Effective July 11, 2026
The short version: your photos and videos go to your own Immich server and nowhere else. Pixels has no ads, sells no data, and does no tracking. The only data that can ever reach us is optional, anonymous, and off by default.
Pixels connects directly to the Immich server you choose and control. Your photos, videos, albums, and account credentials travel only between your device and your server. They are never sent to us or to any third party by the app.
Your server address and sign-in credentials are stored on your device in the iOS Keychain, Apple's encrypted credential store. They are used only to talk to your server.
If you turn on Share Anonymous Usage Data in Settings → Privacy, Pixels sends anonymous product analytics to help improve the app:
These events are tied to a random identifier created on your device. It is not connected to your name, your Immich account, or anything that identifies you, and it is rotated when you log out or opt out. Search text, file names, people's names, locations, and photo content are never included. Turning the setting off stops all analytics immediately — even queued events are discarded.
To keep the app reliable, Pixels sends automated crash and error diagnostics (via Sentry): what went wrong in the code, device model, iOS version, and app version. These reports are scrubbed of credentials and URLs before they leave your device and contain no photos and no personal information.
Tips are processed entirely by Apple through your App Store account. We never see your payment details.
Everything the app stores locally (your library cache, settings, credentials) can be removed by deleting the app. Anonymous analytics and crash reports are kept by our service providers for a limited time and cannot be traced back to you. You can opt out of analytics at any time in Settings → Privacy.
If this policy changes, the updated version will be posted here with a new effective date.
Questions about privacy? Email support@petalpixels.net.