Privacy Policy — MyPhoto Guesser

Last updated: 3 November 2026

This policy explains what MyPhoto Guesser ("the app", "the game") does with your data, why, and what you can do about it. It covers the iOS and Android apps published by LDH ("we", "us"). The sections above "On Android" describe the iOS app; the Android app works the same way except for the services listed in that section.

MyPhoto Guesser has no ads, no in-app purchases, no analytics and no tracking. There is no account to create: on iPhone, games with friends use your iCloud account, managed by Apple; on Android, they use an anonymous identifier created by Google Firebase.

Short version

• Solo games happen entirely on your iPhone. The app reads your photo library to find geotagged photos and videos; nothing leaves your device.
• Games with friends are the only thing sent online, and only when you create or play one: the photos and videos you pick, their location and date, your nickname and your scores, stored in the app's iCloud database run by Apple.
• You stay in control: you choose every photo you share, and you can delete a game you created at any time from the app.
• No ads, no analytics, no tracking, no data sold.

What stays on your device

• Your photo library. With your permission, the app reads the photos and videos that have a GPS location, shows them to you and compares your guesses with their location and the year they were taken. If you give limited access, only the photos you selected are used.
• Camera. If you choose to scan a game's QR code from the app, the camera is used on your device only to read that code. No picture or video is taken, stored or sent.
• Photo analysis. To only play photos and videos worth guessing, and to let you filter them by type (people, landscapes, cities, beach, mountain, animals, food), the app analyses a small preview of each one with Apple's on-device Vision framework. The result is cached on your device. Nothing is uploaded.
• Your settings and history: number of rounds, time per round, your nickname, the list of games you created or joined.

Deleting the app deletes all of this.

What is sent online: games with friends

Games with friends are stored in the app's public CloudKit database, a service operated by Apple on behalf of the app. Playing with friends requires being signed in to iCloud.

When you create a game, the app uploads:

• the photos you picked, re-encoded at a maximum of 1600 pixels without their metadata (no EXIF, no camera details);
• the videos you picked, re-encoded in 720p and cut to their first 15 seconds, without their metadata (no location, no camera details);
• the GPS coordinates and date of each photo, stored separately so that scores can be computed and the location revealed after each answer;
• the game title, your nickname and the time per round.

When you play a game, the app uploads your nickname, your total score, your points per round, the position of each of your guesses and the years you guessed.

When you report a game, the app uploads the game code and the reason you picked.

Who can see it. Anyone who has the 6-character game code, the QR code or the invitation link can play the game, see its photos, their locations and dates after each answer, and the leaderboard (nicknames and total scores). Only share photos you are happy to share with the people you invite, and only photos of people who agree.

Identifiers. CloudKit attaches to each record an anonymous identifier, specific to this app, derived from your iCloud account. We cannot see your Apple ID, name or email address. It is only used to keep one score per player and to know who created a game.

How long it is kept. A game and its photos are kept until its creator deletes it (open the game, then "Delete this game"). Scores and reports are kept with the game's code. We may delete reported games. To have your scores or any other record deleted, write to us with the game code and your nickname.

Maps and place names

Maps are displayed with Apple Maps (MapKit). After each round, the app asks Apple for the name of the place where the photo was taken (for example "Paris, France"): the photo's coordinates are sent to Apple for that purpose. This is covered by Apple's privacy policy.

What we do NOT do

• We do not show ads and do not use any advertising or analytics SDK.
• We do not track you across other companies' apps or websites.
• We do not upload any photo you did not explicitly put in a game with friends.
• We do not sell or rent any data.

Crash and diagnostic data

If the app crashes, Apple may share technical details about the failure with us if you have chosen to share analytics with developers in your iPhone settings. This is handled by Apple and contains nothing about you.

On Android

The Android app offers the same games. These points differ from the iOS app:

• Games with friends are stored with Google Firebase (Cloud Firestore and Cloud Storage), run by Google on behalf of the app, on servers in the European Union. iPhone and Android games are separate: neither can open the other's games.
• Identifier. The first time you open games with friends, Firebase creates an anonymous identifier for the app on your phone. It is not linked to your Google account, name, email or phone number. It is only used to keep one score per player, to know who created a game or added a photo, and to apply exclusions. Deleting the app's data or the app creates a new identifier.
• What is uploaded is the same as on iPhone (photos and videos without their metadata, the location and date of each one, the game title, your nickname), plus the identifier above. When you play, only your nickname, your total score, the maximum score possible and the list of photos you already played are uploaded: not the position of your guesses.
• Photo analysis is done on your phone with Google ML Kit, whose models are included in the app. Your photos are not sent for this.
• Maps are displayed with Google Maps, and place names are looked up with Android's geocoding service, provided by Google: the coordinates of the map area you look at, and of each photo after you answer, are sent to Google for that purpose. This is covered by Google's privacy policy (policies.google.com/privacy).
• Technical diagnostics. The Google Maps, Firebase and ML Kit libraries may send Google anonymous technical data (device model, Android version, app version, performance and error information) to run and improve their service. If the app crashes, Google Play may share technical details with us if you have agreed to share usage and diagnostics data on your phone. None of this contains your photos or their locations.
• Excluded players. If a player is excluded after a report, their identifier and nickname are kept in a list so that they can no longer create games or share photos.

Invitation page

The invitation link and QR code open a page on thibleduc.github.io (GitHub Pages) that only reads the game code from the link and opens the app. It sets no cookie and runs no analytics. GitHub may log technical data about visits under its own privacy statement.

Children

The app is not directed at children under 13, and we do not knowingly collect data from them.

Your rights

If you are in the European Union or the United Kingdom, the GDPR gives you the right to access, correct, delete or object to the processing of your data, and to lodge a complaint with your national data protection authority. If you are a California resident, the CCPA gives you the right to know what is collected and to request its deletion. You can delete your own games directly in the app; for anything else, write to us.

Changes

If this policy changes, the new version will be published at this address with a new date.

Contact

LDH — Thibault Leduc — leducholding@gmail.com. We answer within 30 days.