How We Handle Your Data
The App only accesses the information required to provide backup, restore, and gallery features. Your data stays on your device unless you choose to back it up.
The App uses Firebase Authentication solely to create and manage your account. Firebase receives only your email address and authentication credentials. No photos, videos, messages, contacts, or backup content is ever sent to Firebase.
When you back up:
The App backs up your photos, videos, messages (SMS/MMS), and related metadata to the storage you choose.
Contacts are read only on your device, to correctly label who your messages are from.
You choose where your backup is stored: Gallery+ storage (our secure cloud, provided through Cloudflare R2), or your own Google Drive or Dropbox.
Your content is encrypted in transit (HTTPS/TLS) and at rest.
We never scan, analyze, sell, or mine your content, and we never access it for advertising, profiling, or AI.
The App does not scan or access any other files on your device or in a connected cloud account.
Encryption
Standard backups are encrypted in transit and at rest using industry-standard encryption. This protects your content as it travels and while it’s stored.
The Gallery+ Vault adds end-to-end encryption for your most sensitive files. Vault content is encrypted on your device with a key that only you hold. We never receive or handle that key, so we cannot access, read, decrypt, or recover Vault contents. Because only you hold the key, if you lose it, those files cannot be recovered.
The difference matters: for your regular backups, we can help you restore your content by signing back in. For the Vault, we can’t — that’s the trade-off that makes it fully private.
Cloud Storage Access (your own provider)
When you connect Google Drive or Dropbox:
The App only accesses the files and folders it creates.
The App does not access, read, modify, or view any other files in your cloud account.
The App does not scan or analyze your cloud storage.
This limited access is used solely to store your backups.
If you connect a Google account, the App uses the drive.file scope, which restricts access to App-created files only.
Data Transmission
All data is transmitted using secure, encrypted connections (HTTPS/TLS).
Backups are sent from your device to the storage you choose — Gallery+ storage, or your connected provider.
Data Deletion
You have full control over your data:
You may delete your backups at any time from within the App, from Gallery+ storage, or directly from your cloud provider.
If you revoke the App’s cloud permissions, it can no longer access or upload to your connected account.
You may request account deletion or data removal at any time through our Account Deletion Request form.
Your Responsibilities
To keep your data secure:
Keep your device secure and up to date.
Keep access to your account and, if you use your own cloud, to that provider.
If you use the Vault, keep your Vault key safe — store it somewhere like a password manager, because we cannot recover or regenerate it. (Your regular backups don’t require a key you manage; you can always restore them by signing in.)