Privacy Policy
Last updated: October 31, 2026
“Website” means the websites on smartusphoto.app and all its subdomains; “Application” means SmartUs Photo Sync; “Service” means the Website and Application collectively. This Privacy Policy describes the collection, use and protection of personal information when you use the Service. The Service is provided by a private individual based in Israel under the name SmartUs Labs (“we”, “us”), who is the controller responsible for the processing of personal data described in this Policy.
Questions and requests about personal data are accepted through the Get help form in your account; you can sign in with your Google account at any time to reach it. Without an account, the Website does not store your name, email address or other account data.
Information the Website receives
Account information. You sign in to the Website with your Google account — the same account you use for Gmail, YouTube and other Google services — so no separate password is needed. Google then provides your account identifier, name, email address and profile-picture link. The Website also stores sign-in session information.
Computer and access information. When you register a computer, the Application provides a computer identifier, a public verification key and the computer name from the operating system, which you can change in your account. The identifier is a one-way hash of the computer’s hardware identifier; the hardware identifier itself is not sent. The Website stores this information with the encrypted registration code, the operating system type reported by the Application and the date the record was created; access identifiers, status, start and expiry times and computer assignments; trial terms and the cumulative number of confirmed file changes counted during the trial; pending purchases; and confirmed access transfers.
Purchase information. Purchases are made through Paddle, an online payments company and the official seller (merchant of record) of access to the Service: you pay Paddle, and Paddle handles the payment, invoices, taxes and refunds. The Website stores Paddle customer, transaction and price identifiers, the offer price and currency, and the duration of purchased access. Paddle processes payments and refunds and keeps their detailed records.
Technical information. The Website’s servers and hosting providers process IP addresses and connection information to operate and secure the Website. Technical logs may be retained for these purposes.
Requests sent through your account. When you submit the private form, we receive the selected request type, subject and message, the filenames and contents of any attachments you choose, and your verified account name and email address. The request and selected files are delivered to SmartUs Labs support by email, with the files as email attachments. We use them to handle the request and send an acceptance confirmation to your verified email address. The confirmation lists the selected filenames without including the files as attachments.
Data processed by the Application
Google Photos sign-in. Google Photos is Google’s online service for storing and viewing photos and videos. The Application signs in to your Google Photos account in its own browser window on your computer; the sign-in itself is handled by Google. The sign-in session is kept in a separate browser profile on your computer. The Application also saves your Google account identifier, email address, name and profile-picture link there to show the connected account and keep a separate library for each account.
Your library. To compare your folders with Google Photos, the Application stores on your computer the paths, names, sizes and dates of your folders and files, their checksums and capture dates, the names and identifiers of your Google Photos albums and items, the synchronization plan, thumbnails and your language and theme settings. Error logs contain only technical details, without file names, paths or account data.
What leaves your computer. Photos, videos and album changes travel directly between your computer and your Google Photos account, only when you start synchronization: uploads go from your computer to Google, and downloads come from Google to your computer. Google processes them under its own privacy policy. At startup, when you check access or open access management in the Application, and before synchronization, the Application contacts the Website. It sends the computer identifier, public verification key, computer name supplied by the operating system and operating system type. The identifier is pseudonymous; when linked to your Website account, it and the associated computer information are personal data. During trial synchronization, the Application also sends the number of confirmed file changes. Finding changes, choosing or changing the main folder, switching direction and other catalog actions do not send license-check requests to the Website. During operations, it also checks the internet connection with a short request to Google that contains no account data. Photos, videos, file paths and names, your Google sign-in, passwords and cookies are never sent to the Website.
How we use personal information
Account and access information is used to operate your account on the Website, manage access to synchronization in the Application and handle requests. This processing is necessary to perform our agreement with you or take pre-contractual steps at your request. Handling personal-data requests is necessary to comply with our legal obligations. Security, preventing repeated trials and maintaining computer ownership records are our legitimate interests. Providing information is voluntary, but the corresponding functions cannot operate without it. Google Analytics runs only with your consent, which you can withdraw at any time.
The Application uses the data on your computer only to show your library and synchronize it with Google Photos at your request.
We do not make decisions based solely on automated processing that produce legal or similarly significant effects for you. Automatic checks of access and trial eligibility only apply the Terms of Use.
Service providers and international transfers
Our service providers include: KnownHost, a hosting company whose servers run the Website; Google, the company behind Gmail, YouTube and Google Photos, which provides sign-in to the Website with your Google account; and Paddle, an online payments company that is the official seller (merchant of record) of access to the Service. To link a purchase, the Website sends Paddle the payer’s name and email address and internal account, computer and purchase identifiers. Paddle processes payment details; we do not store payment-card information. KnownHost also delivers requests sent through the private form, their attachments and acceptance confirmations by email. The Website’s server and support mailbox are hosted in the Netherlands (EU). Cloudflare delivers public application installers from R2 and processes connection information for delivery and security. Personal data is transferred to Israel, where we are based, to Google and Cloudflare in the USA and to Paddle in the United Kingdom. These transfers rely on adequacy decisions of the European Commission: for Israel, for the United Kingdom and, for the USA, under the EU–U.S. Data Privacy Framework, in which Google and Cloudflare participate. The providers’ privacy policies describe their processing: Google, Paddle, KnownHost. We do not sell personal information or share it for advertising. Information may be disclosed to competent authorities where required by law or necessary to address unlawful activity or protect legal rights.
Google also provides optional Google Analytics.
Data retention
The Website retains information as long as necessary to operate your account, manage access to synchronization in the Application, maintain security and meet legal obligations. Expiry of access does not delete your Website account. Computer ownership and trial usage records are retained to prevent conflicting registrations and repeated trials. Following an erasure request, we delete information no longer needed for the purposes above. These criteria also apply to Website logs and backups.
Private requests and subsequent email correspondence are retained in the SmartUs Labs support mailbox as long as needed to handle the request, follow up and meet applicable legal obligations.
Data stored by the Application stays on your computer until you delete it. Disconnecting the Google account in the Application deletes its saved sign-in, choosing another main folder deletes the records of the folders outside it, and deleting the Application’s data from your computer removes the rest.
When the Service is permanently closed, we delete all users’ personal data stored on our side, including Website account data, support correspondence, logs and backups.
Your rights
You may request access, correction, erasure, restriction or portability of your data, and object to processing based on legitimate interests. Send your requests through the Get help form in your account; do not post personal data in public channels. We may verify your identity. These rights apply in accordance with applicable law. You may complain to the competent data-protection authority. Data that only the Application stores on your computer is under your control; we do not hold a copy of it.
Security
We use HTTPS and access controls to protect information. No transmission or storage method is completely secure. Protect your computer and the Google Photos sign-in saved in the Application.
Changes to this Policy
We may update this Privacy Policy from time to time. We announce material changes on the Website before they take effect. The last updated date appears at the beginning of this document.