Back to Home

Privacy Policy

Last Updated: August 19, 2026

5AM Software Labs LLC ("5AM," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our photo and media management services, websites, and applications (collectively, the "Service"). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

1. Information We Collect

We may collect information about you in a variety of ways. The information we may collect via the Service depends on the content and materials you use, and includes:

Personal Information You Provide to Us

  • Account Information: When you register for an account, we may collect your name, email address, and profile picture. We support signing in with Sign in with Apple and Google. When you use one of these providers to sign in, we receive basic profile information (such as your name and email address, or a private relay email if you choose to hide your email with Sign in with Apple) to create and secure your account. We do not receive your provider password.
  • User Content:We collect and store the photos, videos, metadata embedded in them (such as EXIF camera data, capture dates, and — when present in the file — precise location / GPS coordinates recorded by your camera), AI-generated descriptions, and any other files or information you upload, create, or store using the Service ("User Content"). Embedded location is stored as part of your User Content so features like media info can display where a photo was taken; it is deleted when you delete the media, and we do not separately collect your device's location (our apps never request location permission).
  • Payment Information: If you subscribe to our paid services or enable paid sharing for your albums, we (or our third-party payment processors like Stripe) will collect payment-related information, such as your credit card number or other payment account information. We do not store full credit card numbers on our servers.
  • Creator Payout Information: If you use features that allow you to receive payments from others (e.g., paid album access), we (or our third-party payment processors like Stripe) will collect information necessary to facilitate payouts, such as bank account details or Stripe Connect account information.
  • Communications: If you contact us directly (e.g., for customer support), we may receive additional information about you such as your name, email address, phone number, the contents of the message and/or attachments you may send us, and any other information you may choose to provide.
  • API Keys: If you provide an API key for third-party services (e.g., Google Gemini for AI features), we will store this key securely to enable those features on your behalf.

Information We Collect Automatically

  • Usage Data: We automatically collect certain information when you access or use our Service. This information may include your IP address, browser type, operating system, device information, access times, pages viewed, features used, and the referring URL.
  • Cookies and Similar Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your interaction with our Service, remember your preferences, and support security features. You can control the use of cookies at the individual browser level.
  • Mobile App Analytics and Diagnostics:Our mobile apps use Google's Firebase services (Google Analytics for Firebase, Firebase Crashlytics, and Firebase Performance Monitoring) to understand how the apps are used and to find and fix problems. These services collect usage events (for example, which screens are viewed and which features are used), general device information (device model, operating system version, language, and app version), approximate location derived from your IP address (such as country or city), crash reports, and performance measurements. This data is keyed to a random identifier created for your app installation (and a push-notification token if you enable notifications); it is not linked to your name, email address, or account, we do not access the Apple advertising identifier (IDFA), and we do not use this data to track you across other companies' apps or websites or for advertising.

2. How We Use Your Information

We use the information we collect in the following ways:

  • To provide, operate, and maintain our Service;
  • To improve, personalize, and expand our Service;
  • To understand and analyze how you use our Service;
  • To develop new products, services, features, and functionality;
  • To process your transactions, manage your subscriptions, and facilitate payouts;
  • To communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the Service, and for marketing and promotional purposes (where permitted by law and with your consent where required);
  • To send you text messages and push notifications (if you opt-in);
  • For security purposes, including fraud prevention and to enforce our terms and policies;
  • To comply with legal obligations and respond to lawful requests from public authorities;
  • For our business purposes, such as data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and to evaluate and improve our Service, products, marketing, and your experience.

AI Features and Model Training

We do not use your User Content (your photos, videos, or related metadata) to train machine learning or artificial intelligence models, and we do not sell your User Content. Certain features of the Service are powered by third-party AI services. We use two, and we name them here:

  • Google (Gemini API) — used by the AI features in our web app and our mobile apps, and run using a Google Gemini API key that you provide.
  • OpenAI (image generation API) — used only in our web app, for optional DALL·E 3 / GPT-Image-1 image generation, and run using an OpenAI API key that you provide. Our iOS app does not send any content to OpenAI.

What we send, and when. Content is sent only when you use the feature it belongs to, and only the content that feature needs:

  • AI editing and generation (AI photo editing, Magic Eraser, image and video generation, canvas tools): the photos or videos you submit, together with your prompts and any masks or annotations;
  • AI chat features (AI Characters, AI Playground, library chat): the messages and prompts you send, and any media you attach or grant the feature access to;
  • Search indexing and descriptions (semantic search, AI descriptions): thumbnails of photos you upload and the resulting description text, used to make your library searchable;
  • Summaries and audio (video and audio summaries, AI music): the media file being summarized or the prompt being generated from;
  • AI photo categorization during automatic backup (mobile apps, off by default): if — and only if — you switch on “AI photo categorization” in Auto-Backup settings, photos that your device cannot categorize on its own are sent to the Gemini API to obtain a category and a short description. With the setting off, categorization happens entirely on your device and nothing is sent.

Consent. No content is sent to a third-party AI service unless you have added your own API key for that service. In our mobile apps we additionally ask for your permission — naming the recipient and what is shared — before any content is shared, and we record your acceptance against your account; AI photo categorization during automatic backup requires its own separate opt-in, which is off unless you turn it on. You can withdraw either permission at any time by removing your API key in Account Settings, or by switching AI photo categorization off. On the web, by signing in and using the AI features you direct us to share the relevant content with the provider as described above.

Protections these providers give your content. We share User Content only with providers whose published terms commit them to protections equivalent to those in this policy for the content we send: they may process it to perform the task you requested, they do not sell it, and they do not make it public. Specifically, Google states that paid-tier Gemini API usage (billing enabled) is not used to improve its products, and OpenAI states that content submitted through its API is not used to train its models by default. We have reviewed these terms before enabling each integration and we do not send User Content to any AI provider not named above.

The one exception you should know about. On the free tier of the Gemini API, Google's terms permit it to use submitted content and generated responses to provide, improve, and develop its products and services — including machine-learning technologies — and human reviewers may read and annotate that content (after it is disconnected from your Google account and API key). This is weaker than the protection described above, which is why we tell you before you use the feature and recommend enabling billing on your Google API key. If you are in the European Economic Area, Switzerland, or the United Kingdom, Google applies the paid-tier handling to all usage, including the free tier. Content sent to the Gemini API is processed under your own agreement with Google, including the Gemini API Terms of Service; OpenAI usage is governed by the OpenAI API data usage policies. These providers operate their own systems, and we cannot guarantee their performance of their terms.

3. How We Share Your Information

We may share the information we have collected about you in certain situations. Your information may be disclosed as follows:

  • With Your Consent or at Your Direction: We may share your information with third parties when you explicitly consent or direct us to do so, such as when you share an album with another user or configure a third-party integration.
  • Service Providers:We may share your information with third-party vendors, service providers, contractors, or agents who perform services for us or on our behalf and require access to such information to do that work. Examples include: payment processing (e.g., Stripe), cloud hosting (e.g., Google Cloud, Cloudflare), app analytics and crash reporting (Google Firebase, as described in Section 1), email delivery, customer service, and AI service providers (Google Gemini, where your API key is used by our backend on your behalf for specific features like video summaries or server-side AI processing; and OpenAI, for optional web-only image generation — see “AI Features and Model Training” above). These service providers are authorized to use your personal information only as necessary to provide these services to us.
  • By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
  • Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Aggregated or De-identified Data: We may share aggregated or de-identified information, which cannot reasonably be used to identify you, for various purposes, including for business or research purposes or to improve our Service.

4. Your Choices and Rights

Depending on your location and applicable law, you may have certain rights regarding the personal information we hold about you. These may include the right to:

  • Delete your account and data: You can delete your entire account and all associated personal information and User Content at any time by emailing us at [email protected]. You can also delete individual photos, videos, and albums directly within the Service.
  • Access, correct, update, or request deletion of your personal information.
  • Object to processing of your personal information, ask us to restrict processing of your personal information, or request portability of your personal information.
  • Opt-out of marketing communications we send you at any time.
  • Withdraw your consent at any time if we have collected and processed your personal information with your consent.
  • Complain to a data protection authority about our collection and use of your personal information.

You can manage your account information and User Content through your account settings within the Service. You can permanently delete your account and associated data directly in the app at any time (Profile → Account Settings → Delete Account); you may also email [email protected] to request deletion. For other requests or if you have questions about your rights, please contact us using the details provided below.

5. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), provides you with specific rights regarding your personal information:

  • Right to Know / Access: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions. You can delete your account and data in the app at any time (see Section 4).
  • Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
  • Right to Opt-Out of Sale or Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information as those terms are defined under the CCPA.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

Sale and Sharing of Personal Information. We do not sell your personal information or your User Content for money. We may use third-party analytics and advertising technologies (such as cookies) that, under the broad definitions in the CCPA, could be considered "sharing" of certain identifiers and usage data for cross-context behavioral advertising. You may opt out of such sharing by adjusting your browser cookie settings or by contacting us at [email protected]. We do not knowingly sell or share the personal information of consumers under 16 years of age.

To exercise any of these rights, contact us at [email protected]. We will verify your request before fulfilling it and will not discriminate against you for exercising your rights. You may also designate an authorized agent to make a request on your behalf.

6. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

7. Data Retention

We retain personal information we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax, or accounting requirements).

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

8. International Data Transfers

Your information, including personal information, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those in your jurisdiction. If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including personal information, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

9. Children's Privacy

Our Service is not directed to individuals under the age of 13 (or a higher age if stipulated by applicable law), and we do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information. If you become aware that a child has provided us with personal information, please contact us.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

5AM Software Labs LLC