Home Gallery Privacy Policy
English
Introduction
Home Gallery ("we", "the app") is a photo and video gallery app for Android. It helps you browse, organize, edit, and back up media on your device and on SMB network shares (home NAS or PC storage). This policy explains what information the app processes, where it stays, and what limited data may be sent to third-party services.
We do not operate a user account system or a cloud gallery hosting service. We do not sell your personal data.
Information the app accesses on your device
| Data | Purpose | Leaves your device? |
|---|---|---|
| Photos and videos (MediaStore) | Browse, edit, share, trash, backup, upload | Only when you upload/backup to home storage or share via the system share sheet |
| File paths and media metadata | Sorting, timeline, properties | Stays on device unless included in an optional diagnostic export |
| SMB connection settings (host, share, username, password) and home album mappings | Connect to your home storage; each home album is one host + one share + one folder | Stored locally; sent only to your SMB server when you connect |
| Bookmarks, playback position | Navigation and resume | Local only |
| App settings | Personalization | Local only |
| Backup state | Album backup and restore | Local metadata; backup files go to your .HomeGallery/backup/ folder |
| Pro purchase status | Unlock Pro features | Verified via Google Play; a local cache flag is stored on device |
Information sent to third parties
Google Play Billing. When you purchase Pro, payment and purchase verification are handled by Google. We do not receive your payment card details.
Firebase Crashlytics (Google). The app includes optional Crashlytics support. Current shipping builds do not enable Crashlytics (Firebase is not configured), so no crash reports are sent. If Firebase is configured in a future release, the app may send crash reports and non-fatal diagnostics (device model, OS version, app version, stack traces). This does not include your photos or SMB passwords. Debug builds do not collect Crashlytics data.
Google ML Kit (on-device). Face detection for the portrait edit feature runs on your device. Photos are not uploaded to our servers for this feature.
Google Cast. If you cast a local video, the Cast framework communicates with devices on your network under Google’s policies.
Your home storage / NAS. SMB browse, upload, backup, and streaming talk only to servers you configure.
Information we do not collect
- No cloud accounts for gallery content operated by us
- We do not upload your photo library to our servers
- No advertising SDKs
- No cross-app ad tracking
Optional user-initiated sharing
- Report an issue: Opens your email app with optional diagnostic text; you choose whether to send.
- Export diagnostics / settings backup: Creates files you control. Settings backups may include SMB usernames and passwords in an encoded form (not immediately readable plain text, but not strong encryption)—keep those files private and do not upload them to a public cloud folder.
- System share: Shares selected media through Android’s share sheet to apps you choose.
Permissions (summary)
- Photos / videos: read; modify when you delete, move, edit, or trash
- Internet & network state: SMB, backup, Cast, Play Billing
- Notifications: backup progress (Android 13+)
- Foreground service: long-running album backup sync; Cast reconnection when casting
Data retention and deletion
- Uninstalling removes app-private storage. Cache can be cleared in Settings.
- Recycle bin follows Android MediaStore / OEM rules when enabled in Settings.
- SMB backup copies remain on your home storage until you delete them.
- Crashlytics retention follows Google/Firebase policies when enabled.
Children
The app is not directed at children under 13. We do not knowingly collect personal information from children.
Changes
We may update this policy. The effective date at the top will change. Continued use after changes means you accept the updated policy.
Contact
繁體中文
簡介
Home Gallery（家相簿）是 Android 上的相片／影片相簿工具，供您瀏覽、整理、編輯本機媒體，以及透過 SMB 連線家中儲存（NAS／PC）。本政策說明 App 處理哪些資訊、資料存放位置，以及可能傳送給第三方的有限資料。
本 App 沒有使用者帳號系統，不提供雲端相簿代管服務，不會出售您的個人資料。
App 在本機存取的資訊
| 資料 | 用途 | 是否離開裝置 |
|---|---|---|
| 相片與影片（MediaStore） | 瀏覽、編輯、分享、回收桶、備份、上傳 | 僅在您主動上傳／備份至家中儲存或透過系統分享時 |
| 檔案路徑與中繼資料 | 排序、時間軸、屬性 | 預設留在本機；可選診斷匯出時由您決定 |
| SMB 主機連線（主機、帳密）與家中相簿對應 | 連線至您的 NAS／PC；每一家中相簿＝一台主機＋一個共用＋一個資料夾 | 僅存本機；連線時只傳至您指定的 SMB 伺服器 |
| 書籤、播放進度 | 導覽與續播 | 僅本機 |
| App 設定 | 個人化 | 僅本機 |
| 備份狀態 | 備份與還原 | 中繼資料在本機；備份檔在您的 .HomeGallery/backup/ |
| Pro 購買狀態 | 解鎖 Pro | 由 Google Play 驗證；本機快取解鎖狀態 |
可能傳送給第三方的資訊
Google Play 帳單。購買 Pro 時由 Google 處理付款與驗證，我們不會收到您的信用卡資料。
Firebase Crashlytics（Google）。App 內建可選的 Crashlytics 支援。目前上架建置未啟用 Crashlytics（未設定 Firebase），因此不會傳送當機報告。若日後設定 Firebase，正式版可能傳送當機與錯誤診斷（裝置型號、系統版本、App 版本、堆疊追蹤等），不包含相片或網路儲存密碼。Debug 建置不收集。
Google ML Kit（裝置端）。肖像編輯的人臉偵測在本機執行，不會為此上傳相片至我們的伺服器。
Google Cast。投影本機影片時，依 Google 規範與區網裝置通訊。
您的家中儲存／NAS。SMB 相關功能只與您設定的伺服器通訊。
我們不收集的項目
- 不將相簿上傳至自有雲端
- 不使用廣告 SDK
- 不進行跨 App 廣告追蹤
使用者主動觸發的分享
- 回報問題：開啟 Email，可附診斷文字，由您決定是否寄出。
- 匯出診斷／設定備份：檔案由您掌控。設定備份可能以編碼形式包含網路儲存帳密以便還原連線（非一目了然的明文，但非強加密）——請妥善保管，勿上傳至公開雲端。
- 系統分享：透過 Android 分享至您選擇的 App。
權限（摘要）
- 相片／影片：讀取；在您刪除、移動、編輯、移至回收桶時修改
- 網路：SMB、備份、Cast、Play 帳單
- 通知：備份進度（Android 13+）
- 前景服務：長時間相簿備份同步；投影時的 Cast 重新連線
資料保存與刪除
- 解除安裝可移除 App 私有資料；快取可在設定中清除。
- Pro 回收桶依 Android MediaStore 與裝置規則。
- 家中儲存備份檔由您自行管理。
- 若啟用 Crashlytics，保存依 Google／Firebase 政策。
兒童
本 App 並非以 13 歲以下兒童為對象。
政策變更
我們可能更新本政策，並修訂上方生效日期。
聯絡方式
Play Console: paste this page’s HTTPS URL into App content → Privacy policy:
https://jasoncschang-stack.github.io/homegallery-privacy/