Prinkist
Prinkist Privacy Policy
Effective October 27, 2026
Prinkist is a photo printing service run by Koushan Farshad, a sole proprietor in Canada. Koushan Farshad is responsible for the personal information Prinkist collects.
This policy explains what personal information we collect, why, who we share it with, and how long we keep it. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Who can use Prinkist
You must be 18 or older to create an account. If we learn that an account belongs to someone younger, we'll delete it.
What we collect
- Your account: your name, email address and password. We store only a scrambled form of your password, never the password itself.
- Shipping addresses you save.
- Your photos: the photos you choose to print, the way you cropped them, and small previews of your prints so you can see past orders. Hidden photo details such as location are removed from the print files.
- Your orders: what you ordered, prices, shipping, tax, the carrier and tracking number.
- Payment: your card details go directly to our payment processor, Stripe. We never see or store your full card number.
- Notifications: if you allow them, a code that lets us send order updates to your phone. The notifications don't include your name, address or order details.
- Photo library access: the app asks for this only so you can choose photos. We receive only the photos you pick.
What we don't do
No ads. No analytics or tracking tools. We never sell or rent your information, and never share it for anyone's marketing.
How we use it
To print and ship your order, take payment, send you shipping and order updates, answer your questions, handle refunds and reprints, prevent fraud and abuse, and keep the tax records the law requires.
Who we share it with
Only the services that help us run Prinkist, and only what each one needs:
- Stripe processes payments. It receives your card details, the name and postal code from your shipping address, and the amount. Stripe's payment screen in the app also sends Stripe technical and usage information, such as your device type and how the payment screen is used, to prevent fraud and improve its service. Stripe keeps its own payment records, as the law requires, under its own privacy policy, even after you delete your account.
- Resend sends our emails. It handles your email address and the content of emails we send you, such as your shipping address and tracking number.
- Cloudflare stores your photos and print files.
- Neon hosts our database.
- DigitalOcean runs our server.
- Expo and Google (Firebase Cloud Messaging) deliver notifications to your phone.
- Google Pay: when the payment screen opens, Google Pay's own code in the app may collect information about your device (such as a device identifier and the apps installed on it), your phone number and your location, so Google can check for fraud. This is covered by Google's own terms.
- Shipping carriers receive your name and address to deliver your parcel.
Our shop also receives an email for each order with your name, email address and shipping address, so we can print and ship it.
We may also disclose information if the law requires it.
Where it's stored
Our server runs in Canada, but our database, payment, email and notification services store information in the United States, and our photo storage is in North America. Information stored outside Canada is subject to the laws of that country and may be accessed by its courts and authorities.
How long we keep it
- Uploaded photos you don't order: deleted after 14 days.
- Full-size print files and the order sheet our shop uses: deleted 60 days after your order ships or is cancelled. That leaves time to send a reprint if something goes wrong.
- Previews of your prints: kept while your account exists, so Order History can show your photos.
- Your account, saved addresses and orders: kept while your account exists, so you can see your order history.
- Orders after you delete your account: kept for six years after the end of the tax year they were placed in, as the Canada Revenue Agency expects. Only the date, items, sizes and quantities, amounts and tax, province and the Stripe payment ID are kept, and they're no longer linked to you.
- Server logs help us fix problems. They don't include your name, email address or shipping address.
Deleting your account
You can delete your account in the app (Account, then Delete account) or on our account deletion page. You'll be asked for your password.
- We delete your account, email address, name, saved addresses, photos and print files, order previews and notification settings.
- Orders not yet printed are cancelled and refunded in full to your original payment method. Refunds usually appear within 5–10 business days.
- Orders already being printed: we'll still ship them and email your tracking number, then finish deleting your account. You won't be able to sign in after you confirm.
- Stripe, our payment processor, keeps its own record of each payment, as the law requires. Our staff's copies of your order emails are deleted by hand.
Your rights
You can ask to see the personal information we hold about you, ask us to correct it, or withdraw your consent (for notifications, turn them off in your phone's settings). Email us from the address on your account and we'll reply within 30 days. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
Security
Connections to our server are encrypted. Passwords are stored scrambled. Links to your photos expire after one hour and work only for your own account. Staff can download print files only for a limited time after an order ships.
Changes
If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app or by email.
Contact
Email [email protected]. We're reachable by email only.