Privacy policy

Last updated: October 19, 2026

1. Controller

PhotoKPR is published by:

OXYDANE S.A.
19 Rue de l’industrie
L-8069 Bertrange
Luxembourg
VAT: LU28943810
Email: xv@oxydane.lu

2. General principle

PhotoKPR is designed as a private vault for photos and videos and aims to minimize the processing of personal data.

3. Photos and videos

Photos and videos imported into PhotoKPR are stored inside the app’s private storage and protected by encryption.

PhotoKPR does not use the content of your photos or videos for advertising, profiling or resale.

4. Authentication data

When Face ID is used, authentication is handled by iOS security mechanisms. PhotoKPR does not access or store raw biometric data.

When a PhotoKPR passcode is used, it is protected locally. The main encryption key is protected using the iOS Keychain.

5. Local storage

In the current version, protected media is stored locally on the user’s device.

6. iCloud backup

iCloud backup is optional and is started manually by the user.

When you start a backup, PhotoKPR copies the encrypted vault to your own iCloud storage. Restoration requires your recovery key, which must be kept separately. The recovery key is not stored in plain text in the backup, and OXYDANE S.A. does not receive your media. Transfers depend on your connection, iCloud account and available storage.

7. Data sent to OXYDANE S.A.

PhotoKPR is not designed to send the content of photos or videos to OXYDANE S.A.

If a user voluntarily contacts support, information they choose to send by email is processed solely to respond to that request.

8. Advertising and sale of data

PhotoKPR contains no advertising and OXYDANE S.A. does not sell personal data generated through the use of PhotoKPR.

9. Third-party services

Apple system services required for operation, including Face ID, iOS Keychain, the photo picker, sharing mechanisms and iCloud, are subject to Apple’s own terms and privacy policies.

10. Retention and deletion

Items placed in Trash may be permanently deleted after the period defined by the app or manually by the user.

Deleting the app may delete local data associated with it, subject to any system backups that may exist on the device or in iCloud.

Deleting the app does not necessarily delete its iCloud backup. Manage that backup separately in your iCloud storage. Without your recovery key, OXYDANE S.A. cannot restore your vault for you.

11. Security

PhotoKPR uses technical safeguards including AES-GCM encryption and the iOS Keychain for sensitive secrets.

No information system can guarantee absolute security.

12. Rights and contact

For questions about this policy or PhotoKPR:

xv@oxydane.lu

13. Changes

This policy may be updated to reflect changes to the app, features or legal requirements. The last-updated date will be revised accordingly.

14. This website

This website contains no advertising tools, forms, audience measurement cookies or content loaded from social networks. It uses static files hosted by OVHcloud. As with any website visit, technical connection data may be processed by the hosting provider to deliver and secure the service. If you contact support by email, the content you send is used to handle your request.