Privacy Policy
Photo Sprite · Effective October 11, 2026
1. Data processed on your device
To make suggestions, the app reads your photo library on your iPhone and analyzes it with Apple's Vision framework:
- metadata such as date, location, size and whether a photo is a favorite;
- quality scores, content labels (like "beach" or "cat"), the number of faces and how well they were captured, and lens smudges;
- text, QR codes and barcodes in screenshots and photos of documents.
The results are stored only in the app's local storage and are never uploaded. Photo locations are turned into city names with Apple Maps (only coordinates are sent, never photos).
2. Voice input
When you use voice in the Assistant, the app uses the microphone and iOS's built-in speech recognition (SFSpeechRecognizer in the Speech framework, the same as keyboard dictation) to turn speech into text. Where the device supports it, recognition happens on your iPhone; otherwise iOS sends the audio to Apple for transcription, under Apple's privacy policy. The app itself never stores recordings or sends them to anyone other than Apple. The resulting text is handled like a typed message (see the next section). Replies are read aloud with the system's speech synthesis, also on the device.
3. Data sent when you use the Assistant
The Assistant is optional, and the app asks for your consent before its first use. When you use it, the following is sent to the AI provider you chose in Settings (such as Anthropic, OpenAI, Google, OpenRouter or DeepSeek):
- your typed or spoken messages (only the recognized text);
- statistics about your photos, such as counts, dates, city names and album names;
- text recognized on the device, when the Assistant needs to read it;
- a few downsized photos (512 pixels on the longest side), when the Assistant needs to check what's in them.
These requests use your own API key or account and go directly from your device to the provider, never through our servers. For how a provider handles this data, see that provider's privacy policy.
If you choose an OpenRouter free model (marked "Free"), note that these models are offered by various providers, some of which may store your messages or use them to train models, depending on your privacy settings on the OpenRouter website. Please don't send sensitive content through free models.
If you sign in with a ChatGPT, GitHub Copilot, SuperGrok / X Premium, Kimi Code or Meta subscription, sign-in happens in Apple's secure web sign-in sheet. The credentials the provider issues to the app are kept in this device's Keychain and are used only to send the Assistant's requests to that provider. The app never sees your password, and you can sign out in the app at any time.
If you sign in with OpenRouter, sign-in happens in Apple's secure web sign-in sheet and OpenRouter creates an API key for the app, kept in this device's Keychain. The app never sees your OpenRouter password. You can sign out in the app at any time, or revoke the key on the OpenRouter website.
4. API keys
API keys you enter are stored in the iOS Keychain and used only to send requests to that provider. You can remove them at any time in Settings.
5. What we don't do
- We run no servers and collect no personal data;
- we use no ads, analytics or tracking SDKs;
- we don't sell or share your data;
- we never change or delete photos without your confirmation: every deletion and album is confirmed by you on a review screen, and iOS asks once more before deleting.
6. Deleting data
Settings › Reanalyze Library clears the local analysis results; deleting the app removes everything it stored on the device. For data already sent to an AI provider, please contact that provider.
7. Children
The app is not directed at children under 13 and does not knowingly collect children's personal information.
8. Changes
If this policy changes, we'll update this page and its effective date.
9. Contact
For questions, please open an issue on GitHub Issues.