Privacy

The app never uploads an image. Not the original, not a copy, not a thumbnail. When it scans your library it reads each photo’s metadata and nothing else; the picture itself is opened on your device, measured, and closed again.

Every photograph you see inside the app — a trip’s grid, a full-screen view — is read live from your own photo library at the moment you look at it. That is why the grid still fills with the network switched off, and why a photo you delete in Photos disappears from Photo Footprints too.

For each photo, and nothing beyond this list:

• The date and time it was taken, and the time offset from UTC
• The latitude and longitude already stored in the file, when there is one
• The file name, type, and pixel dimensions
• The camera make and model, and a fingerprint derived from them
• A classification of where the photo came from — camera, message, screenshot or download
• An identifier your phone already uses for the photo, so a repeat scan recognises it rather than duplicating it

All of it stays on the device. There is no account, no server and no database behind this app: the work of turning those fields into places, trips and routes happens on your phone, and the result is stored on your phone.

Place names are resolved from a city database bundled inside the app, so your coordinates are never sent anywhere to be named. Trip routes are computed locally. That leaves exactly one thing the app reaches out for:

• CARTO — serves the map tiles you are looking at. Like any map, it therefore sees the area being displayed, but never your photos, your trips, or an identifier for you.

There are no analytics, no trackers, no advertising identifiers and no third-party SDKs that collect anything. Nothing about you is sold, because nothing about you is collected.

Settings → Start over clears the map and the library the app has built, so a fresh scan can rebuild everything. Deleting the app removes all of it at once, and there is no copy anywhere else to ask about.

Neither one touches your photographs. They are yours, they are in your library, and Photo Footprints has never held a copy to delete.

photofootprints.com is a static site. It sets no cookies, runs no analytics, and embeds nothing from anyone else — the fonts and every other asset are served from this domain. Its host, Vercel, keeps ordinary server logs of requests, as every web host does.

If you email to ask for an early build, that address is used to send you an invite and for nothing else.

Photo Footprints is not directed at children and does not knowingly collect anything from anyone under 13.

If what the app reads ever changes, this page changes with it and the date at the top moves. Questions of any kind: hello@photofootprints.com.