Skip to content
Back to home

Privacy Policy

Last updated:

The short version: Ciao looks at your photos only on your iPhone. They are never uploaded, we have no account system and no server that stores photos. This website sets no cookies and uses no analytics.

This policy explains how PeakMotion Sàrl handles personal data in the Ciao Photos app (“Ciao” or “the app”) and on ciaophotos.app (“the website”). It is written to meet the Swiss Federal Act on Data Protection (nLPD / revDSG) and the EU General Data Protection Regulation (GDPR).

1. Who is responsible

PeakMotion Sàrl
Z.I. d’In-Riaux 10
1726 Farvagny-le-Grand, Switzerland
UID: CHE-326.988.752
Email: hello@ciaophotos.app

PeakMotion Sàrl is the controller for the processing described here. For any privacy question, write to the address above.

2. The Ciao app

Photos and videos stay on your device

With your permission, Ciao reads your photo library through Apple’s Photos framework to show you photos, sort them (for example by size, screenshots or duplicates) and delete the ones you choose. All of this happens only on your iPhone. Ciao never uploads, copies or transmits your photos, videos or their metadata to us or anyone else. We cannot see your library.

You can change or remove photo access at any time in iPhone Settings, Ciao, Photos.

No account

Ciao has no sign-up and no login. We do not ask for your name, email address or phone number in the app.

Purchases

Purchases and subscriptions are processed by Apple through your Apple ID. Apple handles payment details; we never receive your card or bank information. Apple’s own privacy policy applies to that processing.

Subscription status (RevenueCat)

To check whether you have Pro, the app uses RevenueCat, Inc. (USA) as our processor. RevenueCat receives a random app user ID created on your device, purchase and receipt data from Apple (product, date, price, currency, store country), basic device information (iOS version, app version) and, for technical reasons, your IP address. This data is used only to confirm and restore your purchases. It does not include your photos.

RevenueCat processes data in the USA. We have a data processing agreement with RevenueCat that includes the EU Standard Contractual Clauses (also recognised by the Swiss FDPIC) and, where available, rely on RevenueCat’s certification under the EU-U.S. and Swiss-U.S. Data Privacy Framework.

Notifications and diagnostics

The weekly digest is a local notification created on your iPhone. It is only sent if you allow notifications. The app contains no advertising and no third-party analytics or tracking SDK. If you have chosen in iPhone settings to share analytics with app developers, Apple may provide us with anonymised crash reports and usage statistics.

3. The website

Hosting and server logs

The website is hosted by Vercel Inc. (USA) as our processor. When you visit, the server automatically logs technical data: IP address, date and time, page requested, browser and operating system, and referring page. We use these logs only to run the website securely and to fix errors. They are deleted after a short period, normally within 30 days. Transfers to the USA are covered by Standard Contractual Clauses and, where available, the Data Privacy Framework.

No cookies, no tracking

The website sets no cookies, uses no analytics, no tracking pixels and no social media plugins. Fonts and images are served from our own domain, so your browser makes no requests to third parties.

Waitlist

If you join the waitlist, we process your email address, your chosen language and the time of sign-up and confirmation. We use double opt-in: you are only added after you click the link in our confirmation email. We use your email only to tell you when Ciao launches and for closely related launch news.

The list is stored with Resend, Inc. (USA), our email processor, under a data processing agreement with Standard Contractual Clauses. You can unsubscribe at any time with the link in every email or by writing to us. We delete the waitlist at the latest 12 months after launch, or earlier when you unsubscribe. We may keep a record of your confirmation as proof of consent.

To prevent abuse, the sign-up form uses a hidden spam field and a short-lived, in-memory rate limit based on your IP address. Nothing is stored for this.

Email contact

If you write to us, we use your message and email address to answer and keep the correspondence as long as needed for that purpose and any legal retention duties.

Where the GDPR applies, we rely on:

  • Contract (Art. 6(1)(b)): providing the app, its features and your purchases.
  • Consent (Art. 6(1)(a)): photo library access, notifications and the waitlist. You can withdraw consent at any time.
  • Legitimate interests (Art. 6(1)(f)): secure operation of the website and app, preventing abuse, and answering your questions.

5. Sharing

We share data only with the processors named above, and only as far as needed. We do not sell personal data and do not use it for advertising. We may disclose data if required by law.

6. Your rights

Under the nLPD and the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to processing, to data portability and to withdraw consent. Write to hello@ciaophotos.app. Because the app has no account and photos never leave your device, we usually hold no data about you other than your waitlist email or messages you sent us.

You can also complain to a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority in your country of residence.

7. Security

We use encrypted connections (HTTPS) and choose processors with appropriate security measures. Your photos are protected by the security of your iPhone, because they never leave it.

8. Children

Ciao is not aimed at children under 13 and we do not knowingly collect their data.

9. Changes

We will update this policy if the app or website changes. The date at the top shows the latest version.