PictureSort
PictureSort — Privacy policy
Find and organize photos on Android with recognition that runs on your device.
Effective and last updated: .
Who provides this app
PictureSort is provided by Timastra LLC. See our company details. Privacy questions can be sent to support@timastra.com.
This policy explains the app’s data use, including optional features and differences between supported platforms.
Photos and local index
PictureSort reads only the images allowed by Android photo permissions, and reads your videos or the location stored in your photos only if you turn those features on, as described below. Recognition uses bundled models on the device. PictureSort has no account, photo-upload service, advertising or analytics/crash reporting. The Android release does not request Internet access. The local index stores photo identifiers and metadata, recognised and custom labels, the text read in photos and the place each was taken if you turn those on, face locations and numerical face representations, names you enter, grouping decisions, app-local favorites/albums, saved queries and up to ten submitted recent searches. Face matching compares your own library, not an external identity database. Recognition can be wrong and assignments can be corrected in the app.
Videos, places and hidden photos
These features are in version 1.1.0 and later, and Videos and Places are off until you turn them on in Settings. If you turn Videos on, PictureSort asks Android for permission to read your videos, indexes one frame of each the way it indexes a photo, and plays them in the app. Videos are read where they are; nothing is copied. If you turn Places on, PictureSort asks Android for permission to read the location stored inside your photos, keeps those coordinates in its local index, and names the nearest town from a list bundled with the app. The lookup happens on the device; no coordinate is sent anywhere. Share safely removes location from the copies it makes whether or not Places is on. Photos you hide are kept out of every other screen in PictureSort and shown only after Android's own unlock prompt (fingerprint, face or screen lock). Android does the checking; PictureSort learns only whether it passed and never sees or stores a fingerprint, face or PIN. Hiding changes nothing about the photo itself, so other apps on the device can still show it.
Exports, backups and original photos
PictureSort never modifies original photos, and never moves or deletes one on its own. The only way a photo leaves your library through PictureSort is Move to trash, in version 1.1.0 and later: you choose the photos, Android asks you to confirm, and they go to your device's trash, from which they can be restored until Android clears it. PictureSort holds no permission to write to or delete from your library. Through Android's save picker, you can export a readable labels/people report or a full index backup. Full backups are encrypted and authenticated with a passphrase you choose (AES-256-GCM, with the key derived using Argon2id); PictureSort does not store or recover that passphrase. The labels/people report and older JSON backups are unencrypted and can contain private data. Once unlocked, a full backup contains face representations and, if you turned those features on, photo coordinates, place names and the text read in photos. A cloud provider you choose receives the exported file under its own terms.
Photo and face-sharing choices
Three additional exports occur only when you start them in a build that offers these controls. Share safely creates copies with all faces covered except the people you choose to keep, removes location, date and camera details, and passes those copies to your selected sharing app. Its temporary copies stay in private cache until the next such share or local-data deletion. Export names and labels for other apps saves an unencrypted ZIP of XMP files containing names, face areas and labels. Send names to another phone saves a passphrase-protected file containing selected names and numerical face representations, without photos; the receiving phone compares them with its own library on that device. Keep readable exports private and share the transfer passphrase separately. PictureSort does not upload these files itself. Your chosen destination controls its copy.
Device backups and platforms
Android cloud backup and device-transfer exclusions apply to app data, while operating-system administration and older backups remain outside the app's control. iOS is not a supported release platform.
Retention and deletion
Use Settings > Delete PictureSort data, Android Clear storage or uninstall to remove the local index. The in-app action clears index tables, preferences and app-private caches and retries interrupted deletion before startup. Clear recent searches from Search separately if you want to keep the rest of the index. Original photos and exports are unaffected; delete exported copies at their destinations. Revoke photo access in Android settings to restrict future reads.
View deletion instructions and request help.
Support messages and your privacy choices
If you contact us, we receive your email address, message and any attachments you choose to send. We use them to respond, troubleshoot and handle privacy requests. Email and hosting providers process these communications and ordinary connection information. We retain correspondence as needed to resolve the request and meet applicable recordkeeping obligations; you may request deletion of correspondence.
You may request access, correction, export or deletion of personal information we hold, or raise an objection or withdraw consent where applicable. Local-only records must be managed on your device because we do not hold a remote copy. Optional device permissions can be revoked in system settings. Service providers may process data outside your country under their own policies; security also depends on your device and any destinations you choose for exports.
Contact and policy changes
Email support@timastra.com for PictureSort privacy questions. Include the app name and enough non-sensitive information to identify your request. Never send passwords, authentication codes, recovery keys or private health, financial or photo backups. We may need to verify ownership before releasing or deleting hosted records.
Material changes to the app's data practices will be reflected in this policy with an updated date and in the app where appropriate. Visiting this page is also covered by our website privacy policy.