Safety, UK law and your guests’ photos

Mosaikin is built and run in the UK by Strict Mode Ltd, registered with the ICO. Every photo and message is checked before it appears, location data is stripped, galleries can be private, anyone can report content without an account, and child abuse material is reported to the National Crime Agency. Hosts can always download their own copy.

Built in the UK, for UK celebrations. Run under UK law, with safeguarding built in as standard: every photo is checked before it is shown, and we report what the law says we must. You keep the lot, and share it as and when you like in a digital guestbook and album.

Who runs Mosaikin

  • Mosaikin is a trading name of Strict Mode Ltd, company number 14561751, registered in England and Wales.
  • Registered with the Information Commissioner’s Office, registration number ZC188154.
  • Contact: hello@mosaikin.app. Safety reports: safety@mosaikin.app.

Content safety and the Online Safety Act

  • Checked before it can appear. Every photo and guestbook entry passes a safety check before it can appear, and there is no path to a public gallery that skips it. See Are photos checked before they appear?
  • Fails closed. If a check cannot run, content waits for a person rather than being published.
  • Anyone can report, without an account, including people who appear in a photo but never used Mosaikin. Hosts must give reasons for a decision either way, and the Terms set out how to appeal. See I appear in a photo I did not want shared.
  • Child sexual abuse material is blocked and quarantined, never viewed by staff, and reported to the National Crime Agency as The Online Safety (CSEA Content Reporting) Regulations 2026 require.

The full account is on Safety and child protection and in the Acceptable Use Policy.

Personal data and UK GDPR

  • Guests have no accounts. They are not asked for an email address or a password; a short-lived session links their visit to one event.
  • Location data (EXIF and GPS) is stripped from every photo before a servable copy exists.
  • Erasure is erasure. Deleting a photo removes its stored files; deleting an account removes that person’s data from our database, media storage and sign-in provider.
  • No facial recognition, no biometric profiles, no advertising and no selling of personal data.
  • No analytics or advertising cookies; see the Cookie Policy.

What is held, why, for how long and on what lawful basis is in the Privacy Notice.

Security and accountability

  • Photos are never served from raw storage links; every request passes an access check that enforces the event’s privacy setting.
  • Encryption in transit (TLS) and at rest on all storage.
  • Administrative and safety actions are written to a tamper-evident, append-only, hash-chained audit log.
  • Card payments are handled by Stripe; we never see or store card details.

More on Security, including how to report a vulnerability.

Retention and your own copy

  • Free events are kept for the event plus six months, and the host is warned on their dashboard before anything is removed.
  • Upgraded events keep their full archive available to download for 5 years after the event.
  • If Mosaikin ever winds down, hosts get 12 months of notice and the archive download keeps working throughout.

We do not promise to hold photographs forever. Services in this category do close, sometimes at short notice; what we guarantee is the host’s own copy. What happens to your photos when a photo app shuts down explains why.

How it works for guests

  1. 1. Scan the QR code

  2. 2. Add photos, videos or a message

  3. 3. See it on the big screen

Questions people ask

Is Mosaikin a UK company?

Yes. Mosaikin is a trading name of Strict Mode Ltd, registered in England and Wales, company number 14561751, and registered with the ICO.

Are photos checked before guests see them?

Yes. Every photo and guestbook entry passes an automated safety check before it can appear. Anything the check is unsure about is held for the host, and if a check cannot run the content stays held.

What happens to illegal content?

It is blocked and never shown. Child sexual abuse material is quarantined and reported to the National Crime Agency, with the evidence preserved as the law requires.

Can someone who is in a photo get it taken down?

Yes. Every photo carries a Report link that works without an account, and a host deleting a photo removes the stored files for good.

What happens to our photos if Mosaikin closes?

Hosts get 12 months of notice before we stop operating, and the archive download keeps working throughout.

Give your guests one album for the day

Creating an event is free, and guests never need an app or an account. Upgrade that one event for the whole album, every keepsake and room for thousands of photos.