Data handling
Working draft. It describes how the software behaves and has not been reviewed by counsel. The operator names the legal entity, hosting region and contact address before launch.
Records are kept in the operation's database. Photos are stored by their fingerprint, in the database by default or in an object store if the operator configures one.
Exports contain only the signed-in operation's records.
Backups, retention and deletion follow the operator's policy. The operator sets them at deployment.