Privacy

Field by field: what travels, where it goes, and whether it is kept.

Your original photos never leave your phone. To read a photo, the app sends a small copy that is described in words and not stored. What is kept is a description, in an index that belongs to your account.

YOUR PHONE Original photos, full size EXIF and GPS read here API key, Keystore-encrypted Label and vector cache Thumbnails, from the phone excluded from phone backups OPENSOLR.COM Sign-in and approval Create index, upload config Plan limits and usage API.OPENSOLR.COM CLIP on a 640 px copy Vectors of the labels Nothing stored YOUR OPENSOLR INDEX Labels (the meaning) Search vector Date, camera, place Path, folder, size Removed with the photo one per phone, in your account direct to Solr: HTTPS + index password Every arrow is HTTPS. The app sends nothing to any other host: no analytics, no ads, no crash reporting.

Figure 1 — where each piece of data lives.

01 · What leaves the phone
A 640 px JPEG copy of each new photo, re-encoded from pixels, without metadata

No

Goes to
api.opensolr.com image_clip
The words each photo was read into

No

Goes to
api.opensolr.com batch_embed
Your typed searches

Not by the app; the query goes to your own index

Goes to
embed, then your index
Words, vector, camera details, place, path, folder, file name, size

Yes, until the photo leaves the phone or you empty the index

Goes to
Your Opensolr Index
The GPS position of each photo that has one, rounded to about 10 m

Yes, permanently, as an anonymous position-to-place answer that is not tied to your account or your photo

Goes to
opensolr.com nearby_places
The area of the map you are looking at

Only as tile requests, not stored by the app

Goes to
tile.openstreetmap.org, only while the map screen is open
Account email and API key

It is your account

Goes to
opensolr.com, with each call

Never sent anywhere: the original files, their metadata blocks as such, the thumbnails in the grid, and anything about how you use the app.

02 · What the app does not have
  • No analytics, no advertising, no crash reporting.
  • No third-party SDK that talks to the network. The dependencies are AndroidX, Jetpack Compose, OkHttp, Coil and osmdroid; osmdroid draws the map and fetches its tiles from OpenStreetMap only while the map screen is open.
  • No access to anything but images. The app never writes to, moves or deletes your photos.
03 · What stays on the phone
  • The account API key and the index password, encrypted with a key held by the Android Keystore.
  • The photo cache: the documents and vectors already paid for.
  • Settings: chosen folders, schedule, the last sync report.
Excluded from backups

Backups are switched off for the app and every kind of app data is excluded from cloud backup and from phone-to-phone transfer. A restored or new phone signs in again.

04 · Location

Android removes GPS coordinates from photos unless the app is allowed to access photo locations. Allow it and photos are indexed with their position and the nearest place in words (city, region, country), so you can filter by place, search within a distance and see them on the map; decline it and photos are indexed without one. The choice can be changed in Android's settings at any time and applies to photos indexed from then on.

The phone's own approximate position is a separate, optional permission. It is read once, when this phone's index is created, to choose the Opensolr environment nearest to you, and it never leaves the phone.

Opensolr Photos is open source and MIT licensed. Questions about your Opensolr account, index or plan go to opensolr.com/contact; questions about the app itself belong on GitHub.

Opensolr Photos Documentation