Privacy Policy
Last updated: 28 August 2026
PhotoSendr helps you send photos to the people who always want them — and it does almost all of it on your device. It has no accounts and no analytics. Your photos leave your phone only when you send them, or when you create an iCloud share link.
In short No accounts. No tracking. No analytics. No advertising. We don't collect your photos, your recipients, or any personal information. The only things that ever leave your device are shares you start yourself.
What PhotoSendr works with
PhotoSendr works with photos and videos you choose — taken with the camera inside the app or picked with Apple's out-of-process photo picker (which shows the app only the items you pick, never your whole library). All editing (crop, rotate, black & white), video compression, and PDF creation happens on your device using Apple's frameworks.
What is stored on your device
- Your sets — the photos and videos you add to your sets are kept in the app's private storage on your device so they're still there when you come back. Deleting an item or a set in the app removes it.
- Your defaults — the recipient list, email subject, and message you save in Settings live on your device only.
- Saved edits — when you tap Save, the edited photo is written back to your own photo library.
- Your share links — the list of links you've created (address, title, expiry) is stored on your device so you can track and revoke them.
The developer has no access to any of this.
How sending works
When you share by email or the share sheet, PhotoSendr hands your photos (or the PDF it builds from them) to your own Mail compose window or the iOS share sheet. The email goes out through your email account; AirDrop and other shares go through Apple's system features. PhotoSendr never sends anything on its own, and never sees or stores what you send.
iCloud share links (Pro)
When you create a share link, the photos and videos in the current set are uploaded to the app's public iCloud (CloudKit) database — container iCloud.com.fbmore.PhotoSendrV2 — under a random, unguessable address. There is no directory or search: only someone you give the link to can open it, in any web browser, with no account or app.
- You stay in control. Links expire automatically after 7 days, and you can stop sharing any link earlier from Settings → Shared Links; that deletes the uploaded copies.
- What's uploaded is exactly what you chose to share: the media, a title, and the expiry date. No names, emails, or identifiers travel with it.
- View counts. To show you how many times a link was opened, the viewer page pings a small counter service that stores only a random link ID and a number — no IP addresses, no location, no cookies, nothing about the viewer or about you.
- Downloads. The viewer's download buttons fetch files directly from Apple's iCloud. When a browser blocks that direct fetch, the bytes pass through a small relay we run on Cloudflare; it streams the file and stores nothing — no copies, no content logs.
- Reporting. Every shared page carries a "Report this share" link that opens an email to us containing the link's address, so we can delete a reported share from iCloud. We receive only what the reporter chooses to send.
Device permissions and why
- Camera — only to take photos inside the app, only when you choose the camera mode.
- Photo library picking — uses Apple's system picker, which runs outside the app and needs no permission: the app receives only the photos and videos you pick.
- Photo library (add) — only to save edited photos back when you tap Save.
- iCloud — used only when you create a share link, to upload that share to the app's public database.
What we do not collect
- No account, sign-in, name, email, or phone number is required or collected.
- No analytics, usage tracking, or advertising SDKs of any kind.
- No location data.
- Your photos, recipient addresses, and messages are never sent to the developer.
Purchases
PhotoSendr is free for one set of up to 6 photos. PhotoSendr Pro (multiple sets, larger sets, videos, iCloud share links) is an optional purchase — a monthly or yearly auto-renewing subscription or a one-time lifetime unlock — processed entirely by Apple through your App Store account. The app never sees your payment details.
To manage subscriptions and restore purchases, the app uses RevenueCat, which receives purchase receipts tied to a random anonymous identifier — never your name, email, or Apple ID. If you bought PhotoSendr before version 5, the app detects that on-device through Apple's receipt and unlocks Pro for free; nothing is sent anywhere for this.
Third-party code
PhotoSendr includes two libraries: Lottie, used solely to render the app's animations (collects nothing, makes no network requests), and the RevenueCat SDK described above, which is contacted only for purchase management.
Children
PhotoSendr is not directed at children and collects no personal information from anyone.
Changes
If this policy changes, the updated version will be posted on this page with a new date above.
Contact
Questions? Email [email protected].