Privacy Policy — FotoFrame

This privacy policy applies to the FotoFrame app (the "Application") for Android and iOS/iPadOS devices, created by Brain Reaction, based in Belgium (the "Service Provider"). This service is provided "AS IS".

What FotoFrame does

FotoFrame turns your phone or tablet into a digital photo frame. You can show photos from your Google Photos library, photos from the photo library on your device, or a built-in demo slideshow. You do not need an account with the Service Provider, and the Application works without a Google account if you use photos from your device or the demo.

Information Collection and Use

Photos from Google Photos

To show photos from Google Photos, the Application uses Google Sign-In and the Google Photos Picker API with the photospicker.mediaitems.readonly OAuth scope. You select photos in Google's own picker interface — FotoFrame never has standing access to your full Google Photos library, only to the item(s) you explicitly choose. On iOS the picker opens in a system web authentication session, which may reuse the Google login you already have in Safari.

Photos from your device

If you choose "Use photos from this device", the Application opens the system photo picker. It only receives the photos you select, not your whole library. Copies of the selected photos are kept in the Application's private storage on your device so the slideshow keeps working. They are never uploaded to any server, and they are removed when you choose a new selection, switch to Google Photos, or uninstall the Application.

What is stored on your device

The Application stores locally on your device, in the platform's secure storage (Android encrypted storage / iOS Keychain): an OAuth access token and its expiry (silently refreshed via Google's Sign-In SDK, which separately manages a refresh token using the platform's own mechanisms), a reference to your Google Photos picker selection so you are not asked to re-select on every launch, and your slideshow settings (photo interval and shuffle). Photos from Google Photos are fetched directly from Google's servers using short-lived URLs and kept in a local image cache managed by the Application and the operating system, so playback stays smooth and the slideshow continues through short connection drops. This cache stays on your device, is not a copy held by the Service Provider, may be cleared by the operating system at any time, and is removed when you uninstall the Application.

What is not collected

The Application does not upload, copy, or store your photos on any server operated by the Service Provider. It does not use advertising networks, does not use analytics services, does not track you, and does not use Artificial Intelligence (AI) technologies. All communication between the Application and Google's servers uses HTTPS/TLS encryption in transit.

Google User Data

FotoFrame's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Photo data accessed through the Google Photos Picker API is used only to display the photo(s) you chose within the app and is not used for any other purpose, not shared with third parties, and not used for advertising.

Third Party Access

• Google — Google Sign-In and Google Photos (photo access), and Google Play Services / Google Play (Android distribution)
• Apple — App Store and TestFlight distribution on iOS/iPadOS
• Expo — the development framework powering the app

The Service Provider does not sell, trade, or otherwise share user data with any other third parties.

Your Rights (GDPR — EU/EEA users)

Because the Service Provider is based in Belgium, EU/EEA users have rights under the GDPR, including the right to access, correct, or request deletion of personal data, and the right to lodge a complaint with the Belgian Data Protection Authority (www.gegevensbeschermingsautoriteit.be). To exercise any of these rights, contact us at keersmaekersjan@gmail.com.

Opt-Out Rights, Data Retention and Deletion

You can sign out inside the app, which revokes FotoFrame's access and removes the stored tokens from your device. You can also revoke access at any time via your Google Account permissions page. Uninstalling the Application removes the copied device photos, your picker selection reference, slideshow settings and the image cache. Because iOS may keep Keychain items after an app is deleted, sign out inside the app before uninstalling if you want the stored sign-in tokens removed as well (or revoke access on the Google permissions page, which makes any leftover tokens useless). The Service Provider does not retain any user data on external servers, so there is nothing to delete on our side.

Children

FotoFrame is a general-purpose utility and is not directed at children under 13.

Changes

This Privacy Policy may be updated from time to time. Changes will be posted on this page with an updated effective date.

Contact

Brain Reaction
Email: keersmaekersjan@gmail.com