Your privacy

Your records

Photos, documents, captions, asset names and dates are stored in the app's encrypted storage on your device. We read the files you choose or share to AL, including embedded photo dates and other metadata. Originals may contain location metadata; sharing an original may share that metadata too. AL does not automatically upload your asset library. Removing an asset deletes AL's local copy, not the original in your phone's gallery or copies already shared. Uninstalling or clearing app data removes local records and the installation's secure key. Keep a separate encrypted backup and its unlock code.

Activation, purchases and referrals

When you activate, restore purchases or use paid/referral services, AL sends its installation public key, cryptographic proofs and Android attestation certificates to Sovereign Apps. Certificate evidence may describe the app signature, Android security state and key hardware; we use it to verify the installation, prevent replay/fraud and bind asset licences. We do not request your advertising ID, contacts, SMS or call history.

Our server stores device registration, purchase/session identifiers, currency, quantities, payment/refund status, licences, and referral associations so purchases and rewards can be verified and restored to that installation. A purchase does not create a photo backup. Moving purchases to a new installation requires support; restoring files alone does not restore a lost secure key.

Stripe processes payment and receives the billing/contact/card information you enter in its checkout. AL does not receive full card numbers. Stripe's privacy information is at https://stripe.com/privacy.

Optional sharing and permissions

Sharing starts only when you choose it. The recipient and email/messaging provider you select receive the exported files. Copies sent outside AL cannot be withdrawn by deleting your local copy. Check your selection before sending; some exports include private records when you deliberately select them or make a full backup.

Nearby handover uses Google Nearby Connections. It needs Bluetooth/Wi-Fi and, on older Android versions, location permissions for nearby discovery. Those permissions are requested when you choose Nearby. Google Nearby collects connection performance metrics and device information (including model, country, build version and app package). You can control Google's usage/diagnostics collection in Android Settings > Google > Usage & diagnostics. Google's privacy policy applies (https://policies.google.com/privacy); see https://developers.google.com/nearby/connections/overview. AL does not use Nearby location permission to track your movements. Declining Nearby permissions leaves file export/import available. The system camera/file picker handles your chosen capture/import; we do not scan the whole gallery.

Website and feedback

Our website and activation service are hosted on Netlify. Hosting/security services process network information such as IP addresses and request metadata. The website may use Netlify's performance measurement. Optional feedback is stored through Netlify Forms; Netlify's spam checks may process submitted text and network information. Do not send passwords, card details or private documents. Your email is optional and is used to reply if supplied. We do not publish feedback automatically or subscribe you to marketing.

Retention and your choices

Local records remain until you remove them, uninstall or clear app data. Exported backups remain wherever you save them. Server purchase/licence/referral records are retained to support ongoing access, payment reconciliation and fraud prevention; financial records may need to be kept for legal/accounting purposes. Feedback is retained while handling it and for support records. Ask through the feedback page to access, correct or delete information we hold about you. We may need to verify the request; deleting licence/device records may prevent purchase restoration. Stripe, Google and Netlify apply their own retention policies to information they process.

You can decline first-run consent by closing the app, revoke optional permissions in Android settings, and stop sharing at any time. We do not sell your asset library or include an in-app advertising SDK. This app is a general-purpose organiser, not a service directed at children. Please avoid submitting children's personal information through support.

Security and changes

Local vault encryption, HTTPS and signed purchase verification protect data, but no system or backup is guaranteed against loss. Keep your device protected and your backup code separate. Material data-use changes will be explained before new consent is requested. The current policy is available in the app's Privacy menu and at https://sovereignapps.world/asset-log/privacy/.