Privacy Policy
Gallery: Photo Vault & Cleaner
Developer: Saffron Applications
Effective date: 22 October 2026
This Privacy Policy explains what information the Gallery: Photo Vault & Cleaner app ("Gallery", "the app", "we", "us") uses, why, and what choices you have. Gallery is built to keep your photos and videos on your phone. We do not ask you to create an account, and we never upload your photos, videos or files.
By using the app you agree to this policy. If you do not agree, please do not use the app.
1. Summary
- Your photos, videos and files stay on your device. They are never uploaded to us or to anyone else.
- Face, place and object recognition, search and the Ask feature run entirely on your phone.
- Vault items are encrypted on your device. We cannot see them and cannot recover them.
- No account and no sign-in. We do not collect your name, email address, phone number or contacts.
- The app shows ads and uses Google Firebase. These services collect limited device and usage data, described in section 4.
2. Information that stays on your device
To work as a gallery, the app reads and processes the following on your device only. None of it is sent to us.
- Photos and videos: to show, sort, search, edit and organise them. Editing always saves a copy, so your original stays unless you choose to delete it.
- Photo details (metadata): dates, file names, sizes and, where a photo contains it, the location where it was taken. Location is used only to place photos on the in-app map and to group them by place.
- People, places and things: the app recognises faces, places and objects (for example "beach" or "food") using models that run on your phone. The results are stored in the app's private storage on your device.
- Search and Ask: what you type into search or Ask is processed on your phone and is not sent anywhere.
- Vault: files you move to the Vault are encrypted on your device. The encryption key is kept in the Android Keystore on your phone. Your PIN is stored on your device only. If you use fingerprint unlock, the fingerprint is checked by Android; the app never receives your fingerprint data.
- Cleanup: duplicate, similar, blurry and screenshot detection runs on your phone.
- Settings and app data: your preferences, albums, favourites and moments are stored on your device.
Recently deleted. Items you delete in the app are kept in Recently deleted for 30 days so you can restore them, then removed.
Android backup. If you have turned on Android's own backup (Google One / Google Drive backup), Android may back up the app's settings to your Google account under Google's terms. Vault files are always excluded from backups and device transfers, because they could not be decrypted on another device.
3. Permissions the app asks for
- Photos and videos (or Selected photos): to show and manage your media.
- All files access (optional): lets you choose this for full file management, such as moving, copying, renaming and deleting files and folders, and for Cleanup to work across all folders. You can use the app with media-only access instead.
- Media location: to read the location saved inside photos for the map and places. The app does not ask for your phone's current location.
- Notifications (optional): for reminders created on your phone, such as moments and cleanup suggestions.
- Fingerprint / biometrics (optional): to unlock the Vault or the app lock.
- Set wallpaper: when you choose to set a photo as your wallpaper.
- Internet: to show map tiles and ads, and for the services in section 4. Your photos are never sent over the internet.
- Run at start-up: to refresh the app's list of photo folders on your device after your phone restarts, so the gallery opens up to date.
4. Information collected by third-party services
The app uses the services below. They may automatically collect limited information from your device when you use the app. We do not receive your photos, videos or files from any of them.
Advertising
The app shows ads using Google AdMob, which may also request ads from these partner networks: AppLovin, Meta Audience Network, Pangle, InMobi and Liftoff Monetize (Vungle). To show ads, measure them and prevent fraud, these services may collect:
- Device identifiers, such as your Android advertising ID and app set ID
- Approximate location derived from your IP address (not your precise location)
- Interactions with ads and the app, such as app launches, ad views and taps
- Diagnostic and performance data, such as crash logs and load times
Depending on your choices, ads may be personalised based on this information.
Analytics, crash reports and configuration (Google Firebase)
- Google Analytics for Firebase: how the app is used, for example screens opened, session length, ad impressions and earnings per ad placement, app version and device model, and app purchases (such as the "Remove ads" purchase). It uses an app instance ID and may use the advertising ID. It helps us improve the app.
- Firebase Crashlytics: if the app crashes, a crash report with the error, app state at the time and device details (model, Android version), plus an installation ID. It helps us fix bugs.
- Firebase Remote Config: lets us change some app settings, such as how often ads appear, without an app update. It uses a Firebase installation ID and basic details such as country, language and app version.
Purchases (Google Play)
The optional one-time "Remove ads" purchase is handled entirely by Google Play. We never see or store your payment details. When ads are removed, the ads services stop running in the app.
Map (OpenStreetMap)
When you open the map, map images (tiles) for the area you are viewing are downloaded from OpenStreetMap's servers. Like any website, those servers receive your IP address and the map area requested. Your photos and their locations are not sent.
Third-party privacy policies
- Google (AdMob, Firebase, Google Play): policies.google.com/privacy and how Google uses data from partner apps
- AppLovin: applovin.com/privacy
- Meta Audience Network: facebook.com/privacy/policy
- Pangle: pangleglobal.com/privacy
- InMobi: inmobi.com/privacy-policy
- Liftoff Monetize (Vungle): liftoff.io/privacy-policy
- OpenStreetMap: osmfoundation.org/wiki/Privacy_Policy
5. How the information is used
- To provide the app's features (all photo processing happens on your device)
- To show ads, which keep the app available at no cost to download
- To understand how the app is used and improve it
- To find and fix crashes and performance problems
- To prevent fraud and keep the app secure
We do not sell your personal information for money. We do not use your photos, videos or files for advertising, analytics or any other purpose.
6. Your choices
- Ad consent: if you are in the European Economic Area, the United Kingdom or Switzerland, the app asks for your consent before personalised ads and analytics storage. You can change your choice at any time in the app under Settings > About > Ad choices.
- Advertising ID: you can reset or delete your advertising ID, or opt out of ads personalisation, in your phone's settings (usually Settings > Privacy > Ads or Settings > Google > Ads).
- Remove ads: the optional one-time purchase removes all ads and stops the ad services in the app.
- Permissions: you can allow or revoke the app's permissions at any time in Android settings. Some features may not work without them.
- Delete your data: data stored by the app on your device is deleted when you clear the app's data or uninstall it. Note: uninstalling also permanently deletes Vault items; move them out of the Vault first. For data held by the services in section 4, see their policies, or contact us and we will help where we can.
7. Data retention
Information on your device stays there until you delete it or uninstall the app. Firebase Analytics data is kept for a limited period set in our Firebase settings (no more than 14 months). Crashlytics crash reports are kept for up to 90 days. Advertising partners keep data according to their own policies.
8. Security
Data sent by the services in section 4 is encrypted in transit (HTTPS/TLS). Vault files are encrypted on your device with a key protected by the Android Keystore. No method of storage or transmission is completely secure, but we work to protect your information and keep data collection to a minimum.
9. Children's privacy
The app is not directed at children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided personal information through the app, please contact us and we will help remove it.
10. Your rights (GDPR, UK GDPR, CCPA and similar laws)
Depending on where you live, you may have the right to access, correct or delete your personal information, to object to or restrict its processing, to withdraw consent, and to complain to your local data protection authority. Where the GDPR applies, we rely on your consent for personalised ads and analytics storage, and on our legitimate interest to keep the app working, secure and free of crashes.
California residents: we do not sell personal information for money. Sharing device identifiers with advertising partners may count as "sharing" for cross-context behavioural advertising under California law; you can opt out by deleting your advertising ID or turning off ads personalisation as described in section 6. We will not discriminate against you for using your rights.
Because we do not ask for your name or email and your photos never leave your device, we usually hold no information that identifies you. To make a request, contact us using the details below.
11. International transfers
The third-party services in section 4 may process information on servers in other countries, including the United States, under their own safeguards.
12. Changes to this policy
We may update this Privacy Policy from time to time. The new version will be posted on this page with a new effective date. Please check it from time to time.
13. Contact us
If you have any questions about this Privacy Policy or your data, contact us at:
Email: saffronapplications@gmail.com
Developer: Saffron Applications