Privacy Policy

Last updated: 28 October 2026

This policy covers the Gallery Audit iPhone app and this website, galleryaudit.app. Both are provided by BYTE REFINE, MB, a small partnership (mažoji bendrija) registered in Lithuania, and BYTE REFINE, MB is the data controller. In this policy, “we” and “us” mean BYTE REFINE, MB. You can reach us at support@galleryaudit.app. Our registered office is V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania.

The app

What the app accesses

When you first open Gallery Audit, iOS asks you to give it access to your photo library. The app uses that access to:

• Read the photos in the date range you pick. It looks at their image content and the metadata iOS stores with them: date taken, location (if the photo has one), whether it's a Favorite, whether it's part of a burst, and its file size.
• Create albums you ask for. When you tap Create Album, the app adds a new album to your library. The album only points to photos you already have. Nothing is copied or moved.
• Delete photos you choose to delete. The app never deletes a photo unless you choose it in Free Up Space (or pick a video on the Videos screen) and confirm. iOS moves deleted photos to Recently Deleted, where you can usually recover them for 30 days; if your iCloud storage is full, iOS deletes them right away.

If you give the app access to only some of your photos, it can only see and audit those. You can change this at any time in Settings → Privacy & Security → Photos. Videos are not rated; they are only listed by size so you can choose which to delete.

How your photos are analyzed

All scoring runs on your iPhone, using Apple's built-in Vision framework and the app's own code. This includes checks for sharpness, exposure, similar shots, composition, faces and scenes. Face analysis only detects where faces are and how clear they are, to judge whether a photo is in focus. It doesn't identify people, recognize the same person across photos or create any face profile.

To group photos into trips and work out which countries they were in, the app checks photo locations against a map of country borders built into the app, so this also happens on the device. Photo locations are never sent anywhere.

What leaves your device

Unless you turn on usage stats (see below), nothing is sent to us. The only other time the app goes online is for iCloud Photos. If you use iCloud Photos with “Optimize iPhone Storage” turned on, some full-size photos may be stored only in iCloud. When the app needs to analyze or display one, iOS downloads it from your own iCloud library, the same way the Photos app does.

The app also asks Apple's App Store for Gallery Audit Pro's prices when it shows them, for what your Apple Account has bought when it starts and when you tap Restore Purchases, and to make a purchase you choose (see Purchases).

Apple handles these downloads and App Store requests under Apple's Privacy Policy. We don't receive any of that data.

What the app stores

So you can reopen an audit later, the app saves the results of your last five audits on your iPhone. A saved audit holds each photo's scores (including how many faces it has and how sharp they are, as numbers only) and file size, the groups of similar shots, and your trips (their dates and countries, and the country treated as home). Photos are referred to by the identifiers iOS gives them. No photos, thumbnails, face images or map coordinates are saved.

Saved audits stay in the app's own storage on your iPhone. They aren't sent anywhere and are excluded from iCloud and computer backups. You can pin up to three of them; when a sixth audit is saved, the oldest one that isn't pinned is deleted. You can delete them all with Clear next to Recent Audits in the app, or by deleting the app. The app also remembers whether you've already seen its How It Works guide, your answer to the usage stats question, your Audit Options, and, without Pro, how many free deletions you have left and when they were last topped up. To avoid measuring every video again, it also remembers each video's file size, by the identifier iOS gives it, until you delete the app.

If you share photos to Gallery Audit from the Photos app's share sheet, a small Share extension reads each shared photo's capture time, file name and size in pixels (not the picture itself) and leaves them in storage that only the app and the extension can use on your iPhone. The app uses them to find those photos in your library, and removes them as soon as it picks them up. It ignores anything older than an hour, and your next share replaces one it never picked up. Nothing is sent anywhere.

The app doesn't edit your photos or Favorites. The only changes it makes to your library are creating the albums you ask for and deleting the photos you confirm.

Usage stats (optional)

To learn how Gallery Audit is used and how well its ratings work, the app can send usage stats that aren't linked to you. They're off unless you turn them on. The app asks once, after its How It Works guide, and you can change your answer at any time in the app under About → Share Usage Stats. Until you say yes, the analytics code doesn't start and nothing is sent or stored for later.

If you turn them on, the app uses Google Analytics for Firebase, provided by Google, to send:

• Which features you use. For example: which screens you open, starting or cancelling an audit, filtering results, opening Free Up Space and which groups you chose to delete, creating an album, and the Audit Options an audit used. The app records whether these actions worked, not what they contained.
• Gallery Audit Pro. When the Pro screen opens, what opened it and which version of the screen it showed, the plan you picked, and whether a purchase went through or was cancelled. Never a price, a transaction or order ID, or your Apple Account.
• Rounded audit results. The number of photos audited, how long the audit took and how much space a clean-up would free, all as ranges (like “1,000–4,999 photos”). The share of photos in each rating, in similar-shot groups, in trips and marked as Favorites, as percentages rounded to the nearest 5%.
• How the app was installed: from the App Store or as a TestFlight test build, so test use can be told apart.
• Standard app information that Google Analytics collects on its own: a random ID for this installation of the app, your iPhone model, iOS and app version, language, when and for how long the app is used, and an approximate location (country and city) that Google works out from your IP address. Google Analytics doesn't store IP addresses.

The stats never include your photos or thumbnails, anything about what an individual photo shows (including faces), where photos were taken or which countries you visited, dates, album names, your name, email or Apple Account, or the advertising identifier. The app never sets a user ID, and Google's advertising features are turned off.

We use the stats only to improve the app. We don't sell them or use them for advertising. Google Analytics keeps them for 14 months, then deletes them. Our legal basis is your consent (Article 6(1)(a) GDPR). Turning the setting off stops collection, deletes the random ID and any stats not yet sent from your iPhone; stats already sent stay in Google Analytics, linked only to the old ID, until their 14 months are up. Google is the only third party the app shares data with. It processes the stats on our behalf under its data processing terms, which protect them at least as well as this policy, and may do so in the United States; it is certified under the EU–U.S. Data Privacy Framework. See Firebase's privacy information.

No tracking or advertising

The app contains no advertising or crash-reporting code. Its only third-party SDK is Google Analytics for Firebase, used only for the optional usage stats above. It doesn't use the advertising identifier or track you across other apps or websites. If you've chosen to share analytics with app developers in your iPhone settings, Apple may also send us crash reports and usage statistics that aren't linked to you. You can turn this off in Settings → Privacy & Security → Analytics & Improvements.

Purchases

Gallery Audit Pro (a monthly or yearly subscription, or a one-time purchase) is sold through Apple's App Store. Apple processes the payment under its own terms and privacy policy. We don't receive your payment details, name, email or Apple Account. There's no account with us and no server of ours involved: the app checks what your Apple Account owns with the App Store, on your iPhone, to switch Pro on.

Apple gives us sales, subscription and refund reports in App Store Connect, which we use to run the business and keep our accounts. They don't tell us who you are. Restoring a purchase, cancelling a subscription and refunds all go through Apple (see Support).

This website

Waitlist

If you join the waitlist, we store your email address so that we can tell you when Gallery Audit launches. With it we record when you signed up, where on the site, and which version of the signup notice you saw, so we can show you agreed. It's stored with Upstash (through Vercel KV, in Frankfurt) and we use it for nothing else: we send the one launch email with our email provider, Hostinger, and we never share the list with advertising platforms. We keep it until we've sent the launch announcement, or until you ask us to delete it, whichever comes first. Our legal basis is your consent (Article 6(1)(a) GDPR), and you can withdraw it at any time by emailing us. To stop automated signups, we also keep a one-way (irreversible) hash of your IP address for 10 minutes to limit how many signups can come from one connection; it's deleted automatically and never linked to your email (Article 6(1)(f) GDPR, our legitimate interest in keeping the list free of abuse).

Hosting

This site is hosted by Vercel. Like most web hosts, Vercel processes technical data such as your IP address and browser type to deliver the site and keep it secure. See Vercel's Privacy Policy.

Emailing us

If you email support@galleryaudit.app, we keep your email address and message so we can answer you and handle anything you asked for. Our email is hosted by Hostinger. We delete support emails two years after the conversation ends. Our legal basis is our legitimate interest in answering you (Article 6(1)(f) GDPR), or taking the steps you asked us to take (Article 6(1)(b)).

Cookies

With your consent, we use analytics and advertising cookies to understand how people find this site and which parts of the page are useful, and how well our ads work. We ask before setting any of them. In the cookie banner you can accept all, accept only the necessary storage, or choose each purpose (statistics for Google Analytics, advertising for the Meta Pixel) yourself. You can change your mind at any time with Cookie settings (also in the footer). If you withdraw consent, we delete these cookies from this site.

What we measure: pages and page sections viewed, clicks on page links, whether you started or finished a blog video, and whether you opened or completed the waitlist form (not the email address you entered), along with your device, browser and approximate location as reported by these services. The Meta Pixel receives the pages you view, your IP address and browser details, and a signal when you join the waitlist, naming the sign-up box you used. It never receives the email address you enter.

Google Analytics only loads after you accept, so if you decline, or haven't chosen yet, nothing is sent to Google. Google Analytics keeps what it collects for 14 months, then deletes it.

The Meta Pixel is an advertising tool from Meta Platforms Ireland Limited. It only loads if you accept advertising cookies, so if you decline, or haven't chosen yet, nothing is sent to Meta. We use it to see how many people join the waitlist after seeing our ads and to show our ads to relevant people. Meta and we are joint controllers for the data the Pixel collects and sends to Meta, and Meta may also use it to improve its own ad systems, under Meta's Terms for Business Tools. If you're logged into Facebook or Instagram, Meta may also use its own cookies on its domains, under Meta's Privacy Policy.

Our legal basis for these cookies is your consent (Article 6(1)(a) GDPR). Google and Meta may process this data in the United States; they are certified under the EU–U.S. Data Privacy Framework. See how Google uses data from sites that use its services.

Browser “Do Not Track” and Global Privacy Control signals don't change how this site works, because it sets no analytics or advertising cookies and sends nothing to Google or Meta unless you accept them in the cookie banner.

Your rights

Your photos, scores and saved audits stay on your iPhone and under your control. If you've turned on usage stats, they're linked only to a random ID that we can't connect to you, so we can't look them up by your name or email. Turning the setting off stops collection and replaces that ID. For your waitlist email and any website data, you have the right to access, correct, delete or export it, to object to or restrict how we use it, and to withdraw consent. To do any of this, email support@galleryaudit.app. You also have the right to lodge a complaint with a data protection authority. Our lead authority is Lithuania's State Data Protection Inspectorate, or you can contact the authority in the EU country where you live.

Children

Gallery Audit isn't directed at children, and we don't knowingly collect personal data from them. If you're under 14 (or under the age of digital consent where you live), ask a parent before turning on usage stats or joining the waitlist.

Changes to this policy

If we change how the app or this website handles data, we'll update this page and the date at the top. If the app ever starts sending new kinds of data off your device, we'll update this policy before that version is released.

Contact

Questions about this policy or your data? Email support@galleryaudit.app.

Legal notice

Gallery Audit and galleryaudit.app are provided by BYTE REFINE, MB, a small partnership (mažoji bendrija) in the Register of Legal Entities of the Republic of Lithuania, company code 308158514, registered office V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania. Email: info@byterefine.com. Company website: www.byterefine.com.