Privacy statement

Your photos

PhotoSurf processes photos on your Mac. It does not upload your photos or face data to PhotoSurf servers.

Local data

Settings, photo history, previews, duplicate scan results and face data are stored on your Mac. Original photos stay in their source folders unless you choose Move to Trash.

Photo metadata, including embedded location information, may be read to display captions. Place lookup uses bundled geographic data; PhotoSurf does not request your current device location for this lookup.

Face model download

If you accept the model terms, PhotoSurf downloads the face model from Hugging Face and its storage providers. Those providers receive connection information such as your IP address. Your photos are not sent with this download.

Tracking

PhotoSurf includes no advertising or analytics service and does not track you across apps or websites.

Your controls

Use Remove source to stop including a folder. Reset face data clears the current face index, names and previews without deleting original photos or the downloaded model. Open app data folder to inspect local app files.

Files and transfers

People export includes only named people, with names, aliases, face previews and numerical recognition references. It excludes original photos, source paths and model weights. These files contain personal face information: share them only with people and services you trust. If USB frame sending is enabled, the selected prepared image is transferred to the connected frame; the frame’s own storage and network settings are separate. Changes in cloud-synced folders may also be synchronized by your cloud provider.

Stored data and removal

The current People store, its previews and any migration backup are stored locally. Reset face data removes the current model’s stored people data and previews, leaving original photos and the downloaded model intact. Data from older models and exported profile files can remain separately. Removing a source excludes it from future library use but does not promise to erase all cached records. Uninstalling the app does not necessarily remove its data.

Website and support

These Support/Privacy pages are static files hosted on Cloudflare Pages. Cloudflare receives technical connection information such as your IP address to deliver and protect the pages, under its own privacy policy. We do not add advertising or analytics scripts or cookies. If you email support, we receive your email address and the information you choose to include, and use it to respond and investigate your request. You can request correction or deletion by email; service providers may retain records under their own security and legal policies.