Privacy Policy
Scope
This policy describes the Nitro Photos Mac, iOS, and companion server software (collectively, "Nitro Photos"). Nitro Photos is designed to connect to a server selected and controlled by the person operating the library. The publisher is [insert legal entity name and contact email] ("we," "us," or "our").
Information handled
- Account and pairing information. The local server stores an administrator email address, password verifier, one-time recovery phrase, password-reset token metadata, pairing challenges, paired-device names, and token/session records. Access and refresh tokens are stored in the Mac Keychain and are revocable per device/session.
- Library media and metadata. Photos, videos, filenames, titles, dates, favorites, tags, face labels/bounding boxes, trash/tombstone records, and synchronization metadata are stored in the local library and/or the server selected by the user.
- Location and EXIF. Imports and server uploads are designed to strip EXIF metadata, including GPS, from stored copies where the relevant import path supports it. The original source file is not modified. Verify the result for sensitive media before sharing.
- Technical information. The software may create local operational logs and error messages needed to operate the library and server. No analytics, advertising SDK, tracking framework, or crash-reporting service is bundled in the current clients.
Where information goes
By default, Nitro Photos sends media and library operations only between your clients and the local/configured server. The publisher does not receive a copy merely because the app is installed. If you configure a remote server, a local-network share, or an optional AI provider, that destination then receives the information required for that feature.
Optional AI processing
AI tagging is optional. The Mac tagging flow sends filename/title text to Google Gemini only when you provide a Gemini API key. The companion server can also send uploaded media to Gemini when its GEMINI_API_KEY integration is configured. The server falls back to local heuristics when AI is unavailable. Review Google's terms and privacy practices and remove the key if you don't want this processing.
Use and retention
Information is used to authenticate accounts, pair and revoke devices, store and synchronize your library, generate thumbnails/posters, apply requested edits, provide sharing, and maintain local operation. You control retention by deleting media, emptying trash, revoking devices, deleting the local library/server data, and removing configured API keys. Server backups or copies made outside Nitro Photos are controlled by the server operator and must be deleted separately.
Sharing and security
Sharing is user-initiated. Bearer tokens are stored in the Mac Keychain, not displayed as ordinary account metadata; the local server maintains revocable sessions. No security system is perfect — protect your server, recovery phrase, passwords, API keys, and network access, and use HTTPS when connecting beyond a trusted local network.
Children
Nitro Photos is not directed to children and does not knowingly collect personal information from children through a publisher-operated service.
Privacy requests and changes
For privacy questions or deletion requests, contact [insert privacy contact email]. Because the library is self-hosted, requests may need to go to the person or organization operating that server. We may update this policy when the product's data practices change and will update the date above.
Questions about this policy? See the support page for contact details.