Privacy Policy

Last updated May 24, 2026. This is practical product copy, not a substitute for legal advice.

Overview

Gallery Checkup is an iPhone and iPad app that helps you review your photo library and find possible cleanup items. This policy covers both the Gallery Checkup iOS app and the gallerycheckup.app website. The app's core photo analysis runs entirely on your device, and you don't need an account to use it.

Photos and on-device review

Gallery Checkup prepares cleanup suggestions by scanning and analyzing your photo library on your device. Your photos and videos are not uploaded for cleanup review, and favorite photos are not preselected for removal. The following run on-device only:

  • Quality scoring (brightness, sharpness, blur detection)
  • Object and scene classification (using Apple Vision)
  • Face detection and feature-print extraction (for Protected Faces)
  • Text recognition
  • Similarity comparison between photos
  • Content tagging and bundle summaries

None of this analysis data leaves your device except as described below.

Deletions

Nothing is removed until you review the selection and confirm. When you confirm, Gallery Checkup requests the library change through Photos permissions. Removed items may stay recoverable in the Photos app for up to 30 days, based on iOS behavior.

In-app analytics (TelemetryDeck)

Optional analytics are powered by TelemetryDeck, a privacy-first analytics service. They're opt-in and disabled by default, and you can toggle them in the Trust Center, onboarding, or settings. When enabled, the app sends anonymized event signals such as:

  • Scan started and scan completed
  • Photo library access granted or denied
  • Onboarding completed
  • Setting changes (practice mode, reminder cadence, review mode)

No personal information, device identifiers, photos, videos, or user content is sent to TelemetryDeck. TelemetryDeck processes this data under its own privacy policy.

RevenueCat (subscription management)

Gallery Checkup uses RevenueCat to manage in-app purchases and verify subscription status. Purchases send RevenueCat standard StoreKit transaction data (product identifier, transaction ID, purchase date) to confirm your entitlement. No photos, videos, or personal content is shared with RevenueCat.

Apple Intelligence

On devices that support Apple Intelligence (iOS 26.0+), Gallery Checkup may use Apple's on-device FoundationModels framework to generate bundle summaries, tag photo content, and power the Review Assistant's natural-language answers. This runs entirely on your device; no photo, video, or scan data is sent to Apple or Gallery Checkup for it. Unsupported devices use rule-based fallback logic instead.

Face data

Protected Faces uses Apple's Vision framework to detect faces and compute feature-print observations, stored locally on your device and used only to keep photos of protected people or pets out of cleanup suggestions. This data never leaves your device. You can review, add, or remove protected faces any time in settings; removing one deletes its feature print.

Local storage

The following stays on your device (in UserDefaults and cache files) and is not transmitted externally:

  • Scan cache (photos analyzed and their classifications)
  • Quality analysis cache
  • Cleanup history and session records
  • Protected face feature prints
  • Protected memories preferences
  • App preferences (reminder cadence, practice mode, analytics consent, review mode)
  • Widget data (lock screen scan progress snapshot)

Local notifications

The app may schedule local reminders for periodic cleanup (weekly or monthly) and a recovery reminder 28 days after a cleanup session, all generated on-device. Manage or disable these in iOS Settings.

Video processing, widgets, and Live Activities

Trimming, compressing, or exporting a video creates a protected temporary file, deleted once the action completes. Lock screen and Dynamic Island scan progress is read from local storage and never transmitted.

Website (gallerycheckup.app)

The website is hosted on Cloudflare, which may process technical logs (IP address, browser type, page visits) to deliver and protect the site, and uses Google Tag Manager for website analytics, separate from the app's own analytics. The website does not collect or process any photo or video data. A cookie consent banner lets you manage analytics and any future advertising tags.

Support

If you contact support by email or the support form, we receive the information you choose to send.

Data retention

Cached scan and quality analysis results are retained on your device to speed up future launches, with old entries pruned automatically. You can reset all app data by deleting and reinstalling the app.

Changes to this policy

We may update this policy from time to time. When we make material changes, we'll update the date at the top of this page.

Third-party services summary

Service Purpose Data shared
TelemetryDeck Optional app analytics Anonymized event signals, no PII or media
RevenueCat Subscription management StoreKit transaction data, no media
Apple App Store / StoreKit In-app purchase processing Standard transaction data
Cloudflare Website hosting Standard technical logs
Google Tag Manager Website analytics Standard web analytics data

Apple may also collect diagnostics and operational information related to the App Store or iOS under Apple's own policies.

Contact

For privacy or support questions, reach out from the Support page.