Your original photos never leave your phone. To read a photo, the app sends a small copy that is described in words and not stored. What is kept is a description, in an index that belongs to your account.
Figure 1 — where each piece of data lives.
No
No
Not by the app; the query goes to your own index
Yes, until the photo leaves the phone or you empty the index
Yes, permanently, as an anonymous position-to-place answer that is not tied to your account or your photo
Only as tile requests, not stored by the app
It is your account
Never sent anywhere: the original files, their metadata blocks as such, the thumbnails in the grid, and anything about how you use the app.
- No analytics, no advertising, no crash reporting.
- No third-party SDK that talks to the network. The dependencies are AndroidX, Jetpack Compose, OkHttp, Coil and osmdroid; osmdroid draws the map and fetches its tiles from OpenStreetMap only while the map screen is open.
- No access to anything but images. The app never writes to, moves or deletes your photos.
- The account API key and the index password, encrypted with a key held by the Android Keystore.
- The photo cache: the documents and vectors already paid for.
- Settings: chosen folders, schedule, the last sync report.
Backups are switched off for the app and every kind of app data is excluded from cloud backup and from phone-to-phone transfer. A restored or new phone signs in again.
Android removes GPS coordinates from photos unless the app is allowed to access photo locations. Allow it and photos are indexed with their position and the nearest place in words (city, region, country), so you can filter by place, search within a distance and see them on the map; decline it and photos are indexed without one. The choice can be changed in Android's settings at any time and applies to photos indexed from then on.
The phone's own approximate position is a separate, optional permission. It is read once, when this phone's index is created, to choose the Opensolr environment nearest to you, and it never leaves the phone.