PhotoKeeper · Privacy Policy

1. Photos and Apple authentication

Thumbnails, originals, indexes, local paths and task history are processed on your device and selected storage. Media transfers go directly to the iCloud accounts you choose. Photos, videos, Apple passwords, verification codes and authentication cookies are not uploaded to the PhotoKeeper License service. The raw iCloud DSID does not leave your computer. Passwords and verification codes are not intentionally retained; sessions use local operating-system protection where available.

2. License and transaction data

We process a one-way account-binding identifier, encrypted account label, plan, seat use, license status, installation public-key identifier, Paddle transaction references, hashed recovery or invitation codes, timestamps and security events. Cloudflare may provide country and network information for eligibility and security. Earlier website orders may retain an encrypted activation code, masked email, keyed email index and hashed receipt credential for fulfillment and recovery.

3. Support and diagnostics

When you contact support or choose to send a diagnostic report, we process your message and the submitted technical details. Redacted reports may include app and operating-system versions, error codes, authentication states, task counts and timestamps, plus a report identifier. Uploads use a rotating keyed network identifier for abuse prevention. Do not send credentials, private photos or unredacted paths.

4. Providers and website storage

Paddle processes billing under its Privacy Policy. Cloudflare hosts our website and license service under its Privacy Policy. We do not store full card details. Paddle's Merchant-of-Record role covers the resale transaction; PhotoKeeper remains responsible for the obligations described in this policy.

Language selection uses browser preferences and, after a manual choice, a first-party language cookie lasting up to one year. Clear site cookies to reset it. Direct language URLs keep their selected language. In-app payment windows use temporary session storage; earlier website checkout sessions may retain a private receipt credential for order recovery.

5. Purposes, sharing and retention

We process data to perform the requested service, secure accounts, prevent fraud, provide support and meet legal obligations, using applicable contract, legitimate-interest, legal-obligation or consent grounds. Providers may process data internationally with safeguards required by law. Sharing is limited to service provision, lawful requirements, security or a business transfer.

License and binding records remain while necessary for license operation, permanent seat limits and legal obligations. Support messages and submitted diagnostics are retained as needed to resolve the issue, secure the service and meet applicable obligations. Deletion requests are assessed against those purposes; erasing a display label does not release a permanent binding.

6. Your rights and security

Depending on your location, you may request access, correction, deletion, portability, restriction, objection or withdrawal of consent, and complain to your data-protection authority. Contact support with information sufficient to verify the request, without sending passwords or recovery codes. We use encrypted transport, access controls and protected license credentials; no system guarantees absolute security.

7. Children and policy updates

PhotoKeeper is not directed to children under 16. Contact us if a child has supplied personal information. Material policy changes are published with a new effective date, and additional notice or consent is provided where required by law.