, and how to make it go away.
What we ask for
To join a walk we ask for your name, email address and a WhatsApp number, and optionally your Instagram handle and how long you have been photographing. The number is the one thing we genuinely need: it is how the meeting point and any last-minute change of plan reaches you on the morning.
To have an account we store the email address you sign in with. If you sign in with Google we receive your name, email address and profile picture from Google, and nothing else. We never see your password — that is held by Supabase, our authentication provider, and it is never sent to us in a readable form.
On your profile everything is optional except the name and username created when you sign up: a photograph of you, a short biography, your city, your Instagram handle, your website, and the kinds of photography you like. Anything you put here you are choosing to publish.
Your photographs stay yours. We store the files you upload so they can appear on your profile, and we resize them before upload so they load quickly. We claim no ownership and we do not license them to anybody.
What is public, and what is not
Your profile and your photographs are public. That is the point of the directory — people come to it to find photographers to walk with. Your name, username, picture, biography, city, links and photographs can be seen by anybody, signed in or not.
Your contact details are not public, and are not visible to other members. Your email address and your WhatsApp number are never shown on the site and cannot be read through it. A profile can say that somebody walked a particular walk, because attendance is part of what the directory is for — but the record it reads from carries only the walk and the date, never a way to contact anybody.
Attendance is public in bulk, not only on a profile. The list of who joined which walk, and on what date, can be read by anybody — including people who are not signed in — in the same way the rest of the directory can. Put together, it shows who has walked with whom. We are saying so plainly because it is easy to assume that something shown one profile at a time is only available one profile at a time, and here it is not. Your phone number and email are never part of it.
What we do with it
We use your contact details to run the walk you signed up for and nothing else. We do not sell anything to anybody, we do not share your details with advertisers, and we do not run advertising or cross-site tracking on this site.
We do not send marketing email unless you have asked for it. If you subscribe to the newsletter you can stop at any time by replying to it or writing to us.
Who else touches it
Three services make this site work, and each holds some of the above: Supabase, which stores the database, the files and the sign-in system; Vercel, which serves the site; and Google, only if you choose to sign in with it. We do not hand your details to anybody else.
Our database is hosted in Mumbai. Some of these providers may process data outside India in the course of running their services.
Deleting it
You can delete your account yourself, from your settings. When you do, your profile, your photographs, the image files themselves and the record of every walk you joined are removed from our database and our storage at the same time. They are not hidden, not archived, and not kept as a backup. It cannot be undone.
You can also delete a single photograph at any time, and the file goes with the record rather than lingering in storage.
If you would rather ask us to do it, write to hello@pwip.in and we will remove everything and confirm when it is done.
Keeping it safe
Access to your data is enforced by the database itself, not by the screens in front of it: the rules that decide who may read or change a row live in Postgres, so they hold even for a request that never went through this website. Uploads are restricted to your own folder and to image files. The connection is encrypted.
We will not pretend this is a bank. It is a community site run by people who walk with cameras, and it holds nothing more sensitive than a phone number — but we would rather that number were looked after properly, and it is.
Children
Accounts are for people aged 13 and over. Younger photographers are very welcome on a walk — come with a parent or guardian, and let them hold the account.
Asking us something
If you want to know what we hold about you, correct it, or have it deleted, write to hello@pwip.in. A person reads it, and we will answer.
If this page changes in a way that matters, we will say so here and move the date at the top.