Privacy policy

Last updated 8 November 2026

Phosgraphy is a photo editor and organizer for the Mac and iPhone. This policy explains what the apps and the phosgraphy.com service do with your information. The short version: your photos stay on your device unless you choose to publish or share a project, there are no ads, no analytics and no tracking, and an account is optional.

Without an account

You can use the Library and the Darkroom without signing in. Your catalog, edits, ratings, labels, categories and previews are stored on your device, in the app's own container. Classification, face and text recognition and the post writer run on your device with Apple's frameworks and Apple Intelligence; your photos are not sent to us or to anyone else for this.

When you add photos from iCloud Drive, Google Drive or Dropbox, Phosgraphy reads them through the folders you pick or through the provider's own sign-in. Tokens for those providers are kept in your device's Keychain and are only used to download the files you asked for. We never receive them.

With an account

An account lets you sync your catalog between your devices and publish or share projects. If you create one, we store:

• Your email address, or the identifier and (if you choose to share them) name and email that Sign in with Apple gives us, so you can sign in.
• A user ID, your handle and the names of your signed-in devices, so we can keep you signed in and show your devices.
• Your synced catalog: the rows the app syncs, such as categories, indexes, labels, ratings, edit settings, projects and posts, and each photo's details from its file (capture date, camera and lens, and the GPS location if the photo has one). The original photo files are not uploaded by sync.
• What you publish or share: when you publish or share a project, the web-sized renditions of its photos, the post text and the title are uploaded so the page or link can show them. Published images carry no metadata. A page shows camera details unless you turn them off, and places or map pins only if you add them. Published pages are public at phosgraphy.com/@handle; shared links are visible to anyone who has the link.

We use this only to provide those features. We don't sell it, we don't use it for advertising, and we don't share it with anyone except the service providers that host it for us (Cloudflare for the service and storage, and our email provider to send sign-in emails).

Deleting your data

You can unpublish a project at any time from its Share sheet. You can delete your account in the app, under Settings › Account on the Mac or the iPhone, with Delete Account. That removes your account, your devices and sessions, your synced catalog and everything you published or shared from our servers. Your photos and catalog on your devices are not touched.

Children

Phosgraphy is not directed at children under 13, and we don't knowingly collect their information.

Changes and contact

If this policy changes, we'll update this page and the date above. Questions or requests about your data: [email protected].