Privacy Policy

This policy explains how the Photo Flux Android app ("the app"), published by Sherwood Technology ("we", "us"), handles your information. By using the app you agree to this policy.

Information the app handles

• Your photos and videos, and their metadata. When you run an import, the app copies files from a connected camera or memory card into a folder you selected on your device or SD card. It reads embedded metadata (including EXIF, IPTC and, where present, GPS coordinates), generates thumbnails and RAW previews, and records this information in a database stored locally on your device so it can show and organise your library.
• Approximate place names. If a photo contains GPS coordinates, the app looks up the nearest place name using a list of place names bundled inside the app. This lookup happens entirely on your device with no network request.
• Connector settings. If you set up a connector, the app stores the details needed to reach that destination. For a network connector (SMB, FTP, SFTP, SCP or WebDAV) that includes the server address, folder and username; any password is encrypted using a key held in the Android Keystore and never stored in plain text. For OneDrive the app stores the email address of the Microsoft account you signed in with, the folder you chose, and a sign-in token encrypted the same way — never your Microsoft password (see below). For Google Drive it stores the email address of the Google account you connected and the identifier of the Photo Flux folder it made there; no password or token is stored by the app (see below). For a USB drive the app stores the drive's own identifier and the folder you picked, so it can recognise the same drive next time.

All of the above stays on your device. We have no ability to access it.

When data leaves your device

Data is transmitted off your device only as a direct result of an action you take:

• Exporting to a network share or server. Selected photos (and the paired JPEG of a RAW+JPEG pair) are uploaded to the SMB, FTP, SFTP, SCP or WebDAV server you configured. The connection is between your device and that server only.
• Exporting to, or importing from, your OneDrive. Selected photos are uploaded to the folder you chose in your own OneDrive, and when you import from OneDrive the photos you pick are downloaded from it. Both go directly between your device and Microsoft; nothing passes through us.
• Exporting to, or importing from, your Google Drive. Selected photos are uploaded to the Photo Flux folder the app made in your own Google Drive, and when you import from Google Drive the photos you pick from that folder are downloaded from it. Both go directly between your device and Google; nothing passes through us.
• Exporting to a USB drive or memory card. Selected photos are copied to the drive you plugged in and the folder you chose on it. Nothing goes over a network.

Microsoft account and OneDrive

If you connect OneDrive, you sign in on Microsoft's own sign-in page, opened in your browser. Photo Flux never sees or stores your Microsoft password. Microsoft asks you to allow Photo Flux to read and write files in your OneDrive, to see your basic profile (the account's name and email address), and to stay signed in. Read and write access to the whole drive is what lets you choose any folder to export to or import from.

• Photo Flux uses that access only to list the folders you browse, to create the folder you export to, to upload the photos you choose to export, to check which of them are already there, and — when you import — to show thumbnails of the photos in the folder you open and download the ones you pick. It never deletes, moves or renames anything in your OneDrive, and it reads nothing outside the folders you open.
• The email address is shown on the connector's screen ("Connected as …") and is stored only on your device. The sign-in token is stored only on your device, encrypted with a key held in the Android Keystore, and is sent only to Microsoft. Nothing from your OneDrive or your Microsoft account is sent to us.
• Sign out on the connector's screen, or deleting the connector, deletes the stored token and email address from your device. It does not sign you out of Microsoft in your browser. To withdraw Photo Flux's access altogether, remove it at account.live.com/consent/Manage (personal accounts) or ask your organisation's administrator (work or school accounts).

Microsoft's handling of your account and your files is covered by the Microsoft Privacy Statement.

Google account and Google Drive

If you connect Google Drive, you choose your Google account in Android's own Google sign-in screen. Photo Flux never sees or stores your Google password. Google asks you to allow Photo Flux to see, edit, create and delete only the specific Google Drive files that you use with this app. That is Google's narrowest Drive access: Photo Flux cannot see, read or change anything else in your Drive.

• What that means in practice. Photo Flux makes a folder called Photo Flux in your Drive and works only inside it: photos can only be exported to and imported from that folder.
• Photo Flux uses that access only to create the Photo Flux folder and the subfolders it exports into, to upload the photos you choose to export, to check which of them are already there, and — when you import — to list that folder, show thumbnails of the photos in it and download the ones you pick. It never deletes, moves or renames anything in your Drive.
• The account's email address is shown on the connector's screen ("Connected as …") and stored only on your device. Access is granted and held by Google Play services on your device; Photo Flux keeps no Google password or token of its own, and nothing from your Drive or your Google account is sent to us.
• Deleting the connector removes the stored email address and folder identifier from your device. To withdraw Photo Flux's access altogether, remove it at myaccount.google.com/connections. The Photo Flux folder and the photos in it stay in your Drive until you delete them.

Photo Flux's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google's handling of your account and your files is covered by Google's Privacy Policy.

Purchases

Photo Flux Pro is a one-off in-app purchase handled entirely by Google Play. We never see your payment details. The app asks Google Play whether this device owns the unlock and stores only a yes/no answer on the device itself. Purchases are covered by Google's Privacy Policy.

Analytics, advertising and tracking

None. The app contains no analytics SDK, no advertising, no third-party tracking, and no crash-reporting service. We do not build a profile of you and we do not sell or share personal information.

Permissions the app requests

Permissions are requested only for the feature that needs them: access to a connected USB device (to read a camera), access to folders you pick (to import and organise files), notifications (to show import/export progress), media location (so photo GPS data isn't stripped by the system), local network access (to reach a network share on Android 17 and later), and internet access (for the connectors). Denying a permission disables the related feature but the rest of the app keeps working.

Data retention

Imported files remain in the folder you chose until you move or delete them. Library metadata, thumbnails and connector settings remain in the app's local storage until you delete the relevant photos or connectors, clear the app's data, or uninstall the app. Uninstalling removes the app's database and its stored connector credentials.

Children

Photo Flux is a general-purpose utility and is not directed at children under 13.

Changes to this policy

If this policy changes, the updated version will be posted on this page with a new "last updated" date.

Contact

Questions about this policy or your data: support@sherwood-tech.co.uk.