Privacy Policy

This Privacy Policy explains how Rain Infotech Private Limited ("Rain Infotech", "we", "us" or "our") handles information when you use Gallery (the "App"), our photo and video gallery app for Android and iOS.

By installing or using Gallery, you agree to this Privacy Policy. If you do not agree, please do not use the App.

1. Who we are

Gallery lets you view, organise, edit and protect the photos and videos already stored on your phone. Rain Infotech is the data fiduciary (under India's Digital Personal Data Protection Act, 2023) and the controller (under the GDPR) for the information described in this policy that we decide how to use. Google decides how it uses the information its services collect, as described in its own privacy policy.

2. What we never collect

Gallery reads your photo library only on your phone, to show it to you. None of the following is ever sent to us, to our advertising partner or to our analytics provider. It leaves your phone only if you share it yourself (section 5).

• your photos and videos, and any copy, thumbnail or edit of them;
• file names, folder names, album names, album group names and captions;
• what you search for in the App;
• the location, date or camera details stored inside your photos;
• the contents of the private vault, and your vault PIN or pattern;
• your name, email address, phone number, contacts or messages.

The App has no accounts, logins or sign-ups.

3. What is collected, and by whom

Gallery itself uses the internet only for ads (3.1), usage statistics and app settings (3.2), ad measurement (3.3) and, if you ask for it, downloading the AI search model (3.5). Purchases (3.4) go through your phone's own app store. On iPhone, if you use iCloud Photos, Apple's Photos system may download a photo or video from your own iCloud account when Gallery shows it. That stays between your iPhone and Apple, and nothing is sent to us.

3.1 Advertising: Google AdMob

Gallery shows ads provided by Google AdMob, a service of Google LLC. When an ad is requested or shown, Google's software in the App collects information from your phone directly, such as:

• advertising and device identifiers, such as Android's advertising ID. On iPhone, Apple's advertising identifier (IDFA) is available only if you allow tracking when Gallery asks (section 3.3);
• your IP address, which can show your approximate location (city or country);
• device information, such as phone model, operating system version, language and screen size;
• ad interactions, such as which ads were shown and whether you tapped one;
• diagnostic information about ads, such as how fast they load and errors in showing them;
• on Android phones that support it, signals from Android's Privacy Sandbox (ad topics and ad attribution), when your phone's settings allow them.

When your free private folder is full, you can choose to watch a rewarded ad for more space; it is a Google ad like the others, and only that you watched it to the end is used, to add the space. Google collects and handles this information under its own privacy policy. We receive only overall reports from Google, such as how many ads were shown and what they earned. We do not receive your advertising ID or IP address from these reports.

Ads are never chosen from your photos or videos, because neither the App nor Google can see them. Ads are never shown in the private vault, in the photo editor while you edit, during setup or while you select photos. Ad content is limited to a "PG" rating.

3.2 Usage statistics: Firebase Analytics

Gallery uses Firebase Analytics (Google Analytics for Firebase, a service of Google LLC) to understand how the App is used: which screens people open, which features they use, and where the App is hard to use. Only the versions of the App published on Google Play and the App Store send these statistics. What is sent:

• screens opened, named by the type of screen (for example "album" or "settings"), never by which album or photo;
• features used and how they ended, for example "editor opened", "filter tool used", "save succeeded", "vault set up", "AI search model downloaded", "AI search found results" or "ad shown". Only the kind of action is sent, never the item it was done to, and never what you typed into a search;
• rough counts as ranges, for example how many photos were selected ("2–5") or the size of your library ("1,000–9,999");
• App settings you chose, such as theme, colour palette and layout; whether photo access is full or limited; whether a vault has been set up (never what is in it); your Premium status (free, trial, monthly, yearly, lifetime or ended); whether AI search is set up; and, on iPhone, your answer to the tracking prompt;
• standard device information that Firebase adds: phone model, operating system and App version, language, approximate country or region (derived from your IP address; Google Analytics does not store the IP address itself), and when the App was first opened and how long it is used;
• a random app instance identifier created by Firebase when the App is installed. It is not linked to your name or any account, and a new one is created if you reinstall the App. On Android, Firebase may also read which store campaign the App was installed from (the Google Play install referrer);
• your advertising ID: on Android, the phone's advertising ID; on iPhone, Apple's IDFA only if you tap "Allow" when Gallery asks to track you. Google uses it to measure our ads and, together with these statistics, to build audiences for showing our ads (ad personalisation signals are on). You can reset or delete the advertising ID in your phone's settings.

What is never sent to Firebase: anything listed in section 2 and a user ID (there are no accounts).

App settings (Firebase Remote Config). The same published versions also ask Firebase Remote Config, another Google service, for a few app settings, such as the limits of the free version. Like any Firebase request, it carries the random app instance identifier above, the App's version, your phone's platform and operating system version, language, time zone and approximate country, and the App settings listed above (for example your theme, or whether a vault is set up), so that a setting can differ between groups of users. Your IP address reaches Google as with any internet request. Nothing about your photos or your library is sent with it. Settings fetched this way take effect the next time the App starts.

3.3 Ad measurement: Meta App Events

Gallery uses Meta App Events (part of the Facebook SDK, a service of Meta Platforms, Inc. and Meta Platforms Ireland Ltd.) to measure our own ads on Facebook and Instagram: whether an ad led someone to install Gallery, open it, start a free trial or buy Premium. Only the versions of the App published on Google Play and the App Store send it. What is sent:

• three milestones, each once: that you first gave the App access to your photos, that you set up the private folder (vault) for the first time, and that AI search became ready on your phone — nothing else about how you use the App, which screens you open or what is in your vault, and never your photos, file names, album names or searches;
• that the App was installed and opened, that a free trial or a Premium subscription started, and a Premium purchase with its price and currency;
• device information that Meta's software adds: phone model, operating system and App version, language, time zone, and your IP address;
• an anonymous device identifier created by Meta's software, and your advertising ID: on Android, the phone's advertising ID; on iPhone, Apple's IDFA only if you tap "Allow" when Gallery asks to track you. If you tap "Ask App Not to Track", the IDFA is not sent.

Meta may link this information with what it knows about you if you use Facebook or Instagram, to tell us how our ads performed and to show our ads to people likely to be interested. We receive only overall reports from Meta. We never send your name, email or phone number to Meta.

3.4 Premium: Google Play and the App Store

Premium (monthly or yearly subscription, or a one-time Lifetime purchase) is optional. It is sold and processed by Google Play (on Android) or Apple's App Store (on iPhone), under their terms and privacy policies. We never receive your card or bank details, and your account details stay with the store.

To know whether you have Premium, the App asks the store on your phone and keeps the answer (which plan, if any; on Android also when a free trial was started, for usage statistics) in its own storage on your phone. When you buy Premium, the purchase is also reported to Firebase Analytics (section 3.2; on iPhone the App hands over the App Store transaction record) and to Meta (section 3.3), with the product, its price and currency, and the store's transaction or purchase identifier — never your payment details. Gallery has no server, so this check never reaches us. Google and Apple give us standard sales reports, which may include an order number, the date, the price and the country of a purchase.

3.5 AI search: the local AI model download (Hugging Face)

AI search is optional and off until you turn it on. When you tap Download in Settings → AI search, your phone's own download service fetches one file, the local AI model that powers AI search, from Hugging Face (Hugging Face, Inc.), where the file is hosted. Like any web server, Hugging Face sees your IP address and basic request details; nothing else is sent, and nothing from your photos. After that, AI search works on your phone without the internet: your photos, videos, their sound and what you type into AI search are turned into numbers ("embeddings") on the phone and are never uploaded, shared or sent to analytics. The search index stays in the App's private storage and is left out of phone backups and transfers. If you close the App before every photo is indexed, your phone may carry on indexing while it is charging, still entirely on the phone and with nothing sent anywhere.

3.6 When you contact us

If you email or phone us, we receive your email address or phone number and what you tell us. We use it only to answer you.

3.7 This website

This website uses no cookies, no analytics and no content from other sites. Like any web server, the server that hosts it may record technical details of each visit, such as IP address, browser type and the page requested, to keep it secure and running. These records are not used to identify you or linked to the App.

4. How information is used

On your phone, Gallery uses your photos and videos only to show them to you and to carry out what you choose: editing, collages, trimming videos, creating PDFs, moving items to the vault, sharing, deleting and restoring. The information in section 3 is used to:

• show ads, which keep Gallery free, and limit how often you see the same ad;
• show more relevant ads where personalised ads are allowed (section 8);
• measure ads and prevent ad fraud;
• understand which features are used, fix problems and improve the App (analytics);
• measure which of our ads on Facebook and Instagram led to installs and purchases, and show those ads to people likely to be interested (Meta App Events);
• give you Premium if you bought it, and restore it;
• answer your messages, and meet legal obligations.

Legal bases (EEA, UK and Switzerland). Personalised ads are shown only with your consent. Ad measurement with Meta uses your advertising ID only with your consent on iPhone (the tracking prompt). Non-personalised ads are based on our legitimate interests: keeping the App free. Gallery is not yet offered in the EEA, the UK or Switzerland; before it is, usage statistics that include your advertising ID will be sent only with your consent. Purchases are handled to perform our agreement with you. Replies to your messages are based on your request.

5. Sharing

We do not sell your personal information, and we never share your photos or videos.

• Google collects the information in sections 3.1 and 3.2 directly from the App, to provide AdMob and Firebase Analytics. Google may combine advertising information with other information it holds, as described in its privacy policy.
• Meta collects the information in section 3.3 directly from the App, to measure our ads. Meta handles it under its own privacy policy.
• Google Play and Apple handle purchases (section 3.4).
• When you share. When you choose to share a photo, video or PDF, Gallery hands it to the app you pick, such as a messaging app. That app's privacy policy applies from then on. Items in the vault cannot be shared.
• When the law requires it. We may disclose information if a law, court order or government authority requires it.
• Business transfer. If Rain Infotech is merged or acquired, this policy continues to apply to the information involved.

6. Storage on your phone, backups and security

• Your photos and videos stay in your phone's library. Edited copies, collages, trimmed videos and new albums are saved there too. PDFs are saved where you choose (on iPhone) or to your phone's Documents folder (on Android).
• App data stays in the App's private storage on your phone: favourites, the Trash list, album groups, App settings, and which Premium plan you have.
• The private vault is encrypted and stored only in the App's private storage (section 11).
• AI search (if you turn it on): the downloaded model and the search index stay in the App's private storage and are left out of backups and transfers. The vault's own index is encrypted like the vault.

Phone backups. If backup is on for your phone (for example Google backup or iCloud Backup), your phone may include Gallery's app data in that backup so it can be restored on a new phone. That backup is managed by your phone and your Google or Apple account, and we cannot see it. The private vault is always left out of backups and phone-to-phone transfers, on both Android and iPhone.

Information that Google collects is stored on Google's servers and protected by Google's security practices. Network traffic from the App to Google is encrypted. Your data on the phone is protected by your phone's own security, so we recommend keeping a screen lock on your phone.

7. How long information is kept

• We hold none of your photos, videos or app data, so there is nothing for us to keep or delete.
• Uninstalling Gallery, or clearing its data, removes its app data from your phone, including everything in the private vault. Photos, videos, edits, collages, PDFs and albums saved to your library stay on your phone.
• Items you delete may first go to your phone's own trash ("Recently Deleted" on iPhone), which your phone empties itself, usually after about 30 days.
• Firebase Analytics data is kept for up to 14 months, then deleted automatically.
• Meta keeps App Events data for the periods in Meta's privacy policy.
• Advertising information is kept by Google for the periods in Google's privacy policy.
• Emails you send us are kept only as long as needed to help you.

8. Your choices

• Photo access. You can allow all photos, only selected photos, or none, and change this any time in your phone's settings. With "selected photos", Gallery shows only those.
• Ad consent (EEA, UK and Switzerland). Gallery asks for your consent before personalised ads are shown. You can change your choice any time in the app under Settings → About → Ad privacy choices.
• Personalised ads on Android. In your phone's Settings → Privacy → Ads (or Settings → Google → Ads), you can delete or reset your advertising ID. You'll still see ads, but they won't be based on your interests.
• Tracking on iPhone. Gallery asks once whether it may track you. You can change your answer any time in Settings → Privacy & Security → Tracking.
• Premium. With Premium, Gallery stops loading ads and no longer starts Google's ad service.
• Analytics. Because analytics data is not linked to your name or an account, we usually cannot tell which records are yours. Reinstalling the App gives it a new random identifier. If you object to analytics, contact us (section 16) and we'll help.
• Deleting everything. Uninstall the App or clear its data in your phone's settings.

To learn more about how Google uses information, see How Google uses information from sites or apps that use its services, Google's Privacy Policy Privacy and security in Firebase and Meta's Privacy Policy.

9. Your rights

Depending on where you live, you have rights over your personal data. We'll respond to a request within the time the law allows. Most of the data described here does not identify you to us, so we may ask for details that help us find it. You can also exercise many of these rights directly with Google through your Google account.

India

Under the Digital Personal Data Protection Act, 2023, you can ask for information about your personal data, ask for it to be corrected or erased, withdraw consent, nominate someone to act for you, and complain to our Grievance Officer (section 14) and then to the Data Protection Board of India.

European Economic Area, United Kingdom and Switzerland

Under the GDPR and UK GDPR, you have the right to access, correct, erase or port your data, to restrict or object to its use (including use based on legitimate interests), to withdraw consent at any time, and to complain to your local data protection authority.

California and other US states

In the past 12 months, the App has made available to Google, for ads, the categories "identifiers" (advertising ID, IP address), "internet or other electronic network activity" (ad interactions) and "approximate geolocation". For analytics and ad measurement, the App makes available to Google the categories "identifiers" (advertising ID, IP address) and "internet or other electronic network activity" (app usage) (section 3.2). For ad measurement, the App makes available to Meta the categories "identifiers" (advertising ID, IP address) and "internet or other electronic network activity" (app usage and installs) (section 3.3). We do not sell personal information for money and do not knowingly sell or share the information of anyone under 16. Making advertising identifiers available for targeted ads may count as "sharing" under California law. You can opt out by deleting or resetting your advertising ID (section 8), by buying Premium (for Google's ads only — usage statistics continue), by not allowing tracking on iPhone (for Meta and Firebase), or by contacting us. You have the right to know, delete and correct your personal information and to limit its use, and we will not treat you differently for using these rights.

10. Permissions the App uses

Gallery asks for photo and video access when you first set it up. Storage (Android 9 and earlier), camera and microphone (iPhone) are asked for only when you use the feature that needs them. All other permissions below are granted by the phone without a prompt; many come from Google's ad, analytics and billing software.

Android

On Android, Gallery never asks for camera, microphone, location, contacts or fingerprint permissions. The camera button opens your phone's own camera app.

iPhone

On most phones, deleting, moving or overwriting a photo in your library shows your phone's own approval prompt first. Where the phone doesn't ask (for example deleting on Android 9 and earlier), Gallery asks you to confirm before deleting.

11. The private vault

• Vault items are encrypted on your phone with AES-256-GCM. The key is made from your PIN or pattern (using Argon2id) and never leaves your phone.
• The vault opens only with the PIN or pattern you choose. It doesn't use fingerprint or face unlock.
• The vault is left out of phone backups and phone-to-phone transfers.
• On Android, screenshots and screen recording are blocked while the vault is open. On iPhone, the vault is hidden in the app switcher.
• No ads are shown in the vault, and no analytics records what's in it.
• If you turn on AI search inside the vault, its search index is encrypted with a key made from the vault key, built only while the vault is open, and cleared from memory whenever the vault locks.
• We never receive your PIN, your pattern or any copy of your vault.

Important: if you forget your vault PIN or pattern, no one can recover the items inside, not even us. Uninstalling the App or clearing its data permanently deletes everything in the vault. Move items you want to keep out of the vault first.

12. Children

Gallery is not directed at children under 13, and we do not knowingly collect information from them. Anyone under 18 should use the App only with a parent's or guardian's permission. If you believe a child's information has been collected through the App, please contact our Grievance Officer (section 14).

13. International transfers

Your photos, videos and app data stay on your phone in every country. Information collected by Google for ads and analytics may be processed in countries other than yours, including the United States, under Google's safeguards, such as the European Commission's standard contractual clauses.

14. Grievance Officer

Under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the Grievance Officer for Gallery is:

We will acknowledge your grievance and aim to resolve it within the time set by Indian law.

15. Changes to this policy

We may update this policy when the App or the law changes. We'll post the new version on this page with a new "Last updated" date. If Gallery starts handling information in a new way, we'll update this policy before that change takes effect. Using the App after the change means you accept the updated policy.

16. Contact us

This policy is governed by the laws of India. Subject to the rights you have under the law of the country where you live, disputes about it are subject to the courts in Surat, Gujarat, India.