Privacy Policy

PhotoDays is provided by an independent developer (“PhotoDays”, “we”, “us”). This policy explains what information the PhotoDays app and website process, why it is processed and the choices available to you.

Information you add to PhotoDays

Photos, videos, notes, albums, goals, reminders and related progress data are stored on your device. In versions that include iCloud Sync, enabling it syncs this content through your private Apple iCloud account using CloudKit so it can be available on your Apple devices. We do not operate an account system for this content.

Analytics and diagnostics

PhotoDays sends limited product analytics and crash diagnostics to help us understand onboarding conversion, feature usage, reliability, and performance. Product analytics can include app and build version, device model, operating-system version, locale, selected app language and theme, premium status, feature interactions, a pseudonymous random identifier (the anonymous RevenueCat customer identifier when purchases are enabled), a random app-session identifier, and categorical onboarding answers such as selected goal, tracking method, blockers, acquisition source, and sex. The app also records purchase-flow outcomes, storefront, currency, the displayed price, trial eligibility and the offer shown. Client-side events exclude StoreKit transaction identifiers and payment-card information. RevenueCat server-side purchase events may include store transaction identifiers and subscription history, as described below.

We use Amplitude for product analytics and Sentry for crash and error diagnostics. Their PhotoDays projects are configured for EU processing. The Amplitude SDK in PhotoDays is configured not to collect IDFV or derive country, region, city, or DMA from an IP address. Purchase events can still include the Apple storefront country reported by RevenueCat. Sentry also uses its own pseudonymous installation identifier for session health statistics, including crash-free sessions. Reliability data is therefore disclosed as linked to an installation even though we do not attach an account, email, or name. Sentry receives technical routing context such as the current screen and onboarding step, but not the detailed onboarding-answer profile, and is configured not to send default personally identifiable information. Diagnostics cover the main app and its widget, include crash stacks, active app sessions, hangs and significant handled failures, and exclude screenshots, screen recordings, UI content, attachments and automatic network breadcrumbs. Possible operating-system watchdog terminations are reviewed separately from confirmed crashes.

PhotoDays is configured not to send exact body measurements, referral codes, free-form text, URLs, photos, videos, notes, file paths, email addresses, phone numbers, or other user-created content to analytics or crash diagnostics. Analytics is first-party product measurement only: it is not used for advertising, data-broker enrichment, or tracking you across apps or websites owned by other companies.

Support messages

If you contact support, we receive the email address and message you choose to send. Bug reports and support requests can also include a text attachment with non-content diagnostics: app version, operating-system version, device model, a random support identifier, iCloud sync status, local storage usage, app language, theme and time zone. The attachment does not include photos, videos, notes or albums.

Feature suggestions

When you choose “Make a Suggestion,” PhotoDays opens a public feedback portal operated by Canny. If you submit feedback, comment, or vote, Canny may process the information you provide, such as your name, email address, profile picture, feedback content, comments, votes, and attachments you choose to upload, along with technical information such as your IP address, device or browser information, cookies, and usage data. Suggestions and comments you submit may be visible publicly. Please do not include photos or other sensitive information in a suggestion.

PhotoDays website

This website does not use analytics, advertising cookies, account registration or email collection. It is hosted by GitHub Pages. GitHub may log a visitor’s IP address for security purposes. See the GitHub Privacy Statement for details.

Photos, camera, notifications and biometrics

PhotoDays requests access only when you use a feature that needs it. Camera and photo-library access let you capture, import, save and display media. Notification access is used for reminders and related app experiences. Biometric authentication is performed by iOS; PhotoDays receives only the authentication result and does not receive or store Face ID or Touch ID data.

On-device face processing and alignment cache

When aligning photos for comparison or video creation, including morph transitions, PhotoDays uses Apple's Vision framework on your device. It calculates face rectangles, eye positions, face angle, detection confidence and visual feature representations of face regions. These derived results help center and align a face and select a visually similar face region when a photo contains several faces. They are not used to identify a person, authenticate you, build an identity database or infer sensitive characteristics.

Calculations happen locally. PhotoDays does not upload these derived face results to its servers or send them to RevenueCat, Amplitude, Sentry or Canny. Original photos may contain faces; if you enable iCloud Sync, those original photos can sync through your private Apple iCloud account. This is separate from the local alignment cache, which is excluded from iCloud synchronization and device backups and uses iOS file protection.

To avoid repeating the same calculations, the app stores derived results with the photo identifier, image revision and computation date. A cached result is valid for 30 days from computation; reading it does not restart this period. Expired results are removed when the app next starts or checks the cache. If the app is closed, physical removal occurs at the next launch or earlier if iOS clears the cache. A result may be computed again later if you use alignment.

Changing the source image invalidates its previous results. Deleting a photo or album removes the associated results from memory and disk; this also applies when the app receives an iCloud deletion. In Settings, under Storage, you can choose “Clear temporary data” to remove all cached alignment results without deleting photos. Results can then be recalculated when needed. On update from a version without these retention rules, the app removes its older alignment cache without changing original media or your settings.

When you choose to export or share a comparison or video, PhotoDays creates the requested media and sends it only to the destination or application you select. The alignment-cache records themselves are not included in exports. This face-processing feature is separate from Face ID: PhotoDays receives only the result of the system's authentication and has no access to Face ID biometric templates.

Purchases

Purchases and subscriptions are processed by Apple. We use RevenueCat to validate purchases, restore access, and determine Premium status. RevenueCat processes an anonymous customer identifier, Apple purchase and transaction information, product and subscription status, storefront, Apple’s identifier for vendor (IDFV) when available, and technical app/device information needed to provide this service. Neither PhotoDays nor RevenueCat receives your full payment-card details from Apple. No PhotoDays account registration is required. These pseudonymous identifiers can associate activity and purchases with the same customer or device; restoring a purchase can reconnect an earlier purchase record after reinstalling the app.

We use the same anonymous customer identifier for purchase-related analytics in Amplitude. RevenueCat sends subscription lifecycle events such as trial starts, purchases, renewals, cancellations, expiration and refunds to Amplitude. These events can contain store transaction identifiers, product, currency, timestamps and revenue. We do not send your iCloud account identifier, photographs, album names, notes or body measurements to RevenueCat.

Amplitude and Sentry remain configured for EU processing. RevenueCat is a separate service: its terms allow processing outside your country, including in the United States. We do not represent RevenueCat as an EU-only service. See RevenueCat’s Data Processing Addendum for its data-transfer safeguards.

How information is used and shared

We use information only to provide app features, sync your content when requested, process purchases, respond to support, maintain security, diagnose failures and improve PhotoDays. We do not sell your personal information. Information is shared only with Apple and the service providers described above as needed for these purposes or when required by law.

Retention and deletion

Local app content remains until you delete it or remove the app. iCloud content is controlled through your Apple account and the app’s sync features. Support correspondence, feature feedback, and service diagnostics are retained only as long as reasonably necessary for support, security, legal, and product-improvement purposes. You can ask us to delete support or feature-feedback information associated with your email address. For a purchase-data request, contact support so we can identify the relevant anonymous purchase record. Records required for fraud prevention, restoring valid purchases or legal obligations may need to be retained. Deleting local photographs or uninstalling the app does not cancel an Apple subscription or automatically delete purchase records held by Apple or RevenueCat. You can manage or cancel your subscription in your Apple Account settings. For a privacy request, contact support; do not send an Apple password, verification code or payment-card details.

Your choices

• You can deny or revoke camera, photo-library, notification and biometric permissions in iOS Settings.
• You can keep iCloud Sync disabled and use PhotoDays only on your device.
• You can delete content in the app and contact us about support information.

Children

PhotoDays is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy when PhotoDays or its service providers change. The effective date above will be updated when changes are published.

Contact

For privacy questions or deletion requests, email support@photodays.app.