Case study
Candid Moments
From a no-app QR upload flow to an operable event photo-sharing platform
An ongoing founder-built SaaS that combines no-account guest photo and video uploads with private galleries, host controls, moderation operations, payments, observability, and a wedding-first acquisition strategy.
Problem
Candid Moments addresses a two-sided event problem. Guests need to contribute photos and videos in seconds, while they are still at the event, without installing an app or creating an account. Hosts need those contributions collected in one private, organized gallery with clear control over access, moderation, downloads, and the event lifecycle.
Product Principles and Constraints
- Every extra guest step reduces participation, so the public flow must keep the upload action obvious and avoid app installs, guest accounts, and unnecessary metadata.
- Event media traffic is bursty, and photo and video files can be large enough that uploads should not pass through the application server.
- Uploaded media needs configurable safety controls before it becomes visible; moderation behavior varies by plan and host settings rather than forcing one approval model on every gallery.
- Hosts need useful access, moderation, note, and download controls without becoming full-time gallery administrators.
- Paid entitlements, upload windows, access rules, and storage behavior need to remain understandable as the product adds free, one-time, and recurring plans.
- The product must remain operable when moderation or an external service fails, with persisted state, bounded retries, and human remediation paths.
Role
Designed, built, and operated the product end to end, spanning product strategy, guest and host UX, application architecture, cloud media handling, moderation workflows, payments, observability, analytics, SEO, and ongoing production hardening.
Evolution / What Was Built
1. QR-first MVP
The first version focused on one participation loop: a host creates a private event gallery, shares a QR code or private link, and guests upload from a mobile browser without an app or account. Short, printed-sign-friendly links make the same flow practical when a camera cannot scan the code.
2. Media pipeline
The upload path expanded to support photos and videos through direct presigned Amazon S3 uploads, CDN-backed delivery, and PostgreSQL-backed PgBoss jobs for asynchronous asset processing. This keeps large files away from the application server and gives bursty event traffic a durable processing path.
3. Trust and host control
Amazon Rekognition screens eligible images and videos using configurable thresholds and host-facing presets. Owners can review blocked uploads, approve or delete them, control guest downloads, create signed individual downloads or ZIP archives, and receive private guest notes on eligible plans without turning the gallery into a public comment wall.
4. SaaS foundation
The product grew beyond the upload prototype with email and Google authentication, Stripe checkout, account management, and entitlement enforcement across a free starter experience, one-time event albums, and a recurring planner plan. Hosts can manage gallery identity, dates, banners, upload windows, access, downloads, and retention from one workflow.
5. Operational maturity
Moderation failures are persisted and retried within bounds, with admin tools for investigation and remediation. Sentry client and server monitoring, security headers, privacy-conscious funnel analytics, user and album drill-downs, moderation views, and album-read caching with targeted invalidation make the system safer to operate and easier to improve.
6. Go-to-market refinement
The current acquisition strategy leads with weddings while retaining support for parties, reunions, corporate events, and other gatherings. Use-case pages, practical event-planning guides, activation checklists, printable QR guidance, and clearer next actions connect acquisition to the real work of getting a gallery ready for guests.
Outcome So Far
Candid Moments has progressed from a focused upload prototype into a production SaaS with a complete guest-to-host workflow and the operational controls needed to run it responsibly. The strongest proof point so far is not a vanity metric: it is a shipped system that handles acquisition, checkout, event setup, guest uploads, media processing, moderation, gallery delivery, owner review, and post-event downloads as one coherent product. Commercial validation is still in progress, and the next phase is focused on real-event usage, conversion, and retention.
Lessons So Far
- Removing app installs and guest accounts matters more than adding optional upload metadata.
- Moderation requires recovery and human override paths, not only an API call.
- Host activation depends on practical actions such as downloading the QR code, printing signs, and resharing the private link.
- Building the operational and admin layer early makes a media product safer and easier to improve.
Have a Similar Problem?
If you are turning a focused workflow into an operable SaaS product, I can help with the product architecture, implementation, integrations, and production hardening.
Discuss a Similar Platform Problem