Privacy Policy

1. Who we are

BestKeeper and this website are operated by Shanghai Qianjing Technology Co., Ltd. (“we”, “us” or “our”), the controller responsible for the personal data described here.

For support, privacy requests, or business and partnership inquiries, email service@brmb.com. This policy applies to the BestKeeper iPhone app, this website and our support correspondence. The app is preparing for launch; the app-related practices below describe its intended release operation.

2. What stays on your iPhone

BestKeeper uses Apple’s on-device frameworks to group similar shots, assess photo quality and help you review your library. Photos and videos, thumbnails, feature vectors, recognized text, filenames, photo identifiers, album names, capture times and locations, and face-related analysis remain on your device. None of those items are included in our network requests, analytics events or crash breadcrumbs. We do not use your photos to train a cloud AI model.

Local databases hold the photo index, suggestions, your decisions, picking preferences and cleanup history. System-level backups or iCloud Photos, if enabled by you, are managed by Apple under your Apple settings and are separate from BestKeeper’s processing. Some previews may require Apple to download an iCloud original to your iPhone.

3. Limited data processed by connected services

BestKeeper does use network services for purchases, service configuration, permitted analytics and crash reporting. “Photos stay on your iPhone” does not mean that the app never connects to the internet. Data sent to these services can include:

• Identifiers: pseudonymous app, installation and device identifiers, including a Firebase anonymous user ID when analytics is enabled. These are not a registration account and should not be described as completely anonymous.
• Product interactions: actions such as completing a review, using a feature, changing consent or a purchase outcome. Counts and durations use ranges rather than exact photo-level details. Related properties can include app language, App Store region, system version, device tier, plan status and installation week.
• Diagnostics: crash stacks, error codes, app and operating-system versions, device model and technical performance information. Crash breadcrumbs contain event names only, never photo content or identifiers.
• Purchases: product identifiers, transaction and entitlement information, purchase or renewal status, and pseudonymous purchase identifiers. Apple handles payment information; we do not receive your full payment-card details.
• Attribution and connection data: Apple Ads attribution signals and technical request data such as IP address. Providers can process IP addresses to deliver and secure their services; AppMetrica may infer an approximate region. Precise device-location collection is disabled.

4. Service providers

These providers process limited service data for the purposes below. They do not receive your photo library or photo-analysis contents from BestKeeper.

Providers operate under their applicable terms and privacy information. Optional integrations may be unavailable when not configured. We may also disclose limited information if legally required, to protect rights or security, or in a business reorganization subject to applicable safeguards.

5. Purposes, legal bases and your controls

We process service data to deliver purchases and restore entitlements, operate and secure our services, respond to support requests, diagnose faults and, when permitted, understand product use. Where the GDPR or similar laws apply, the relevant bases are performance of a contract for requested services, consent for optional analytics where required, legitimate interests in service reliability and support where lawful, and compliance with legal obligations.

Usage data: in the European Economic Area, United Kingdom and Switzerland, analytics stays off until you allow it. If your region cannot be determined, the app also asks first. Elsewhere, usage sharing is enabled by default. You can turn it off at any time in the app’s Settings → Privacy → Share usage data. Turning it off stops future analytics collection through that control; it does not automatically erase data already processed. Withdrawal does not affect the lawfulness of earlier processing.

Crash reports: crash reporting has a separate Send crash reports setting and is enabled by default. It is not controlled by the usage-data consent choice. You can switch it off in Settings. Purchase verification remains available when optional analytics or crash reporting is off.

We do not request the advertising identifier (IDFA), serve third-party advertising in the app, sell personal data, or share it for cross-context behavioral advertising. Apple Ads attribution measures how people find the app; it does not involve uploading your photos.

6. This website

This site is served by Firebase Hosting. Delivering a web page involves technical connection information, including your IP address, request URL, browser information and request time, which the hosting infrastructure can process for delivery, security and operational purposes.

We have not added website analytics, advertising pixels, session recording, tracking cookies or browser storage. The interactive photo example runs locally in your browser and does not read your photo library or send your selection to us. Sample imagery is illustrative and AI-generated. An email link opens your email application; it does not send a message until you choose to send it.

7. Support messages

If you email us, we receive your email address, the message and any attachments you choose to send. The in-app support option can include version information and, only if you choose, a diagnostics report you can preview first. That report can contain technical versions, counts, state and cleanup-batch summaries, but does not include photos or photo identifiers.

We use this information to answer your request and investigate the issue. Please avoid sending private photos or unnecessary personal information. Support correspondence is retained for 12 months after the request is closed, then deleted, unless we must keep specific records to meet a legal obligation or resolve a legal claim.

8. Retention and deletion

Your on-device index and decisions stay locally until you erase the app’s data or the operating system removes them. Use Settings → Privacy → Erase Keeper’s data in the app to reset its local index, preferences, decisions and cleanup history. This action does not delete photos from Photos, cancel a subscription, or automatically erase provider-held purchase, analytics or crash records.

We retain connected-service data only for as long as reasonably necessary for the purposes described here, taking account of the provider’s retention controls, service operation, purchase restoration, legal recordkeeping and the handling of claims. Retention can differ by provider and data category. Contact us for information about the applicable settings or to request deletion of service-side data. Disabling analytics or uninstalling the app is not a service-side deletion request.

To request access or deletion, email service@brmb.com. Because there is no registration account, we may need limited information to locate the relevant records and verify the request. Do not send photos, passwords or full payment-card details. Some transaction records may need to remain with Apple or a provider for legal or purchase-restoration reasons.

9. International processing and security

Our company is based in China. Support correspondence may be accessed there, and our service providers operate internationally, including in the United States and other countries. Service-side data can therefore be processed outside your country, where privacy laws may differ. This does not change the rule that BestKeeper’s photo analysis stays on your iPhone.

Where applicable law requires safeguards for a transfer, legally required transfer mechanisms and protections apply. Contact us for information about the relevant provider arrangements and safeguards. We use limited-data design, access controls and encrypted network connections to protect service data, but no system can guarantee absolute security.

10. Your privacy rights

Depending on your location and applicable law, you may have rights to know about and access your personal data; obtain a copy; correct inaccurate data; request deletion; restrict or object to processing; withdraw consent; and request portability. You can exercise applicable rights at service@brmb.com. We may verify your identity using information proportionate to the request and respond within the period required by law. An authorized agent may contact us with appropriate evidence of authority.

If you are in the EEA, UK or Switzerland, you can also complain to your local data-protection authority. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You may withdraw consent at any time.

Where California privacy law applies, rights may include knowing the categories and specific pieces of personal information collected, their sources, purposes and recipient categories; correcting or deleting information; and receiving equal service without unlawful discrimination for exercising your rights. The categories, sources, purposes and recipients are described above. We do not sell personal information or share it for cross-context behavioral advertising, so there is no such sale or sharing to opt out of. We do not use sensitive personal information to infer characteristics about you. If a request is denied and your law provides an appeal, reply to our response to request a review.

11. Children

BestKeeper is not directed to children under 13. We do not knowingly collect personal information from children below the applicable age for valid consent. If you believe a child has provided personal information to us without appropriate authorization, contact us so we can investigate and take appropriate steps, including deletion where required.

12. Changes to this policy

We may update this policy as the app, service providers or legal requirements change. The current version and its effective date will remain available at this address. For material changes, we will provide additional notice where required and request new consent when applicable. These changes never authorize us to upload your photos without changing the product and obtaining any required permission.