The privacy promise
Your photos never leave the phone unless you ask for a cloud job
Sifting, duplicate detection, face grouping and document text all run locally. When something does need the cloud, it is one file at a time, initiated by you, used once, then deleted straight after.
0 bytes
uploaded by default
Install, scan and clean an entire library with the phone in airplane mode. Nothing breaks.
Used once
then deleted, and only if you say yes
A file you send for summarising or transcription is processed and deleted. Never used for training.
No account
to use the free app
We cannot lose data we never collected. An email is only needed for Plus billing.
What happens where
| JOB | WHERE IT RUNS | WHAT WE STORE | COST |
|---|---|---|---|
| Scanning and indexing your files | Your phone | Nothing. The index stays on this phone | Free |
| Finding duplicates, bursts and large files | Your phone | Nothing | Free |
| Compressing, resizing, converting | Your phone | Nothing | 100 a month free |
| Finding and naming faces | Your phone | Nothing. Faces stay on this phone | Free |
| Reading text inside PDFs | Your phone | Nothing | Free |
| Summarising documents, reading hard scans | Our cloud, only if you allow it and confirm each job | The file, deleted after use | 5 a month free |
| Transcribing audio or video | Our cloud, only if you allow it and confirm each job | The file, deleted after use | 5 a month free |
| Your account | Our servers | Your email and plan | — |
| Crash reports | Our servers, only if you switch them on | Anonymous crash data, no file content | — |
The full policy, sub-processor list and data-deletion request form are at Privacy policy.
In the app
The same promise, written into the settings
Privacy and processing is a real screen, not a policy link: it names every job that can reach the internet and lets you turn each one off. Cloud work asks permission per job, every time.