Ghost Gallery Privacy Policy

This Privacy Policy describes how SDDEV Corporation ("SDDEV", "we", "us", or "our") handles data in connection with Ghost Gallery ("the Application"). It applies to all releases of Ghost Gallery across supported operating systems and hardware profiles.

Our core privacy principles center on local hardware containment:

• Your photographs, videos, albums, and private vaults reside solely on physical storage managed by your operating system.
• No account registration, user credentials, email addresses, or phone numbers are required to access full functionality.
• All machine learning inferences occur directly on device hardware (CPU, GPU, NPU) without offloading computations to external servers.
• No commercial analytics trackers, behavioral profiling frameworks, or targeted advertising SDKs are compiled into the binary.

Ghost Gallery provides intelligent organization capabilities—such as semantic search, visual text recognition (OCR), face grouping, and depth wallpaper generation. All operations are performed locally on device:

• Semantic Visual Search: Analyzes local image characteristics to build search indexes directly within sandboxed device storage without transmitting photos or query terms to remote infrastructure.
• Face Grouping: Organizes photos with similar facial appearances by calculating facial similarity vectors strictly in volatile device memory, discarding intermediate crops immediately upon completion.
• Text Recognition (OCR): Extracts text characters from stored images on-device to enable offline search over photographed documents, notes, and receipts.
• Geotagging & Map Display: Reads embedded location metadata from photo files to group media geographically using local databases and cached map tiles.

We do not collect personal information from the Application. The table below outlines our data practices across key categories:

Crash & Diagnostic Logs via Google Play: SDDEV does not operate proprietary crash reporting servers or embed third-party telemetry SDKs. All crash diagnostics and Application Not Responding (ANR) reports are handled directly by the Google Play Store and Google Play Console (Google LLC). When a user has opted into Android's system-level "Usage & Diagnostics" sharing setting, Google provides aggregated, anonymous stack traces to developers to assist in fixing defects. These reports contain only device model info, operating system version, and software call stacks, with no photo contents, file paths, or personal identifiers. Users can toggle or revoke this diagnostic sharing at any time in Android Settings → Google → Usage & diagnostics.

In-App Purchases & Financial Information: Purchases of Ghost Premium are processed exclusively through Google Play Billing. SDDEV does not collect, receive, or store credit card numbers, billing addresses, or banking details. Purchases are subject to Google Play Terms of Service and our Terms of Service.

In compliance with Google Play Developer Policies and global transparency requirements, the table below discloses all operating system permissions declared by the Application, along with their technical purpose and data containment safeguards.

Ghost Gallery utilizes standard Android background services to execute periodic local maintenance tasks without network interaction:

To provide specific operational features, the Application interfaces with designated third-party infrastructure. We explicitly disclose these external vendors and the scope of data they handle:

Because Ghost Gallery operates on a local-first model, your personal photos, videos, face vectors, and private vaults never leave your physical device and are never subject to cross-border data transfers.

Where network communications occur in connection with third-party infrastructure:

• Map Tile Queries: Requests for OpenStreetMap tiles may be served by globally distributed content delivery network (CDN) cache servers located outside your jurisdiction. Network connections are secured via Transport Layer Security (TLS/HTTPS).
• Google Play Billing & Diagnostic Data: Purchases and opt-in diagnostic crash reports transmitted to Google LLC may be stored and processed on Google servers located globally, including in the United States. Google relies on Standard Contractual Clauses (SCCs) approved by the European Commission, the EU-U.S. Data Privacy Framework (DPF), and equivalent international transfer mechanisms to ensure appropriate data safeguards.

Ghost Gallery is a general-audience software utility suitable for users of all ages. We do not knowingly solicit or collect personal information from children under the age of 13 (or under 16 within the European Economic Area).

Because the Application operates without remote user accounts, profiling, or cloud servers, children's media content remains strictly under the physical custody and supervisory control of the device owner at all times.

In compliance with international data privacy laws—including the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), and the Indian Digital Personal Data Protection Act (DPDP Act 2023)—users retain full ownership and control over their data:

• Right of Access & Portability: All photos, videos, and associated metadata remain accessible on your device storage in standard, open file formats. You can move, copy, or export them at any time.
• Right to Erasure (Deletion): You can completely and permanently delete all application data, search indexes, and vault databases at any time via Android Settings → Apps → Ghost Gallery → Clear Storage.
• Right to Revoke Permissions: Any operating system permission can be toggled or permanently revoked via Android Settings → Apps → Ghost Gallery → Permissions.

SDDEV Corporation reserves the right to periodically update this Privacy Policy to reflect application feature enhancements, operating system API changes, or evolving regulatory requirements.

Commitment to Privacy by Design & Prior Notice: SDDEV is committed to upholding local-first privacy principles. If we introduce material changes to our data handling practices or add optional cloud-backed capabilities, we will provide at least 30 days' advance notice through an in-app notice, application update release notes, or an official notice on our website before such changes take effect. Continued use of the Application following the notice period constitutes acceptance of the revised terms.

To maintain proper corporate governance and eliminate conflicts of interest, SDDEV Corporation structurally separates software engineering leadership from independent privacy and data protection oversight: