Privacy Policy

PhotosHighway is developed and operated by JaPr, an individual developer (“I”, “me”, “my”). This policy explains what data the app and website collect, how it is used, and the rights you have over it.

The short version

• Your photos never touch my servers. They move directly from your device to the destination you configure (your own server, Dropbox, Google Drive, etc.).
• Analytics are opt-in and anonymous. If you say yes, I collect basic usage events with no personal identifiers. If you say no — or do nothing — nothing is sent. You can change your mind at any time in Settings.
• Your credentials are stored in the iOS Keychain. They are never sent to me.
• I do not sell or share your data. I collect only anonymous usage events — no personal information, no user identifiers, nothing that could be sold or shared in any meaningful way.
• I am a solo developer, not a company. I do not have a data protection officer, I cannot sign data processing agreements, and I do not run enterprise infrastructure. I handle your data carefully and minimally because that is the right thing to do.

---

Information the app collects

Anonymous usage analytics (opt-in)

When you first open PhotosHighway you are asked whether you want to share anonymous usage data. If you decline — or dismiss the prompt — nothing is ever sent. You can change your choice at any time in Settings → Privacy → Share Analytics.

When analytics are enabled, the app sends:

• Device context — app version, iOS version, and device model (e.g. “iPhone16,1”). No device identifier (IDFA, IDFV, or serial number) is ever included.
• Usage events — actions such as starting or completing a sync, connecting a service, or creating a photo group. Events are generic labels (e.g. sync_completed); they never contain photo filenames, captions, location data, or any content from your library.

Analytics data is sent to my own server at analytics.photoshighway.app. I do not use any third-party analytics platform. I use this data solely to understand how the app is used and to prioritise improvements. The lawful basis for this processing is your consent (GDPR Article 6(1)(a)).

What the app does not collect

• Your photos, videos, or any media content
• Your name, email address, or any account information
• Your location
• Any device identifier that could be used to track you across apps or websites
• Contacts, calendar data, or any other sensitive system data

Your photos

Photos are transferred directly between your device and the destination you configure. They never pass through my servers. I have no access to your photo library at any point.

Credentials and tokens

OAuth tokens, WebDAV passwords, and other service credentials are stored exclusively in the iOS Keychain on your device. They are never transmitted to my servers.

Third-party services you connect

When you configure a sync destination (Dropbox, Google Drive, a self-hosted WebDAV server, etc.) your photos and credentials are transmitted directly to that service under that service’s own terms and privacy policy. I am not a party to those connections and have no visibility into them.

Website

The PhotosHighway website uses Google Fonts for typography. When your browser loads the site it contacts fonts.googleapis.com and fonts.gstatic.com to download font files, which sends your IP address to Google. Google’s privacy policy governs how they handle that data. The website itself sets no cookies and runs no tracking scripts.

Data security

I take reasonable technical measures to protect analytics data on my server. However, as a solo developer I cannot offer guarantees equivalent to enterprise security programmes. No method of transmission over the internet is 100% secure. Analytics data contains no personal information, which limits the impact of any hypothetical breach.

Data retention

Analytics events are retained for 36 months, after which they are deleted from my server. Because events carry no user identifier, there is no per-user data to delete when you uninstall the app — disabling analytics in Settings stops all future collection immediately.

Your rights

Depending on where you live, you may have the following rights regarding your data:

• Withdraw consent — disable analytics at any time in Settings → Privacy. No further events will be sent.
• Access, deletion, and portability — because analytics events are collected without any user identifier, I have no technical means to isolate events originating from your specific device. Individual access, deletion, or portability requests against the aggregated dataset cannot be fulfilled. You can stop all future data collection at any time by disabling analytics in the app.
• Lodge a complaint — if you are in the EU/EEA, you have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact me at privacy@photoshighway.app.

Children’s privacy

PhotosHighway is not directed at children under 13. The app collects no personal information and no user identifiers, so there is no data that could be attributed to a specific child. If you have concerns, contact me at the address below.

Changes to this policy

I may update this policy from time to time. The “Last updated” date at the top reflects the most recent revision. For material changes I will add a notice in the app. Continued use of the app after a change constitutes acceptance of the updated policy.

Contact

If you have any questions or suggestions about this Privacy Policy, do not hesitate to contact me.