The short version
Your photos never leave your phone. There is no account, no cloud, no upload, and no way for us to see a single image in your library. Below is the full list of what does leave, because a page that just said 'we respect your privacy' would be worth nothing.
What never leaves your device
- Your photos and videos. All of them. There is no upload path in the app at all.
- Filenames, asset identifiers, and album names.
- Anything about which specific photos you kept or tossed.
- Your precise location.
What does leave
- Anonymous product events — for example, that a bin was emptied, or that a paywall was shown. No identifiers, no filenames, no locations. These go to PostHog on EU servers, and you can switch them off in Settings.
- Purchase events, handled by RevenueCat, so that a purchase you made on one device is recognised on another. This is how in-app purchases work on every platform; the alternative is you losing what you paid for.
- If you use date-and-place labels: a coarse location lookup, so a deck can be called 'Lisbon, June' instead of a set of coordinates. The lookup happens through Apple's geocoder.
What this site sends
- Plausible Analytics, which sets no cookies and stores no personal or identifiable data, on European infrastructure. That is why you were not asked to dismiss a cookie banner.
- If you join the waitlist: the email address you typed, and where you came from (the campaign tag in the link you clicked). Nothing else from you — hosting and email delivery add the routine technical logs any web service produces.
- No Google Analytics, no Meta or TikTok pixel, no attribution SDK, no session recording. Not as a policy we might revisit — they are simply not in the code.
Why we do not say 'nothing ever leaves'
Because it would not be true, and you can check. Plenty of apps in this category make the absolute claim and quietly ship an analytics SDK anyway. The precise claim is the honest one: your photos never leave your phone. The rest of this page is the small print, written out in full rather than buried.
Your data, your call
Analytics can be turned off in the app's Settings, and the app keeps working exactly the same. Waitlist emails can be removed by clicking unsubscribe, or by emailing support@phototoss.app and asking — a person reads it.
Questions
Email support@phototoss.app. Replies are signed by the person who wrote them.