Photomingo is built backend-free: there is no Photomingo server, no account to create, and no analytics service embedded in the app. Everything the app does happens on your device.
What the app stores, and where
- Your photo index (filenames, dates, sizes, content fingerprints) is stored in a local database on your device only.
- Cloud sign-in tokens and server credentials for services you connect (e.g. Dropbox, OneDrive, pCloud, Google Photos, a WebDAV server) are stored on your device in encrypted storage. They are sent only to the corresponding service to access your files there.
- Your photos are transferred only between your device and the cloud services you explicitly connect, only at your request (viewing, uploading, importing or deleting copies). They never pass through any server operated by Photomingo.
What we collect
Nothing. Photomingo has no backend to send data to. We do not collect, transmit, sell or share any personal data, usage analytics, or information about your photo library.
Third-party services
When you connect a cloud service, your use of that service is governed by its own privacy policy: Dropbox, Microsoft (OneDrive), pCloud, Google (Google Photos). If you connect a WebDAV server, your data is handled by whoever operates that server — for a self-hosted NAS or Nextcloud, that's you. Photomingo requests only the permissions needed to list, view, upload and delete the files you manage through it.
Google user data
Google Photos import uses the Google Photos Picker API. Photomingo only receives the photos and videos you explicitly select in Google's picker, copies them to your device, and does not store, share or transfer them anywhere else. It also receives the email address of the Google account you signed in with, which is shown in the app's settings so you can see which account is connected, and is stored only on your device. Photomingo never requests access to your full Google Photos library.
Photomingo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is used only to provide the import feature you requested; it is never sold, never used for advertising, never used to train machine-learning or AI models, and never read by a human. You can revoke Photomingo's access at any time from your Google account permissions.
How we protect your data
Photomingo handles sensitive data — your photos and the credentials that unlock your cloud accounts — so it is built to keep that data on your device and nowhere else. The specific safeguards are:
- Encryption in transit — all communication with Google, Dropbox, Microsoft and pCloud uses HTTPS (TLS). Photos, tokens and metadata are never sent over an unencrypted connection to these services. For a WebDAV server you configure yourself, we recommend an
https://address; if you enter anhttp://address, traffic to your own server is unencrypted by your choice. - Encryption at rest — cloud sign-in tokens are stored with Android's EncryptedSharedPreferences, protected by a key that lives in the device's hardware-backed Android Keystore and never leaves it. The photo index and any photos you import are kept in the app's private storage, which Android sandboxes from other apps and covers with the device's file-based encryption.
- Access control — there is no Photomingo server, account system or administrator. Nobody at Photomingo, and no contractor or third party, can access your photos, credentials or index. The only copies exist on your device and in the cloud services you connected.
- Data minimisation — the app requests only the narrowest permissions each service offers for the job: for Google, the read-only Photos Picker scope plus your account email address; for other services, the folder-level access needed to list, view, upload and delete the files you manage through the app.
- Retention — a Google Photos Picker session is temporary: the app reads the items you selected, downloads them once, and the session is discarded. Sign-in tokens are kept only until you disconnect the service or uninstall the app. Imported photos stay in your device gallery until you delete them, like any other photo.
- Deletion and revocation — you can delete everything the app holds at any time (see Data deletion below) and revoke its access from the connected service's own account settings.
- Security incidents — because Photomingo stores no user data outside your device, a compromise of any Photomingo system cannot expose your data. If we become aware of a vulnerability in the app itself that could expose user data, we will ship a fix through Google Play as quickly as possible and publish a notice at photomingo.app and in the release notes.
Permissions
- Photos and media access — to show and manage the photos on your device.
- Media location access — so that photo location data survives backups and duplicate matching works on unmodified files. Location data is never read out of your photos for any other purpose.
- Network access — to talk directly to the cloud services you connect.
Data deletion
Uninstalling the app removes the local index and all stored tokens. You can also disconnect any cloud service from the app's settings at any time, which deletes its tokens and indexed data from your device.
Changes
If this policy changes, the updated version will be posted at photomingo.app/privacy.html with a new "last updated" date.
Contact
Questions? Contact the developer via the support address listed on the app's Google Play page. See also the terms of service.