BuddyPress.org

@mark

singlewp: wp-content/uploads/album/$userid/

wpmu:     wp-content/blogs.dir/1/files/album/$userid/

in both case the album folder is at the same level of the bp ‘avatar’ folder.

@tosh you can delete a single pic from the pic page, I’ve added ‘mark user as pic-spammer’ to the to-do list