Privacy Policy

None. The developer never receives your photos, server details, usage, device information or any other data. The app contains no advertising, analytics, crash reporting or tracking.

With your permission, the app reads your photo library to upload photos to the server you set up and to show which photos are backed up.

When you choose to save photos back to your phone, the app adds the photos you selected to your library. When you use Free Up Space, the app deletes photos only after you confirm and the system asks you to confirm again (on Android, they go to the system trash).

If a photo’s original is stored in iCloud, iOS downloads it from iCloud before it is uploaded.

On Android, the app asks for Photos and Videos access to read the photos it backs up, and for Media Location access to keep the location recorded in each photo in your backups (without it, Android removes location data from photos). This location data is saved only with the photo files on your server. The Android app asks for Notifications permission to show backup progress.

The system asks you for each permission when it’s first needed, and you can turn any of them off in system settings at any time.

The server address, user name, backup folder and other settings you enter are stored only on your device. Passwords are stored in the Keychain on iOS and encrypted with the Android Keystore on Android, and are used only to connect to your server.

For SFTP servers the app remembers the server’s host key on your device, and the Android app remembers the certificate fingerprint of WebDAV servers with self-signed certificates. These are used to detect an impostor server and contain no personal information.

To display faster, the app caches your server’s file list and photo thumbnails on your device. Deleting the app deletes this data.

The app connects only to the servers you enter. Photos go directly from your device to your server, with no third party in between.

With “Local/USB”, the app reads and writes only the folder you choose in the system folder picker (such as a folder on a USB drive or external disk), and nothing else.

On iOS, the app asks for Local Network access to discover and connect to servers on your network (Bonjour). On Android, it finds servers on your network with the system’s network service discovery (mDNS), which needs no extra permission.

On Android, a foreground service keeps a backup running in the background, with progress shown in a notification. The app does nothing else in the background.

Besides photo and video files, when “Record Albums on NAS” is on, the app saves, in a .photosync folder inside your backup folder, the albums each photo is in (on Android, the name of the folder it is in), whether it is hidden or a favorite, and the device name (such as “iPhone”) along with a device identifier (on iOS, the one iOS assigns to the app; on Android, a random one the app creates on first use), so records from different devices are kept apart.

This data stays on your own server under your control; the developer has no access to it.

The iOS app uses the open-source libraries AMSMB2 (SMB) and Citadel (SFTP).

The Android app uses the open-source libraries smbj and dcerpc (SMB), sshj (SFTP), OkHttp (WebDAV), Bouncy Castle (cryptography) and Coil (thumbnails). It contains no Google Play services and no third-party SDKs for analytics, push notifications or advertising.

These libraries are used only to connect to your server and display your photos, and do not collect or send any data.

The app does not collect personal information from anyone, including children under 13.

If this policy changes, this page will be updated along with the date above.