Privacy, by design.

The app does not collect your data

Pixel Backup does not include ads, analytics, tracking, or a third-party crash-reporting SDK. It does not use the advertising identifier. You do not need a Pixel Backup account.

In normal use, the developer cannot access your photo library, destination settings, or saved destination credentials.

Photos and videos

With your permission, the app reads original photos and videos from your iPhone and uploads them directly to the WebDAV, S3-compatible, or LibrePixel destinations you configure. Full or limited Photos access controls which items the app can read.

Free backs up only the still component of Live Photos; Pro also backs up the paired video. Original files can contain location, capture time, device information, and other embedded metadata. These are part of the file and are sent to your chosen destination.

The operator of that destination controls the uploaded files. Use a destination and transport you trust. Hidden albums and shared albums are excluded. Pixel Backup does not delete your photos or remote backups.

Credentials and on-device records

Destination passwords, tokens, access keys, and device keys are stored in the iOS Keychain with a device-only protection class. They are used only to authenticate with the relevant destination. Removing a destination removes its saved credentials from the device, while files already uploaded remain on the destination.

Destination settings, backup records, and run history remain in the app’s local storage. You can remove a destination in the app; deleting the app removes its local records. The app does not send these records to the developer.

Camera, notifications, and background work

Camera access is used only to scan a LibrePixel configuration QR code. Camera images are not retained or uploaded by the app. You can paste a setup code instead.

Backup result notifications and overdue reminders are generated locally on your iPhone when enabled. No remote push service or device push token is used. Lock Screen and Dynamic Island progress is also generated on-device. Background backups upload files under the same rules as manual backups.

App Store purchases

Apple processes payments for Pro. The app checks StoreKit entitlements on your device; the developer does not operate a purchase-validation server or use a subscription analytics service. The app does not send your purchase history or payment details to the developer. Apple’s own purchase processing is covered by Apple’s privacy policy.

This website and support

This website uses no analytics scripts, advertising, cookies, or browser storage. Cloudflare hosts it and may process IP addresses and normal request information to deliver and protect the site under Cloudflare’s privacy policy.

If you contact support, we receive the information you choose to send and use it to respond. Do not include passwords, access keys, private setup codes, or personal photos. Relevant correspondence is retained only as needed to resolve your request.

Changes and contact

Updates to this policy are published here with a new date. Privacy questions and support requests can be sent through the contact below.