What to Ask About Privacy Before You Pick a Wedding Photo App

Most people choose a wedding photo app based on price and features, and never ask what happens to the photos after that. It's a fair thing to overlook, there's a lot else going on. But it's worth five minutes, because the answers vary more than you'd expect.

Here's a short checklist worth going through before you upload anything.

Where are the photos actually stored?

Server location decides which laws apply to your data. A platform storing data in the EU is bound by GDPR. One storing it elsewhere might not be, even if the company itself is based in Europe.

Most platforms don't say plainly where servers are. If a company can't answer this in one sentence, that's worth noting. We store everything in Frankfurt, Germany, and we say so on our own pricing page, not just buried in a policy document.

Who else touches your data?

Almost no platform runs entirely on its own infrastructure. Email goes through one company, payments through another, hosting through a third. Each one is a subprocessor, meaning they have some level of access to your data as part of making the product work.

A platform that takes privacy seriously should be able to name every subprocessor plainly. If that list doesn't exist publicly, or exists but is vague, that's a gap worth asking about directly. Ours is public and named.

Is anything being scanned or analysed?

This is the one most people never think to ask. Some photo-sharing platforms run guest photos through facial recognition to auto-sort them by person, which is a genuinely useful feature on the surface. But recognising faces means processing biometric data, and under EU law, biometric data sits in a stricter category than an ordinary photo. It requires a meaningfully higher bar of consent and handling than just storing an image.

That's not a claim that any specific platform is doing something wrong. It's just worth asking directly, rather than assuming a photo is "just a photo" once AI is involved. If a platform can't clearly explain what it scans and why, that's worth a follow-up question before you commit.

What happens to the photos afterwards?

Some platforms keep your data indefinitely by default, on the assumption you'd rather they hold onto it forever than delete it. Others set a clear end date. Neither is automatically wrong, but you should know which one you're signing up for.

Ask specifically: is there a stated retention period, or does data just sit there unless you request deletion yourself? Who can delete what, and when? We built ours around a stated window: your event data is deleted once your active period ends, by default, as a privacy feature rather than something you have to remember to request.

How is the platform actually funded?

This is the quiet question underneath all the others. A free tool has to make money somehow, and if you're not paying for it directly, your data or attention often is the actual product. A platform with a clear, one-time or subscription price has a business model that doesn't depend on your data being valuable to someone else.

Neither model is automatically bad. But knowing which one you're using changes what you should expect.

A short checklist to ask any platform

If you want the condensed version to actually use while comparing options, here it is:

• Where exactly are photos and event data stored?
• Can you name every third-party company involved in running the platform?
• Is anything scanned, analysed, or run through AI, and if so, what for?
• Is there a stated data retention period, or does data stay indefinitely?
• How does the company make money if I'm not paying much or anything?

These are the questions we'd want answered before trusting anyone with our own wedding photos, which is part of why we built Twirl the way we did. If you want to see how we stack up against the rest of the category on more than just privacy, our comparison page walks through the whole picture.