1. What we do not collect
| Item | Status |
|---|---|
| Your photos / image content | Not collected, not uploaded, not analysed |
| Your music files | Not collected, not uploaded |
| Contacts / call log / SMS | Not requested, not read |
| Location / GPS | No location permission requested (see §3) |
| Device identifiers (IMEI / Android ID / Ad ID) | Not read |
| Your account / email / phone number | The App has no account system |
| Usage analytics | No analytics SDK of any kind |
| Crash reporting | No Crashlytics / Sentry, etc. |
| Advertising ID / ad SDK | No ads |
This is not "not wired up yet" — it is part of the product's positioning. The App is a one-time purchase; revenue comes from that purchase, so we have no need to monetise data. Not collecting data is a feature, not a cost — and it is our core difference from free photo-frame apps.
2. Your photos and music stay on your device
- Photos: the App reads the images you select through Android's system gallery API
(
MediaStore) in order to show them on screen. Your images never leave your device — they are not copied elsewhere, not uploaded, and not used to train any model. - Music: built-in tracks ship inside the install package (CC0 / public domain — see the in-app "Music & Licences" page). Music you import yourself is only a reference to a file path on your device; the file itself is never uploaded.
- Settings: transitions, slide duration, brightness schedule and similar settings are stored in the App's private directory and are removed when you uninstall. The config-file export is triggered by you, and the file is written only where you choose.
3. The only outbound request: optional weather
The weather overlay is off by default. Only after you enable it and type a city does the App contact Open-Meteo:
| What is sent | Purpose |
|---|---|
| The city name you typed (plain text, e.g. "Hangzhou") | Resolve to coordinates |
| Resolved coordinates (4 decimal places, approx. 11 m precision) | Fetch current temperature / conditions |
The App requests no location permission (ACCESS_FINE_LOCATION /
ACCESS_COARSE_LOCATION are not declared in the manifest). The coordinates used for
weather come from geocoding a city name, not from your device's real position — so the
App cannot know where you are. Open-Meteo is an open-source weather service; see its website for
its privacy practices. The App sends it no device identifier, user identifier, or photos.
4. Permissions (mapped to Play's sensitive-permission declarations)
| Permission | Why | Can you refuse? |
|---|---|---|
READ_MEDIA_IMAGES (Android 13+)READ_EXTERNAL_STORAGE (≤ 12) |
Read the photos you select, in order to display them | Yes (without it, no photos can be shown) |
INTERNET |
Used solely by the optional weather overlay (the city name you type plus the coordinates resolved from it, see §3 — not device location). The App declares it explicitly itself rather than relying on a third-party library | System-level |
FOREGROUND_SERVICEFOREGROUND_SERVICE_SPECIAL_USE |
Resident playback: the frame must stay on screen for long periods | System-level (applies on install) |
WAKE_LOCK | Keep the screen on while playing | System-level |
RECEIVE_BOOT_COMPLETED |
Restore resident mode after reboot, per your settings (off by default) | System-level |
REQUEST_IGNORE_BATTERY_OPTIMIZATIONS |
Ask the system not to freeze the App, otherwise long-running playback gets killed | Yes (may be interrupted by the system if refused) |
POST_NOTIFICATIONS (Android 13+) |
Show the ongoing "now playing" notification required by the foreground service | Yes |
About network shares (SMB / WebDAV, a Pro feature): when connecting to your own NAS, the address, username and password are stored only on this device (the password is encrypted with the system keystore and is not included in config exports). Server addresses and credentials are never sent to any third party and are not collected by us. Home-NAS WebDAV typically offers plain HTTP only, so the App permits a plaintext connection to a LAN address you typed yourself; it never sends anything to the internet. If your NAS uses HTTPS with a self-signed certificate, the App accepts that certificate (home devices almost always are self-signed) — which means man-in-the-middle protection is not possible on that link. If that matters to you, use this feature only on a trusted home LAN, or use SMB (which the App also connects to over the LAN only).
The App does not request: location, camera, microphone, contacts, calendar, phone, or SMS.
Its screensaver capability uses the system's existing DreamService mechanism and
requests no additional permissions.
5. Children
The App is not directed at children and collects no one's personal information (see §1), so no special handling of children's data applies. Parents can let children use it to display photos — it uploads nothing.
6. Data deletion
Because the App collects and stores no server-side data, there is no "your data" to delete.
- In-app data (settings, favourite markers, hidden markers, undo history, Pro entitlement cache) lives in the device private directory and is fully removed on uninstall.
- To clear settings without uninstalling: Android Settings → Apps → this App → Storage → Clear data.
7. Changes to this policy
If a future version adds any collection behaviour (for example cloud albums, which would necessarily involve transferring photos), this policy will be updated before the change takes effect and highlighted in-app.
The App's existing commitments do not change: core features (on-device gallery, folder picker, full shuffle coverage, hide a photo, real screensaver, resident playback, 20 built-in music tracks) are free forever, with no watermark, no time limit, and no ads.
8. Contact us
For privacy questions, contact: lei.ren@qgtechnology.com