Privacy Policy

Who operates LogicPhoto

LogicPhoto is operated by Logicmate Inc., an Alberta corporation in Canada. For privacy questions, requests to access or correct account information, account-deletion help, or product support, email info@logicm8.com.

This policy covers the LogicPhoto mobile app, LogicPhoto account and pairing services, and the LogicPhoto website. It does not replace the separate privacy terms of Apple Photos, your Photo PC, or an Immich server you choose to connect.

Photos and on-device analysis

When you grant Photos permission, LogicPhoto reads the library items allowed by your iPhone settings. Browsing, sorting, ratings, similarity grouping, face analysis, and cleanup suggestions for the local library are processed on the device. Local indexes, photo identifiers, ratings, face regions, and image-analysis signals are stored in the app's private device storage.

The local review flow does not send your entire Apple Photos library or its on-device face and similarity indexes to the LogicPhoto account service. A transfer, backup, or external library connection that you explicitly start is different and is described below.

Account and profile information

If you create a LogicPhoto account, the service processes your email address, profile name, email-verification status, account identifier, sign-in provider, and information needed to maintain your session. Session records can include an IP address and an app or browser description. Email and password sign-in uses the account authentication service; LogicPhoto does not receive your Apple or Google password.

The current app does not ask for, upload, or display profile photos. When you sign in with Apple or Google, LogicPhoto discards the profile-photo field returned by the provider. Earlier test versions may have stored an optional account photo; those legacy images are removed when the account is deleted. Email info@logicm8.com to request earlier removal.

Apple or Google receives information needed to authenticate you when you choose that sign-in method. LogicPhoto receives the provider account identifier and identity fields needed for sign-in, such as a name or email when provided; profile-photo data is discarded.

Connecting a Photo PC

To support account-assisted pairing, LogicPhoto processes device identifiers, device type and platform, display name, capabilities, last-seen time, virtual network addresses, and network candidates. Connection discovery can send your public IP address to Cloudflare or Google STUN services. Those services can observe the network address that contacts them.

A new connection uses a temporary authorization request that expires after 10 minutes. Direct signaling credentials expire after 2 minutes, and a desktop sign-in bridge expires after 5 minutes. Device removal closes associated signaling sockets when available; if a close is pending, those short-lived credentials still expire within 2 minutes. Expiry alone does not remove a registered device or a Photo sync grant.

Registered device records remain associated with the account until you remove a device in Account Center or delete the account. Removing a device prevents new account-assisted connections and clears its pending connection requests. A signed-in Photo PC revokes the matching account-assisted Photo sync token on its next account check; an offline PC applies the removal when it reconnects. Independent QR-only and pre-provenance pairings are not inferred or remotely revoked, and bytes already in flight may finish. Account deletion removes account-linked device and pairing rows, but never Photo files already stored on a PC or in Apple Photos.

Backup and Send to Computer

Backup and Send to Computer are separate actions. When you choose either action, the selected photo or video and the metadata needed for that action travel directly from your iPhone to the paired Photo PC. The LogicPhoto Worker coordinates account approval and connection signaling; it does not relay photo or video bytes.

The Photo PC stores received files in its configured library or temporary inbox. Account deletion does not delete files already stored on your PC, in Apple Photos, or on another destination. You control those copies on the receiving device.

Optional Immich connection

If you configure an Immich-compatible server, the server URL and API key are kept in iOS secure storage. Library searches, album requests, thumbnails, original reads, uploads, and deletion or restore actions are sent directly to the server address you configured. LogicPhoto does not receive that API key or route those media requests through its account Worker. The server operator's privacy practices apply to data stored there.

Email and service providers

LogicPhoto uses Logicmate's CFsend service to deliver account verification, password recovery, and account-deletion emails. The mail-delivery provider receives the recipient address and message needed to send each email. For non-test messages, LogicPhoto stores delivery status and provider metadata, not the recipient, subject, message body, or action link. Delivery records are scheduled for deletion 30 days after creation. Older records created before this practice may still contain message fields until the scheduled cleanup removes them.

LogicPhoto uses Cloudflare services for the account API and temporary signaling. Apple and Google provide optional sign-in. Cloudflare and Google STUN services may receive your public network address during account-assisted connection discovery. The current app does not include an advertising or third-party analytics SDK.

Public website analytics

The public LogicPhoto website and Docs load Logicmate's Pulse Analytics script to measure page visits and site performance. In its current privacy-safe configuration, Pulse respects browser Global Privacy Control and Do Not Track signals. When analytics is enabled, it sends the page path, title and referrer; browser category, time zone, viewport and screen size, and connection type; session and anonymous identifiers; and sampled interaction and heatmap events to pulse.logicm8.com. Heatmap collection is currently sampled on 20% of visits. Session identifiers use session storage, and an opt-out choice is stored locally in the browser. Pulse receives standard network request information, such as an IP address, when delivering analytics. This website script does not run in the iPhone app.

Optional subscriptions

If you choose an Apple in-app subscription, Apple processes payment and billing. LogicPhoto receives the App Store product and transaction identifiers, subscription status, and renewal or expiry information needed to verify access, restore purchases, and respond to refunds or revocations. LogicPhoto does not receive your payment card details.

The separate three-day full-access evaluation requires no payment method and does not start an automatically renewing subscription. Its start date is stored on this iPhone, without an account login. It is not transferred to another device. Apple subscription transactions are verified with LogicPhoto's account service when purchases are enabled.

Retention

Account and device-directory information is kept while the account is active. A session is configured to expire within 30 days and to refresh during use. Legacy profile photos uploaded by an earlier pre-release version are removed when the account is deleted; contact info@logicm8.com to request earlier removal. Temporary pairing requests, signal credentials, and desktop sign-in bridges have the expiry periods described above.

Expired one-time connection requests, verification records, desktop sign-in bridges, old rate-limit records, and email delivery records are removed according to the service's retention schedule. A record may remain after its validity period until cleanup runs. This cleanup does not delete registered devices or established pairings. Infrastructure logs held by Cloudflare and other service providers are governed by those providers' retention practices.

Your choices and account deletion

You can manage your profile and sign-in methods in Account Center, control Photos access in iOS Settings, disconnect the phone from a PC, and remove an Immich API key from its settings. You can initiate account deletion from Account Center. Deletion requires confirmation through an email link that expires after 24 hours.

After confirmed deletion, LogicPhoto removes the account and linked authentication records, sessions, any legacy account-photo object, and account-linked device and pairing rows. If Apple sign-in is linked, its authorization token is revoked as part of deletion. If Apple revocation cannot be completed, account deletion is stopped and the service reports the failure. Account deletion does not delete files from Apple Photos, a Photo PC, or an Immich server.

Your privacy rights depend on where you live. To ask a question or make a privacy request, email info@logicm8.com. You may also contact the privacy regulator with authority in your location.

Security and policy changes

LogicPhoto uses authenticated account requests, encrypted network connections, and device secure storage for local credentials. No online service can guarantee absolute security. We may update this policy if data practices change and will post the revised effective date here.