Privacy at Ferrypix

The short version, in plain language.

What we promise

• Private to you. Your library is tied to your account. Every request is checked against your account, and storage access is scoped to your own files.
• Encrypted in transit and at rest. Connections use TLS 1.2 or newer. Files are encrypted in storage with server-side encryption (AES-256).
• No ads, no trackers, no third-party SDKs. This web app has no analytics or crash-reporting services. The only outside code it loads is Apple’s or Google’s sign-in script, and only when you choose that sign-in option.
• We never train AI on your photos.
• Smart features run on your device in our iPhone, Mac and Android apps.
• Export everything, anytime. Download any original, or export a whole selection to a folder.

What we don’t claim

Ferrypix is not end-to-end encrypted. Encryption at rest is handled by our storage provider on the server side, so our systems can process your files (for example, to serve thumbnails). We limit that access: there is no admin tool for viewing media, management actions are logged, and our logs never contain file names, locations, labels or sign-in tokens.

Deleting things

Nothing is deleted without your explicit approval. Deleted items stay in Trash for 30 days. “Delete forever” waits another 24 hours so you can change your mind. If a subscription lapses, we never delete your photos: after 90 days, originals move to archival storage and are restored when you resubscribe.

Deleting your account

You can delete your account in Settings. Everything is removed after a 30-day grace period, and you can cancel any time before then.