Private link
The invitation reveals almost nothing
The invitation page contains no clear group photo, name, phone number, contact details, facial profile, or private photo-access token.
Privacy & control
Privacy is not a promise beside the product. It is part of the product.
GAPP is built so an invitation can spark curiosity without exposing the photo or the person it may belong to.
Strong checks before clear-photo delivery
What this means for you
Information stays bounded to the job it needs to do.
Each layer reveals only what is needed for the next deliberate step.
Locked by default
Opening the page does not unlock a photo
The real blurred preview and original image stay hidden while account setup and required checks are incomplete.
Your profile
You securely scan your own encrypted profile photo
We cant see your profile image, not even you can see it. Once you complete the quick 24 point facial scan we extract unique numerical identifiers called embeddings. which are securely and privately stored to allow highly confident facial recognition processing.
Your choices
Future and earlier photos stay separate
You can agree to receive future group photos after a strong match. Looking for earlier photos remains a separate choice.
Uncertain means locked
A possible match is not enough
When the required checks do not succeed, GAPP does not reveal the clear photo. Ambiguous results remain locked.
What matching does
Supports one limited photo-sharing purpose.
GAPP compares faces in a selected group photo with approved member profiles to help determine whether a clear photo may be delivered.
What GAPP actively drops
Metadata stays behind. Personal context stays local.
GAPP re-encodes the selected image as a fresh JPEG instead of forwarding the original source file. Embedded metadata is dropped; contact names, local Contacts identifiers, and review labels remain on the sender’s device, so less personal information travels with every share.
Private invitations
An invitation is not a group chat.
Invitations are sent separately and do not place the group photo or private profile information in a shared conversation.
Consent first
You choose whether to share. Optional automation is not a hidden default.
Fail closed
When a required check fails or conflicts, the clear photo stays locked.
Reveal less
Invitation links are designed to expose less—not to preview private content.
GAPP · Group Photo Share
Let the photo find its people.
See the full journey, the sharing choices, and the safeguards that keep uncertain results locked.