Privacy Policy

1. Who we are

This policy explains what data the GalleryGo app (“the app”, “we”) and this website process and why. The service is provided by Alexey Vikarchuk.

2. Photos and videos

The app analyzes your photo library on your device using Apple frameworks (PhotoKit and Vision); for videos, a few frames are analyzed. The results, including what is depicted (for example “food”, “dog”, “beach”), are stored in a local database on your iPhone. We do not upload photos, videos, thumbnails, file names or location coordinates to our servers. Analysis never downloads your library from iCloud; only when you open a photo full screen may iOS load that one photo from iCloud.

To let you search by place, the app groups the locations of your photos into areas of about 11 km and sends the center of each area — not the location of any photo — to Apple’s geocoding service, the same one the Photos and Maps apps use. The city and country names it returns are stored on your device.

Deleting photos and videos, compressing photos and videos, and keeping only the still photo of a Live Photo happen on your device, after you confirm them in the app and in the iOS system dialog. iOS moves deleted items and replaced originals to the “Recently Deleted” album, where you can restore them for 30 days.

The app also keeps cached previews and your saved searches on the device. You can remove them in Profile → Clear app data; the local analysis database is removed together with the app.

3. Account

You sign in with Apple. We receive a unique Apple user identifier and store it together with your interface language, your “Help improve GalleryGo” choice and the dates the account was created and updated. We do not request your name or email address. To be able to revoke Sign in with Apple when you delete your account, we also store, encrypted, a token issued by Apple for this purpose.

When you buy a pack, the app passes Apple an internal identifier of your account (not your name or email), so that the purchase is credited to the right account.

4. AI features

Some features send text descriptions of photos — never the images themselves — to our server, where they are processed by AI providers acting on our behalf: OpenAI and TypeSafe.

AI search. The text of your request, the interface language, the current date and the list of subjects found in your library (for example “beach”, “dog”) are sent to OpenAI to understand what you are looking for. To pick matching photos, TypeSafe receives the request, the places found in your library with photo counts (names only, for example “Istanbul, Turkey”) and descriptions of candidate photos computed on your device: content labels, numeric characteristics (for example sharpness, quality, aesthetics, number of faces and whether eyes are open, size, dimensions, age in days), flags such as “screenshot”, “document” or “favorite”, whether the photo has a location tag or is a Live Photo (just “yes” or “no”), and text recognized in the photo (up to 2,000 characters, with card numbers and email addresses removed). Videos are described the same way — from a few of their frames, marked as “video” and with their length; the frames themselves never leave your phone.

Voice search. When you hold the mic button in the search field, GalleryGo uses the microphone and turns your request into text right on your iPhone; the recording doesn’t leave the device. Only if your iPhone can’t recognize the request itself (for example, it has no offline model for your language) and you have allowed it, the recording (up to 30 seconds) and the interface language are sent to our server and transcribed by OpenAI. We don’t store the recording; the resulting text is used like a typed request. You can turn this off in your profile.

Sorting. Categories (“Low quality”, “Documents”, “Screenshots” and others) are computed on your device. When the app is not sure what kind of image a photo is — a photo, a meme, a useless shot, a screenshot or a document — it sends that photo’s description to TypeSafe automatically after the gallery is analyzed. The description is of the same kind as above, with text shortened to 300 characters, and also says whether the photo was taken with a camera or saved from the web or a chat (based on file metadata), where the text is, whether there are animals, a QR code, emoji or stickers, and the closest captions from a fixed set (“meme with caption”, “price tag”, “receipt”…) produced by a model the app downloads from our server or our content delivery network. On iPhones with Apple Intelligence it may include a short caption written by Apple’s model on the device itself; the model is instructed to leave out names, numbers and addresses, and the app additionally removes card numbers and email addresses. Favorites are never sent for sorting.

Similar photos. To choose the best shot in a series of similar photos, the app may send the numeric characteristics of the photos in that series.

Outdated screenshots. For screenshots older than two weeks, the app sends the recognized text (up to 300 characters, with card numbers and email addresses removed) and their age in days to TypeSafe, to tell whether that information is still needed.

We do not store request texts or these descriptions. For each AI request we record only the provider, the type of operation and the number of photos analyzed — to keep AI features free and within fair-use limits. Photo and video compression, Live Photo conversion and weekly reminders work only on your device: a reminder is a local iPhone notification, and nothing is sent to the server for it.

5. Purchases and balance

Purchases are processed by Apple; we never see your payment details. To add files to your balance, we verify the signed transaction from the App Store and store its identifier, product, environment, status and number of files. If Apple notifies us of a refund, up to the number of files that purchase added is removed from your balance (it never goes below zero); if Apple reverses the refund, they are restored.

When you delete, compress or convert files, we record how many files were processed, how much space was freed and whether the operation completed — this is your balance and the statistics in your profile. While an operation is in progress, the files are reserved on your balance; unused reservations expire and are removed automatically. We do not receive which photos were processed.

Refund requests. If you allow “Help improve GalleryGo” (the app asks once; it is off by default and can be changed in your profile) and later ask Apple for a refund, we tell Apple what share of that purchase you have used and our recommendation: a full refund if you used nothing or a deletion failed, a partial one if you used part of it, none if you used it all. Apple makes the decision. We send nothing else, and without your consent we don’t answer Apple’s request at all. To access or delete this data at Apple, visit privacy.apple.com.

6. Crash reports

Only if you allow “Help improve GalleryGo” does the app send crash reports to Sentry; without consent Sentry does not start. They contain technical information about the error, the device model and the versions of iOS and the app — without screenshots, photos, request texts, file paths or personal identifiers.

7. Support

If you write to us through the form in the app or on this website, we receive the email address and message you enter, your interface language and, from the app, its version and your account identifier. The message is delivered to our support mailbox through our email provider and is not stored on our server. We keep the correspondence as long as needed to answer you and resolve your request.

8. Website and service requests

This website does not use cookies, analytics or third-party scripts. The app also contacts our server to check for app updates and to download language files and analysis models; these requests contain only technical information such as the app and platform version. Our server uses your IP address only to limit the rate of requests and does not store it; our hosting provider may keep standard technical logs for a short period.

9. What we don’t do

• We don’t show ads and don’t use advertising or tracking SDKs.
• We don’t sell or share your data with third parties, except the processors listed above.
• We don’t use your data to train AI models.

10. Storage and deletion

Data is kept while your account exists. Records of AI usage are deleted after 90 days. You can delete your account at any time in the app: Profile → Delete account. This deletes your account, sessions, balance and usage records and revokes Sign in with Apple. An unused balance is lost when the account is deleted.

We keep only a record that an App Store transaction (identifier, product, environment, status) has already been credited or refunded, no longer linked to you — so the same purchase cannot be credited twice. Messages you sent to support stay in our support mailbox.

11. Security

All connections use HTTPS. Refresh tokens are stored on the server only as hashes, and session tokens are not stored at all. The Apple token is stored encrypted. Access to the server and the database is restricted.

12. Children

The app is not directed at children under 13, and we do not knowingly collect their data.

13. Your rights

Depending on where you live (for example under GDPR), you have the right to access, correct and delete your data, and to object to its processing. You can delete your account and all data linked to it in the app; for anything else, contact us at support@gallerygo.com.

14. Changes

We will update this page when the way we process data changes, and change the “Last updated” date.

15. Contact

Alexey Vikarchuk, support@gallerygo.com.