Privacy Policy

Short version

The app has no accounts, no analytics and no telemetry. Your photos, videos and transfer history never leave your Mac. The only data that ever leaves it concerns a purchase: the App Store handles that for the App Store version, and for the version sold on this website the app exchanges your license key and an anonymous machine identifier with our license service, as described below.

Data the app collects

No usage data. There is no registration, no login, no usage tracking, no crash reporting and no advertising SDK in the application. What the two versions do send for the purchase is listed in the two sections that follow.

Buying in the App Store

The App Store version unlocks through an in-app purchase. The purchase, the receipt and any refund are handled entirely by Apple under Apple's own terms and privacy policy. The app itself receives only the signed purchase record from the system and stores nothing about you.

Buying on this website: the license key

The version downloaded from this website unlocks with a license key. Checkout, payment, invoices and refunds are handled by our merchant of record, Paddle (Paddle.com Market Ltd, or Paddle.com Inc. for buyers in the United States), under its own privacy policy. We do not see your card details. Paddle passes us the order: a transaction identifier, the product bought and the email address you entered at checkout. Our license service issues the key and emails it to that address.

When you enter the key, the app sends to our license service:

• The license key itself, which identifies your purchase.
• An anonymous machine identifier: a keyed hash (HMAC-SHA256) of your Mac's hardware identifier. The hardware identifier itself never leaves your Mac, and the hash cannot be matched against any other app's. It lets the license count the Macs it is active on (a personal license covers up to three at a time).
• Your Mac's name as set in System Settings, so that you can tell your Macs apart when freeing a slot with support. You may rename the Mac before activating if you prefer.

Afterwards the app confirms the key with the same service about once a week, sending the key and the machine identifier again. Without a connection the license keeps working for 30 days from the last confirmation, then the app returns to the free tier until the next successful check. Nothing else is sent: no photos, no file names, no usage data. Requests carry your IP address as any network request does; the service does not keep it beyond short-lived rate-limiting counters.

On your Mac, the key and the activation record are stored in the keychain. Deactivating the Mac in the app's settings removes them and frees the slot. On our side, the key, the order identifier, your email address, the hashed machine identifiers and the Mac names are kept for as long as the license exists, and as long as tax and accounting law requires for the order; you can ask us to delete them once the license is closed. Paddle keeps the payment record under its own retention rules.

The legal basis for this processing is the contract of sale: the data is what is needed to deliver, check and support the license. You have the right to access, correct and delete your data and to complain to your data protection authority; see Contact below.

The App Store copy on the same Mac. If you bought the unlock in the App Store version and later install the website version on the same Mac, the website version reads the App Store copy's receipt locally to unlock itself for free. This happens entirely on your Mac; nothing is sent anywhere.

Updates (website version)

The website version checks for updates with the open source Sparkle framework. The check downloads a small update feed from this website over HTTPS about once a day, and the update itself when you accept it. The request carries your IP address and the app's version. Sparkle's optional system profile reporting is switched off. You can turn automatic checks off in the app's settings. The App Store version updates through the App Store only.

Data the app stores on your Mac

• Transfer history. To offer only new files on the next run, the app records identifiers and checksums of files it has already copied, kept separately per device serial number. This stays in the application support directory on your Mac and can be reset from the interface at any time.
• Settings and caches. Grouping preferences, folder naming presets, thumbnails and geocoding results are cached locally to avoid repeated work.

Nothing in this list is uploaded anywhere. Deleting the application data removes it.

Network access

Besides the license and update checks of the website version described above, the application makes one kind of network request, and only when the feature is enabled: reverse geocoding, which converts coordinates already stored in your photos into city and country names so that folders can be named after places. This is performed by Apple's system geocoding service (CoreLocation), so the request is handled by Apple under Apple's own privacy policy. Coordinates are sent, photos are not.

This can be switched off in the application settings. With it off, the App Store version makes no network requests at all, and folder names simply omit places.

Your device

The connected iPhone or iPad is accessed strictly read only. The app never deletes, edits or writes anything on the device.

This website and email

This site is a set of static pages served by Cloudflare. It sets no cookies and runs no analytics or tracking scripts. As with any web host, Cloudflare receives standard request data such as your IP address and user agent in order to serve the pages and the downloads. The checkout page is Paddle's and is covered by Paddle's privacy policy.

Email to [email protected] is routed by Cloudflare to our mailbox, and our replies and license emails are sent through Resend. Both providers process the messages only to deliver them. Support correspondence is kept for as long as it is needed to resolve your request and for a reasonable period afterwards.

Children

The application is a general purpose utility and is not directed at children. Since no data is collected, none is collected from children either.

Changes

If this policy changes, the updated version is published on this page with a new date at the top.

Contact

Questions about this policy, and requests to access or delete your data: [email protected]. Security reports go to the same address with "Security" in the subject.