1. Scope & who we are
This Privacy Policy explains how the Photalk mobile application (“Photalk”, the “app”, “we”, “us”) handles information when you use it on iPhone or iPad. By using Photalk you agree to the practices described here. This policy covers the app and this website at photalk.app. It does not cover third-party services you may reach through the app, which have their own policies (see Section 7).
2. Your photos stay on your device
Photalk’s core promise is on-device processing. To make your library searchable, the app analyzes your photos using an artificial-intelligence model that runs entirely on your device. For each photo it generates a compact mathematical representation (an “embedding”) that captures visual meaning. These embeddings, along with related on-device metadata, are stored locally on your device.
- We do not upload your photos or videos.
- We do not send your photos to any server for analysis.
- The on-device search index never leaves your device and is removed when you delete the app.
Photalk requests access to your photo library only to provide search and organization features. On your device you can grant access to your full library or only Selected Photos, and you can change this any time in iOS Settings.
3. Information we process
Photo library content (on device only)
Photos you allow Photalk to access, and information derived from them (embeddings, capture date, and EXIF location where present) are processed and stored locally to power search, smart albums, and similar-photo features.
Search queries
English-language searches are handled on your device. For Korean and Japanese searches, the app sends only the text you typed to our backend (Google Cloud Functions) to translate and interpret the query, including any place name you included. No image data is ever included in this request. Translations may be cached on the server to improve speed and reduce processing.
Account information
You can use Photalk as a guest with no account. If you choose to sign in (with Apple, Google, or email), authentication is handled by Google Firebase Authentication, which processes the identifier from your chosen provider (such as your email address and a user ID). We store a minimal record associated with your user ID to operate your account. Guest use does not create a server-side account.
Advertising & technical data
When ads are served and when the app contacts our backend, limited technical data such as your IP address, device/OS type, and (with your consent) an advertising identifier may be processed, as described in Sections 5 and 6.
4. How we use information
- To analyze your photos on-device and make them searchable.
- To interpret and translate non-English search queries.
- To create and operate your account, if you sign in.
- To show and measure ads, and to keep the app secure and functioning.
- To respond to you when you contact support.
We do not use your photos or their content to build advertising profiles, and we do not sell your personal information.
5. When data leaves your device
Data leaves your device only in these limited cases:
- Non-English query translation — the typed query text is sent to Google Cloud Functions (no images).
- Sign-in & account — handled by Google Firebase; if you sign in, your provider identifier and a minimal account record are processed and stored by Firebase on our behalf.
- Advertising — Google AdMob receives the data needed to serve and measure ads (see Section 6).
- Support — if you email us through the contact form on this website, we receive the details you submit.
We never share your photos, videos, or on-device search index with anyone.
6. Advertising & tracking
The free version of Photalk shows ads through Google AdMob. Depending on your choices, ads may be personalized or non-personalized:
- On first launch you may be asked, via Apple’s App Tracking Transparency prompt, whether Photalk may use your device’s advertising identifier (IDFA). If you decline, the app keeps working and you’ll see non-personalized ads.
- Where required (e.g., in the EU/UK), Google’s consent management (UMP) asks for your ad-personalization choices.
- Photalk uses Apple’s SKAdNetwork to measure ad campaign performance in a privacy-preserving, aggregate way.
Google’s use of advertising data is governed by Google’s advertising policies. You can adjust tracking any time in iOS Settings → Privacy & Security → Tracking.
7. Third-party services
Photalk relies on these third-party services, each with its own privacy policy:
- Google Firebase (Authentication, Cloud Functions, Firestore) — Firebase privacy and Google Privacy Policy.
- Google AdMob — AdMob & privacy.
- Sign in with Apple — Apple Privacy.
Photalk does not include a separate third-party analytics or crash-reporting SDK.
8. Data retention & deletion
- On-device data (photos, embeddings, index): kept on your device and removed when you delete the app.
- Account data: kept while your account exists. You can delete your account from the app’s Settings, which removes your account and the minimal account data we hold.
- Query translation cache: retained server-side only as long as useful for performance, and is not linked to your identity for advertising.
- Support messages: kept as long as needed to handle your request and our records.
9. Your rights & choices
Depending on where you live (for example under GDPR or CCPA/CPRA), you may have the right to:
- Access, correct, or delete personal data we hold about you.
- Withdraw consent (e.g., revoke photo access or ad tracking in iOS Settings).
- Object to or restrict certain processing.
- Delete your account and associated data at any time.
We do not sell or “share” personal information as those terms are defined under U.S. state privacy laws. To exercise any right, use the contact form.
10. Children
Photalk is not directed to children under 13 (or the minimum age required in your region), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, please contact us and we will remove it.
11. Security
We use reasonable technical and organizational measures to protect information, including keeping photo analysis on-device and using encrypted connections (HTTPS/TLS) for the limited data that is transmitted. No method of transmission or storage is completely secure, but we work to protect your information.
12. International data transfers
The limited data that leaves your device (query translation, authentication, and ads) is processed by our service providers on servers located in the United States and other countries where they operate. By using Photalk, you understand your information may be processed in these locations.
13. Changes to this policy
We may update this policy as the app evolves. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide notice in the app. Continued use after changes means you accept the updated policy.
14. Contact us
Questions about this policy or your data? Reach us through the Photalk contact form. We respond to privacy requests as promptly as we can.