Favorites Gallery

Privacy Policy

Last updated: August 13, 2026

1. Introduction

Favorites Gallery ("we," "us," "our," or "Company") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

2. Information We Collect

2.1 User Account Information:

  • Email address (for authentication via Firebase)
  • Name (from Google/Apple sign-in providers)
  • Unique user ID (for tracking preferences and subscriptions)

2.2 Waitlist Sign-ups:

  • Email address, if you choose to submit one through the waitlist form on this website
  • Which page the sign-up came from, so we know which content people found useful
  • The date and time of the sign-up

We use this only to send you a single email when the app becomes available. It is not a newsletter, we do not send marketing to this list, and we do not sell, rent or share these addresses with anyone. The lawful basis is your consent, given by submitting the form. We delete your address no later than 6 months after you submit it, whether or not the app has launched by then, and sooner once the launch email has been sent. You can ask us to remove your address at any time by emailing hello@favoritesgallery.com, and no account or app installation is needed to make that request.

2.3 Photo & Media Information:

  • Photos and videos marked as "Favorites" on your device (accessed via expo-media-library)
  • Photo metadata: creation date, modification date, file name, EXIF data
  • We do NOT collect the actual photo files unless you explicitly upload them to cloud storage

2.4 Location Data:

  • GPS coordinates for "home perimeter" detection (used for AI event naming)
  • Location data extracted from photo EXIF data (if available)
  • All location data is processed locally on your device and never sent to our servers

2.5 Device Information:

  • Device model and operating system version
  • Device name (e.g., "Jochem's Samsung S24")
  • App version and installation date

2.6 Subscription & Payment Data:

  • Subscription tier and renewal status (managed by RevenueCat)
  • Purchase history and receipt data (stored on device and RevenueCat servers)
  • Voucher redemption history (hashed voucher codes stored in Cloudflare)

2.7 Cloud Service Credentials:

  • OAuth tokens for Google Drive, Microsoft OneDrive, Dropbox, iCloud, and SmugMug
  • These tokens are stored securely on your device using expo-secure-store
  • We do not have access to your cloud service credentials directly

2.8 Analytics & Advertising:

  • Ad impressions and clicks (via Google Mobile Ads / AdMob)
  • No personal identification is shared with advertisers

3. How We Use Your Information

  • To send you one email at launch, if you joined the waitlist on our website
  • To scan and organize your favorite photos locally on your device
  • To enable cloud backup to your chosen storage service
  • To perform AI-powered event detection and folder naming (via Google Gemini API)
  • To manage your subscription and process payments (via RevenueCat)
  • To enforce free tier limitations and premium features
  • To send notifications about sync completion and archive readiness
  • To display personalized ads to free users (via AdMob)
  • To improve app performance and fix bugs

4. Data Sharing & Third Parties

We share data with the following third-party services:

  • Google Gemini API: Anonymized photo metadata and location clusters for event naming
  • Google Cloud (Firebase): User authentication, settings, and subscription status
  • RevenueCat: Subscription information and purchase history
  • Google Mobile Ads: Non-identifying data for ad targeting
  • Cloud Storage Providers: Photos and metadata (only to services you explicitly authorize)
  • Cloudflare: Voucher redemption data (hashed and rate-limited)

We do NOT sell your personal data to any third parties.

5. Data Security

  • All data in transit is encrypted using TLS/SSL (HTTPS)
  • OAuth tokens are stored in device secure storage (expo-secure-store)
  • Photo files on your device are stored in standard app directories with OS-level protection
  • Firestore database rules restrict access to your own data only

6. Your Rights (GDPR & CCPA)

If you are in the EU (GDPR):

  • Right to access: Request a copy of your personal data
  • Right to erasure: Request deletion of your account and data
  • Right to rectification: Update incorrect information
  • Right to portability: Export your data in a standard format
  • Right to withdraw consent: Opt out of certain data processing

If you are in California (CCPA):

  • Right to know what data we collect
  • Right to delete your data
  • Right to opt-out of sale/sharing of data (we don't sell your data)
  • Right to non-discrimination for exercising these rights

7. Data Retention

  • Photos remain on your device indefinitely until you delete them
  • Cloud backups are retained until you delete them from the cloud service
  • Account data is retained until you delete your account
  • Log files and analytics are retained for up to 30 days

8. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete such information as quickly as possible.

9. Policy Updates

We may update this Privacy Policy from time to time. Changes become effective when posted to the app and website. Your continued use of the Service constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or requests regarding this Privacy Policy, please contact us at:
Email: privacy@favoritesgallery.com
Mailing Address: [Your Company Address]