Privacy Policy
The short version
- Your photos and videos never leave your phone. We do not upload, copy or analyze them on any server.
- By default, the app sends anonymous usage counters and crash reports. You can switch this off in Settings at any time.
- No account, no ads, no advertising identifier, no tracking across apps, no selling of data.
Who we are
Photo Sorting is developed by Petr Lukovkin (“we”, “us”), who is responsible for the data described in this policy. Contact: support@onemoreword.app.
Your photos and videos
The app asks for access to your photo library so you can sort it. All processing happens on your device: reading photos, grouping them into decks (trips, weekends, events), your keep/delete decisions and the in-app trash.
Information derived from your photos — which ones you kept or swiped away, the decks, sorting progress — is stored only inside the app on your device. It is removed when you delete the app, and you can clear your decisions at any time in Settings → Reset all decisions.
We never send photos, previews, file names, photo identifiers, capture dates, locations, album names or any other information about the content of your library.
Deleting photos
Photos are deleted only when you empty the in-app trash and confirm the system prompt. On iOS they go to “Recently Deleted”, on Android to the system trash, where you can still restore them for a limited time.
Photo locations and place names
To name decks after places (“Lisbon, Portugal”), the app reads the location stored in a photo’s metadata and matches it against a place database built into the app (GeoNames, CC BY 4.0). The lookup runs offline on your device; coordinates and place names are never sent anywhere. On Android this is why the app asks for the “access media location” permission.
Faces on sorting cards
So that people are not cut off at the edge of a sorting card, the app finds where faces are in a photo using the operating system’s on-device tools: Apple Vision on iOS and Google ML Kit (with the model built into the app) on Android. The app only gets rectangles that mark where faces are. It does not recognize or identify people, does not create face templates or biometric data, and does not store or send the results.
On Android, Google ML Kit may send Google technical information about how the face-detection feature itself performs (for example, device model, app identifier, ML Kit version and processing time), as described in Google’s ML Kit terms. It does not send your photos or the faces found in them.
Photos stored in iCloud
If a photo is stored only in iCloud Photos, iOS may download it from Apple when you open it in the app. That download is handled by Apple under your iCloud settings and Apple’s privacy policy; we receive nothing.
Sharing
When you tap Share on a photo, it is passed to the system share sheet and then to the app or person you choose. We are not involved in that transfer.
Permissions
- Photos and videos (iOS: Photo Library; Android: Photos and videos, or Selected photos) — to show your photos for sorting and to move the ones you choose to the trash. Full or limited access both work; you can change this in system settings at any time.
- Media location (Android) — to read the location stored in your photos for place names, on device only.
- Notifications — optional reminders (for example, a trash that is ready to be emptied or a deck you did not finish). They are scheduled on your phone; there is no push server. On Android the app also restores scheduled reminders after a restart.
- Internet — used only for the anonymous statistics and crash reports described below.
Anonymous usage statistics
Anonymous statistics is on by default, and you can switch it off at any time in Settings → Anonymous statistics; after that nothing is sent. While it is on, the app sends counters of actions to our analytics provider, Mixpanel (servers in the European Union), so we can see how many people use the app, whether they come back and which features matter. Examples: “app opened”, “deck finished: 40 kept, 12 deleted”, “trash emptied”. Events contain only names, numbers, yes/no values and fixed options; large numbers (such as library size) are rounded into ranges.
Together with these events, Mixpanel receives technical data about the device: model, operating system and version, app version, system language, and a random identifier that we use to count unique installs. We switch off location detection by IP address and do not use session recording. We do not use the advertising identifier and do not combine this data with other sources.
Crash reports
While the same setting is on, the app sends crash reports to Firebase Crashlytics (Google). A report contains the technical error and where in the app’s code it happened, the app version, device model, operating system version, free memory and storage, and a random Crashlytics installation identifier. File paths are removed from error texts before sending.
What we do not do
- No ads and no advertising identifiers (IDFA / Android Advertising ID).
- No tracking across other apps or websites, so the app never asks for tracking permission.
- No selling or sharing of personal information, including “sale” or “sharing” as defined by California law.
- No accounts and no sign-in; we do not collect your name, email or contacts.
Service providers and transfers
Mixpanel (usage statistics) and Google (Firebase Crashlytics, and ML Kit on Android) process data only on our behalf, to provide these functions. Mixpanel stores data in the EU. Google may process crash reports in the United States and other countries; such transfers rely on safeguards like the EU Standard Contractual Clauses.
Legal basis and retention
For users in the EU, UK and similar jurisdictions: on-device processing of your photos is part of the service you asked for. Usage statistics and crash reports are based on our legitimate interest in keeping the app stable and improving it; the data is minimal and not linked to your identity, and you can object at any time by switching off Anonymous statistics in Settings.
Usage statistics are kept for up to 24 months, crash reports for 90 days. Data is transmitted over encrypted connections (HTTPS).
Your choices and rights
- Stop statistics and crash reports: Settings → Anonymous statistics. Nothing is sent after that.
- Reset the random identifier: delete and reinstall the app.
- Remove everything on your device: delete the app. Your photos stay in your gallery.
- Depending on where you live (for example, the EU, UK or California), you may have the right to access, correct or delete data and to object to or restrict processing, and to complain to your local data protection authority. Because the data is not linked to your identity, include the app version, your platform and the approximate date when you write to support@onemoreword.app, and we will help as far as we can identify the data.
Children
The app is not directed to children under 13, and we do not knowingly collect data from them.
Changes to this policy
If this policy changes, we will update this page and the “Last updated” date above. Significant changes will also be described in the app’s release notes.
Contact
Questions or requests? Write to support@onemoreword.app or use the support page.