Privacy Policy

1. 100% Self-Hosted Data Ownership

Your privacy is fundamental to the design of Photo-Backend (Nomidocloud). All media files (photos, raw camera files, videos), extracted metadata (EXIF, GPS coordinates, timestamps), and AI embeddings (InsightFace facial vectors, CLIP semantic search tensors) are processed and stored exclusively on your own self-hosted hardware.

We do not operate a centralized cloud for photo storage. Your personal memories never pass through or get saved on our servers.

2. Central Hub Infrastructure & OVH Tracking

To enable seamless remote connectivity without complex port forwarding or router configuration, we provide an optional Central Hub service hosted on European infrastructure (OVHcloud).

When you connect your self-hosted instance or mobile app to the Central Hub, we collect and store only the minimal data strictly necessary to operate the service:

• Account Credentials: Your email address and cryptographic password hash (Argon2id).
• API Keys: Unique HUB_API_KEY used by your instance to authenticate requests.
• Trial Tracking: The timestamp when your 7-day mobile trial started (trial_started_at), used solely to calculate trial entitlement status.
• Signaling Relay: Ephemeral WebRTC STUN and WebSocket signaling packets (SDP offers and ICE candidates) relayed in real time between your devices and self-hosted server. These are never persisted to disk or logged.

3. In-App Purchases & Payment Information

All purchases for the mobile application lifetime unlock are processed directly through the Apple App Store (StoreKit 2) or Google Play Store (Google Play Billing). We never collect, process, or store your credit card numbers or financial account details.

Our verification servers only validate cryptographically signed purchase tokens from Apple and Google to activate lifetime entitlement for your account.

4. Data Retention and User Rights (GDPR & CCPA)

In compliance with the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA), you retain full rights to access, export, or delete your account records at any time.

If you request account deletion, your email, API keys, and trial records are permanently erased from the Central Hub database. Your self-hosted library remains entirely unaffected on your local disk.

5. Contact & Questions

If you have questions or inquiries regarding our privacy practices, please contact us at privacy@photobackend.app.