Short, because it can be.

This policy explains how Necessary LLC handles information through the One Seventy app and the Necessary website.

One Seventy app data

One Seventy stores the information you create for your photography work, including clients, sessions, locations, schedules, tasks, pricing, gear, profiles, journal entries, notes, preferences, and selected attachments. This information is stored on your devices and, when iCloud is available, in your private iCloud database through Apple's CloudKit service. Necessary does not operate an app-data server and cannot read this private app content.

Event Day sharing

Event Day copies selected session information into a CloudKit zone owned by the organizer. Shared information can include the Event Day title, schedule, shot subjects and status, selected client and place names, scene names and notes, pinned scene coordinates, participant updates, and contact details that a participant chooses to provide. Scene photos and the organizer's full private client and vendor records are not shared.

Event Day uses a private CloudKit share. The organizer chooses participants through Apple's sharing controls, and only explicitly invited iCloud users can open and change its shared content; forwarding the underlying URL does not grant another account access. Participants should share only information they want that invited group to have. The organizer can review or remove participants, revoke access, or end the Event Day. Ending Event Day closes the room and revokes participant access. The organizer’s private iCloud records are retained for recovery, including final shot check-offs if saving is interrupted or another organizer device sends a late update. These records are not a separate Full Backup.

One Seventy screens shared text and provides controls to hide or report an update or delay note, report a shared contact, block an author across Event Days on your devices, and delete updates where permitted. Authenticated author blocks hide that person's updates, contacts, and delay notes across rooms. If you choose Report Update, your email app opens a prefilled message containing the room and update identifiers, author name, and reported text. Report Contact includes the room and contact identifiers, shared name, role, and note; it does not copy the contact's phone number or email address into the draft. Report Delay Note includes the room, schedule item, and note revision identifiers, and the reported note text.

Sending a report to Necessary is voluntary. You can review and edit the email before sending it, or cancel without sending it. Necessary receives the report only if you send the email and uses it only to review and handle that moderation request. Necessary otherwise does not receive or have access to Event Day content. Reporting does not give Necessary access to the private Event Day or the ability to remove its participants; the organizer controls participant access.

Permissions and Apple services

Location supports saved places, maps, weather and light information, travel estimates, and optional arrival alerts. Arrival alerts are off by default and use Apple's region monitoring after you enable them. Coordinates may be sent to Apple through MapKit, geocoding, and WeatherKit. For tide information, the app selects a nearby NOAA station on device and sends NOAA the station identifier, not your precise coordinates.

Calendar access lets you import events you select and create or edit appointments at your direction. Contacts access lets you export a client to Apple Contacts. PhotosPicker and the system document picker expose only the photos and files you select. Semantic search, OCR, short summaries, and routine Apple Intelligence operations run on device.

Apple Intelligence and optional cloud processing

On-device-only processing is enabled by default. If you turn it off in Intelligence settings, complex shoot-plan questions, document extraction, and image layout understanding may send the selected shoot facts, prompts, documents, or images to Apple Private Cloud Compute on supported devices running iOS, iPadOS, or macOS 27 or later. Routine work remains on device. You can turn on-device-only processing back on at any time.

One Seventy does not send this content to Necessary or third-party AI providers. PCC prompts and responses are not written to app logs, diagnostics, or analytics. Answers and unconfirmed proposals remain in memory for the current screen or import; only records you explicitly confirm for import or schedule adjustment are saved.

Notifications provide user-enabled reminders, condition alerts, arrival alerts, and CloudKit updates. CloudKit push delivery is handled by Apple; Necessary does not operate a push-notification server. Apple processes information used by its system services under Apple's privacy terms. NOAA processes tide-station requests under its own terms.

Purchases and user-directed exports

Subscriptions are processed by Apple through StoreKit. Necessary does not receive payment-card information. Apple may provide transaction, refund, and aggregated sales information needed to operate subscriptions and the business.

One Seventy can create PDFs, CSV files, calendar events, contact records, and gallery links when you ask it to. Once you send or save information outside the app, the recipient, destination service, or storage provider controls that copy.

Full Backup requires you to end or leave every active Event Day before creating a backup. It does not archive live Event Day rooms or the retained CloudKit recovery zones, and restoring a backup does not reopen an Event Day. Information already saved into your ordinary session records can be included. Files you export remain wherever you save or share them until you delete them there.

Website and support information

Sending information to Necessary through the contact form, email, or an Event Day content report is voluntary and is not required to use One Seventy. If you choose to contact Necessary, it receives the name, email address, topic, message, and reported context you provide. Necessary uses this information only to respond to and handle your specific inquiry, support request, or moderation report. The website sends contact-form submissions through Resend, an email delivery provider.

The website's hosting provider may process ordinary connection information, such as IP address, request time, and browser details, to deliver and secure the site.

Necessary does not use third-party advertising trackers or analytics on the website or in One Seventy. We do not sell personal information or share it with advertisers. We do not send marketing you didn't ask for. There is no third-party advertising or cross-site tracking on this site.

Retention, deletion, and security

App records remain on your devices and in your iCloud account until you delete them. Deleting the app may not delete data already stored in iCloud. Ending Event Day revokes participant access but does not erase the organizer’s private recovery records. Those records have no automatic expiry; One Seventy removes them when the organizer deletes the associated session or uses Delete Everything. Cloud deletion may remain pending until the app can reach iCloud. Copies exported or saved by participants are not deleted automatically.

Necessary keeps information you voluntarily send, including contact-form submissions, support correspondence, and Event Day moderation reports, only for as long as necessary to process and resolve the specific inquiry, support request, or moderation report. When that information is no longer needed for that purpose, Necessary deletes it. You may request deletion of information Necessary holds by emailing the address below. Ending an Event Day or deleting its app records does not automatically delete correspondence or reports you sent to Necessary; those are handled under this retention policy.

No system is perfectly secure. One Seventy relies on Apple's platform security and CloudKit access controls, and users are responsible for protecting their devices, iCloud accounts, and Event Day invitations.

Children

One Seventy and the Necessary website are not directed to children under 13, and Necessary does not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can remove it.

Changes and contact

Necessary may update this policy as the app, website, or legal requirements change. If this policy changes in a way that matters, we'll say so plainly on this page.

Questions or deletion requests can be sent to hello@necessary.email.