Privacy Policy

PhotoButler ("we", "our", or "the app") is built to help you clean up your photo library. There is no backend server for this app — PhotoButler does not have anywhere to upload your photos to, even if it wanted to. This policy explains exactly what is processed, where, and why.

Every feature that looks at your photos — text recognition, image labeling, face detection, blur scoring, duplicate detection, search — runs entirely on your device, using on-device machine learning. Your photos are never uploaded, copied to a server, or sent to any AI service. There is no cloud processing step to opt out of, because it does not exist.

• Text recognition (OCR)— reads text inside screenshots and documents (for example, to find a one-time code or a receipt) so you can search for it later. The extracted text is stored only in the app's local database on your device.
• Image labeling— recognizes general content ("food", "dog", "beach") so photos can be auto-sorted into categories and found by search.
• Face detection — detects whether a photo contains a face and roughly where, so a good representative photo can be picked from a set of duplicates. PhotoButler does notdo face recognition or identification: it never builds a profile that matches "this is the same person" across different photos, and no face-identifying data is stored.
• Blur & duplicate scoring — compares photos to flag likely duplicates, near-duplicates, and blurry shots as cleanup suggestions.

All of the results above — extracted text, labels, face presence, scores — are stored in a local database on your device only. Nothing is ever deleted automatically: PhotoButler only ever suggests, and you approve every deletion yourself.

• Your name, email address, or any personal identity
• Your photos, or copies of your photos
• Face-identifying data of any kind
• Your location
• Any data for advertising or tracking purposes

PhotoButler uses a minimal set of third-party services, and none of them ever receive your photos or the data extracted from them:

• RevenueCat — manages the one-time Premium purchase and verifies entitlement status. This is the only network call PhotoButler makes that is required for the app to function. See RevenueCat's Privacy Policy.
• Sentry (optional) — crash and error reporting, used only to fix bugs. Crash reports never include your photos, OCR text, labels, or any other photo-derived content. See Sentry's Privacy Policy.

All photo-derived data (search index, categories, scores, cleanup history) is stored exclusively on your device using local storage (SQLite) and is never uploaded anywhere. Because there is no server, there is no copy of your data anywhere for us to retain, back up, or lose. Uninstalling the app removes all of it, permanently, through your device's standard app-removal mechanism.

You can revoke PhotoButler's access to your photo library at any time from your device's system settings (iOS: Settings → PhotoButler → Photos; Android: Settings → Apps → PhotoButler → Permissions). PhotoButler will simply stop being able to see new photos until access is granted again — nothing about previously-processed data changes on our end, since none of it ever left your device.

PhotoButler is not directed at children under 13. We do not knowingly collect any information from children — and as described above, we do not collect photo content from anyone.

Since PhotoButler has no backend and collects no personal data tied to your identity, there is no server-side record to request, correct, or delete. Everything is already under your control, on your device.

We may update this policy from time to time. Continued use of the app after changes constitutes acceptance of the new policy.

Questions? Contact us at support@tuanhoang.dev.