Privacy policy
Last updated: 21 October 2026
This is an English translation of our German privacy policy. In case of doubt, the German version applies.
This policy covers the website gallery-guru.app and the Gallery Guru app for iOS and Android.
In short
- Your photos and videos never leave your device. Gallery Guru does not upload images, thumbnails or file names.
- No account. We don't know your name or e-mail address (unless you write to us).
- We use service providers for purchases, crash reports and – in the EU only with your consent – usage analytics and ad measurement. Numbers such as how many photos you have or how much storage you freed are transmitted, never content.
- You can change your settings at any time in the app under Settings → Cookies.
- Website: cookies and Google Analytics only with your consent (cookie notice on your first visit). Without it there is no tracking and no third-party scripts.
- Fonts and all other files are served from our own server.
1. Controller
Warin Winnicke
Alsterdorfer Str. 165
22297 Hamburg
Germany
Email: info@gallery-guru.app
2. This website (gallery-guru.app)
Hosting and server logs
The website is served via Microsoft Azure Static Web Apps (Microsoft Ireland Operations Ltd., Dublin, Ireland). When you visit, the host processes technically necessary data such as IP address, date and time, the page requested, referrer and browser identifier to deliver the website and protect it against attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Transfers to third countries cannot be ruled out; Microsoft is certified under the EU-US Data Privacy Framework.
Cookies and web analytics with Google Analytics
Without your consent the website sets no cookies and loads no analytics or advertising services. On your first visit we ask you in a notice. Only if you choose “Accept” do we use Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) to understand how the website is used: which pages are viewed and for how long, which page or search brought you here, device, browser and approximate location (country/region). We also count clicks on the store buttons. Google Analytics 4 does not store IP addresses. Google sets cookies (_ga, _ga_…) that last up to two years. Advertising features and Google Signals are turned off; analytics data is deleted after 14 months.
The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time via “Cookie settings” in the footer; the analytics cookies are then deleted. Your choice is kept in your browser's local storage. Google may transfer data to the USA; Google LLC is certified under the EU-US Data Privacy Framework. See Google's privacy policy.
Cookies and web analytics with Google Analytics
Without your consent the website sets no cookies and loads no analytics or advertising services. On your first visit we ask you in a notice. Only if you choose “Accept” do we use Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) to understand how the website is used: which pages are viewed and for how long, which page or search brought you here, device, browser and approximate location (country/region). We also count clicks on the store buttons. Google Analytics 4 does not store IP addresses. Google sets cookies (_ga, _ga_…) that last up to two years. Advertising features and Google Signals are turned off; analytics data is deleted after 14 months.
The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time via “Cookie settings” in the footer; the analytics cookies are then deleted. Your choice is kept in your browser's local storage. Google may transfer data to the USA; Google LLC is certified under the EU-US Data Privacy Framework. See Google's privacy policy.
Local storage in your browser
If you choose a language in the footer, your browser remembers it in local storage. This information never leaves your device.
Links to the App Store and Google Play
The download buttons lead to Apple or Google. Their privacy policies apply only once you click them. The links contain a campaign tag (e.g. “en_hero”) that tells us anonymously which page leads to downloads – it contains no data about you.
If you e-mail us, we process your details to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them when they are no longer needed.
3. The Gallery Guru app
Photos, videos and data on your device
With your permission (full or limited access) the app reads your photo library to show photos and videos by month and, at your request, delete them, mark them as favorites, add them to an album or share them via the system share sheet. On your device the app stores your progress (which photos you kept or deleted, with date and file size), small month thumbnails, your settings, your onboarding answers and your consent choices. This data is not sent to us and is removed when you delete the app.
Other permissions: notifications (for reminders scheduled locally on the device – we don't send push messages from a server) and, on iPhone, the app tracking request (see “Usage analytics and ad measurement” below).
Purchases and subscriptions (Adapty)
Purchases are processed by Apple or Google. To manage subscriptions, show offers and restore purchases we use Adapty (Adapty Tech Inc., USA). Adapty creates a pseudonymous profile with a random ID and receives purchase receipts, device and app information, IP address, language, country, your answer to the tracking request and – if released by the system – the advertising ID (IDFA/GAID). We also send usage figures to this profile: number of photos and videos, library size, number of swipes and deleted files with the storage freed, install date, app version, how often you open the app, whether photo access and notifications are allowed, your onboarding answers and information about offers shown. We use this to decide which offers to show and to evaluate which offers work. The legal basis is performance of the contract (Art. 6(1)(b) GDPR) or our legitimate interest in operating the app economically (Art. 6(1)(f) GDPR).
If you unlock Gallery Guru Pro through a promotional offer, we send the Adapty profile ID to our own server to activate Pro for that profile.
App configuration and crash reports
Firebase Remote Config (Google Ireland Ltd.) provides app settings (e.g. which features are active); Google processes technical data such as an installation ID and the IP address.
Firebase Crashlytics (Google Ireland Ltd.) receives a crash report with device type, operating system, app version and the Adapty profile ID. We also send error reports (error message, stack trace, app version, operating system, possibly internal album identifiers) via the Telegram bot service (Telegram Messenger Inc.) to a private developer channel. The legal basis is our legitimate interest in a bug-free app (Art. 6(1)(f) GDPR).
Feedback and referrals
If you rate the app or send feedback inside the app, we send your rating, your text, platform, app version, language and the Adapty profile ID via Telegram to a private developer channel. If you open a referral link, the referral code is sent to our server and, with your consent, to the analytics services below. If you e-mail us from the app, the e-mail contains your Adapty profile ID so we can find your purchase.
Usage analytics and ad measurement
We use the following services to understand how the app is used and to measure which ads lead to installs and purchases:
- Google Analytics for Firebase (Google Ireland Ltd.) – screen views and events such as swipes, completed months, deleted files (count and size), onboarding steps, offers shown and purchases (product, price, currency, transaction ID), linked to the Adapty profile ID.
- Meta App Events (Meta Platforms Ireland Ltd.) – the same events and purchases, to measure ads on Facebook and Instagram; the advertising ID only if you allow app tracking.
- Tenjin (Tenjin Inc., USA) – attribution of installs to ad campaigns and events about swipes and purchases (without amounts); on iPhone only after you have answered the tracking request.
In the EU we ask for your consent on first launch (Art. 6(1)(a) GDPR, § 25(1) TDDDG); these services are not activated before that. Outside the EU they are on by default. Everywhere you can switch them off or withdraw your consent for the future under Settings → Cookies. On iPhone you can also disallow app tracking in the iOS settings under Privacy → Tracking.
4. Transfers outside the EU
Adapty, Tenjin and Telegram, and in part Google and Meta, process data outside the EU, in particular in the USA. Where providers are certified under the EU-US Data Privacy Framework, transfers rely on it; otherwise on EU standard contractual clauses.
5. Retention
Data on your device stays there until you delete the app. Analytics data is deleted after the providers' standard periods (Google Analytics: 14 months at most), crash reports after 90 days at most. We keep purchase and profile data at Adapty as long as needed for your subscription and legal obligations (e.g. tax retention).
6. Children
Gallery Guru is not directed at children under 16. We do not knowingly collect data from children.
7. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests, and the right to withdraw consent. As we only know you by a random profile ID, please include the user ID from the app's settings in your request. You can also lodge a complaint with a data protection authority, e.g. the Hamburg Commissioner for Data Protection and Freedom of Information.
8. Changes
We update this policy when the app or the services we use change. The version published here applies.