Last updated: 2026-09-24
Photo Keepside (the “App”) is an iPhone application for viewing photos and videos and storing selected media and files in a private vault. In this Policy, “we,” “us” and “our” refer to the operator of Photo Keepside, responsible for the personal data processing described here. Privacy and support contact: support@photokeepside.com.
This Policy describes the App and support communications. Apple and any storage provider you choose have their own policies. The App does not require you to create a separate Photo Keepside account to use its local features.
With the access you grant through iOS, the App reads authorized photos, videos and related information, such as asset identifiers, filenames, media types, dates, dimensions and file sizes. It processes media on your device to display previews and let you select, import, view and manage content in the App. Local records can contain thumbnails, file metadata and your selections.
The App’s media viewing and vault features do not upload your media content to our servers or to advertising or analytics providers. Importing an item into the vault creates a local copy and does not by itself remove the original from Photos or its source provider. Imported media can retain metadata already contained in the source file.
Apple or a file provider may transfer a file to your device when you select content stored in iCloud or another service. Device backups and synchronization are controlled by your system and provider settings. “Stored locally” does not mean that the operating system can never include the data in a backup.
The vault stores imported files, thumbnails and file metadata within the App’s storage. It uses iOS file protection. A salted PIN verifier and related access settings are held in the iOS Keychain. Face ID authentication is performed by Apple’s system services; the App receives an authentication outcome, not your facial image or biometric template.
Photo permission is used for the media features you request. Limited access restricts the items the App can inspect. Face ID is optional for vault access. The system file picker grants access to files you select. You can change permissions in iOS Settings; withdrawing access can limit related features. These permissions do not authorize unrelated uses of your data.
Where purchases and commercial services are enabled in your release, the App handles product identifiers, prices, currency, transaction identifiers, purchase or restore outcomes, subscription entitlements and a generated app-account token. Apple processes payment details. We do not receive your complete payment-card details from Apple.
Commercial services can process a generated installation identifier, Apple’s identifier for vendors (IDFV), an AppsFlyer identifier, the App’s bundle identifier and, when authorized under App Tracking Transparency (ATT), the identifier for advertisers (IDFA). The configured operator backend can receive the bundle identifier, installation identifier, AppsFlyer identifier, IDFV and authorized IDFA for attribution and purchase-related identifier association. These are identifiers and can be personal data even if they do not contain your name.
If enabled, usage analytics records screen and feature visits, permission outcomes, subscription-offer views, purchase-button actions, purchase results, product/price/currency details, transaction IDs and fixed error categories. Network services also necessarily receive connection information such as IP addresses; SDKs may process device, operating-system, language, session and campaign information under their actual configuration.
Where enabled, AppsFlyer provides attribution services and ThinkingData provides event analytics using the relevant data categories described above. Hosting and infrastructure providers support the configured backend services. These disclosures apply only to integrations enabled in the version you use; they do not mean that every integration is active in every version.
We process data to provide requested media and vault functions, administer purchases and restore access, respond to support requests, maintain the service, and, where enabled, understand use and measure acquisition campaigns.
Where EEA or UK data-protection law applies, processing objectively necessary to deliver requested services is based on performance of our contract with you; optional tracking or other processing requiring consent is based on consent; mandatory recordkeeping is based on legal obligation. Security and service reliability may rely on our legitimate interests after assessing effects on your rights. Analytics may rely on legitimate interests only where legally permitted and properly assessed; otherwise prior consent is required. An iOS permission does not replace any additional consent required by law.
If you contact support, we receive the contact details and information you choose to send. Please avoid sending sensitive photos or vault files unless needed to resolve your request.
You can allow or refuse tracking through Apple’s ATT prompt and change that decision in iOS Settings > Privacy & Security > Tracking. Without ATT authorization, the App does not read the IDFA. Refusing ATT does not necessarily disable all networking, purchase processing or permitted non-tracking analytics. Other identifiers must not be used to circumvent your tracking choice.
You can contact the contact email in section 13 to request information about analytics and advertising processing or to exercise any applicable right to opt out of the sale or sharing of personal data or targeted advertising. We do not sell or share photo or vault content with advertisers. Commercial identifiers are handled separately as described in sections 4 and 7; this statement about media content does not imply that all other processing is exempt from advertising-related privacy requirements.
Apple provides App Store purchases, system permissions and device authentication. Enabled analytics, attribution and hosting providers receive the data necessary for their configured services, subject to applicable contractual and legal requirements. The relevant commercial integrations and data categories are described in section 4.
We may disclose relevant information when legally required, to investigate fraud or security incidents, or to protect legal rights. If ownership of the service changes, relevant business records may transfer subject to applicable protections and required notice. Local-only media is not automatically available to us for such disclosure.
See Apple’s privacy policy at https://www.apple.com/legal/privacy/ and AppsFlyer’s services policy at https://www.appsflyer.com/legal/services-privacy-policy/. For questions about service providers used by Photo Keepside, contact the contact email in section 13.
Local media copies and associated records remain until you delete them or the App’s data is removed. Removing an original in Photos and deleting its vault copy are separate actions. Uninstalling the App can remove local vault content; offloading is different, and Keychain entries, Apple purchase records or system backups may persist under platform behavior and settings.
Where server-side records are processed, we retain them only for as long as needed for their stated purposes. For attribution and usage records, the criteria are the period needed to evaluate campaigns and improve the service; for identifier records, the need to maintain the relevant attribution or purchase association; for purchase records, the duration needed to administer entitlements, resolve disputes and meet legal recordkeeping obligations; and for support communications, the time needed to resolve and follow up on your request. Retention also takes account of data sensitivity and applicable legal requirements. Data no longer needed is deleted or anonymized, unless retention is legally required. Backup copies are subject to the applicable backup replacement cycle and are restricted from ordinary use pending removal.
To request deletion of data we hold, contact the contact email in section 13. We may request proportionate information to locate your records and verify your request. Uninstalling alone does not request deletion of server-side records or cancel a subscription. We cannot remotely retrieve or erase files held only on your device.
Where enabled commercial or support services involve processing outside your country, applicable data-transfer requirements apply. Transfers requiring safeguards must use a legally permitted mechanism, such as an applicable adequacy decision or appropriate contractual safeguards. You can request information about processing locations and applicable safeguards at the contact email in section 13. Local photo processing does not mean that commercial or support records always remain in your country.
Depending on where you live and the applicable law, you may have rights to access, correct, delete or receive a portable copy of personal data, restrict or object to processing, withdraw consent, opt out of certain advertising disclosures, appeal a refused request, and complain to a data-protection authority. These rights have statutory conditions and exceptions. Withdrawing consent does not affect earlier lawful processing.
Send requests or appeals to the contact email in section 13. We will respond within applicable statutory time limits and explain any refusal and available appeal route. Where required, authorized agents may act for you subject to verification. We will not unlawfully discriminate against you for exercising your rights.
The App does not make solely automated decisions about you with legal or similarly significant effects.
The App uses system file protection, Keychain storage for vault access credentials, and HTTPS for the configured identifier-upload endpoint. Access protection is not a guarantee against every threat. This Policy does not promise end-to-end encryption, a separately encrypted vault format or an operator-managed backup service. Keep your device secure and maintain independent copies of important files.
The service is intended for a general audience and is not directed to children under 13. Where local law requires a higher age or parental authorization for relevant processing, that requirement applies. If you believe a child’s information has been provided to us improperly, contact the contact email in section 13 so we can investigate and take required action. An App Store age rating is separate from legal consent requirements.
We will update the date when this Policy changes and provide additional notice where a material change or applicable law requires it. If a new processing activity requires consent, we will obtain it before that activity begins. Continued use is not a substitute for required consent.
Privacy and support: support@photokeepside.com