Last updated: 25 August 2026
This Privacy Policy explains how Bomera (“we”, “us”, or “our”) collects, uses, shares, and protects information when you use the PhotoGps mobile application (the “App”). PhotoGps helps you estimate where a photograph or video frame may have been taken by reading embedded metadata and, when that metadata is missing, by analysing a processed preview of the image.
By downloading, installing, or using the App, you acknowledge this Policy. If you do not agree, do not use the App.
1. Who we are
The App is provided by Bomera Software.
For privacy requests, use the support email: bomerasoftwareinfo@gmail.com
2. What the App does with your photos and videos
You choose what to analyse. You can:
- Pick a photo with the system photo picker. We do not request access to your entire photo library.
- Take a photo with the camera.
- Share a photo, video, or media file from another app (for example Photos, Instagram, or TikTok).
- Choose a still frame from a video you provided.
On your device, the App may:
- Read EXIF and similar metadata, including GPS coordinates, capture time, and camera make or model if they are present in the file.
- Request the ACCESS_MEDIA_LOCATION permission so Android can return original GPS that the system otherwise redacts from gallery copies.
- Run on-device machine learning (object detection, image labels, text recognition, face detection, and person segmentation) to understand the scene and to mask people before any cloud search.
- Store a local scan history with a small thumbnail, place name, address, and coordinates for traces you run, until you delete an entry or uninstall the App.
- Display maps, Street View, and place names for a location you asked us to resolve.
If the file contains usable GPS metadata, location is derived on the device from that metadata. We do not need to send the full original file to our servers for that path.
If the file has no usable GPS metadata, Premium visual locate may send a downscaled JPEG preview to third-party location and vision services so they can suggest a place. Before that upload, the App attempts to mask people (including faces) on the device. Masking is intended to reduce the chance that identifiable people are sent off-device. It is not a guarantee that no person or other sensitive content remains visible (for example reflections, name badges, documents, or an incomplete mask). Indoor rooms and private homes are not a reliable use of the product; the App is designed for outdoor streets, landmarks, and files that still have GPS.
We do not operate a photo-sharing social network. We do not sell your photos. We do not use your photos to train our own public AI models. Third-party providers that receive a preview for visual locate process that content according to their own terms and privacy policies, which may include limited retention for security, abuse prevention, and service operation.
The original file stays on your device unless you choose to share a result yourself (for example a screenshot). Temporary copies used for camera capture or analysis are held in app cache or memory and are discarded in the normal course of use.
3. Information we collect
3.1 Information you provide
You do not need to create a PhotoGps account. You may contact us by email; if you do, we will receive the address and content of that message.
3.2 Photos, videos, and derived location
As described above: metadata extracted on-device; object labels, text, and people masks created on-device; and, for Premium visual locate without GPS, a people-masked, reduced-size image plus limited scene context (for example detected object labels or on-image text) sent to cloud vision and geolocation providers. Map, Places, and geocoding requests may include coordinates or place text so that an address, map, or Street View can be shown.
3.3 Scan history stored on the device
The App stores recent traces locally (place name, address, coordinates when a pin is trusted, and a thumbnail). You can delete individual history items in the App. Uninstalling the App removes this local data from that device. History is not uploaded to Bomera servers.
3.4 Purchase and subscription data
Paid features are sold through Google Play. Google processes payment. We use RevenueCat to confirm entitlement (whether Premium is active) and to restore purchases. We receive purchase status, product identifiers, and an anonymous or vendor-assigned customer identifier. We do not receive your full payment card number.
3.5 Device and usage data
The App uses Firebase Analytics, Firebase Crashlytics, and Firebase Remote Config. These services may collect device identifiers (including the Google advertising ID where permitted), app version, language, crash logs, performance data, and events such as opening a paywall or completing a purchase. Remote Config is used to adjust models, thresholds, and similar operational settings without publishing a new app version. The App may also use Google Play’s in-app review prompt.
3.6 Network
The App needs internet access for maps, Street View, visual locate, subscriptions, analytics, crash reporting, and configuration. Your IP address is visible to the servers you contact, as is normal for any internet request.
3.7 Local preferences
The App stores a small amount of data on the device (for example whether a rating prompt or an offer was shown). Android backup settings on your device may copy app data according to your system settings.
4. How we use information
We use the information above to:
- Provide photo tracing, maps, history, and related features you request.
- Enforce Premium access and restore purchases.
- Operate, secure, debug, and improve the App.
- Measure funnel and product usage in aggregate.
- Comply with law and protect our rights.
We do not use your photo library to build advertising profiles of the people appearing in your pictures.
5. Legal bases (EEA, UK, and similar regions)
Where data-protection law requires a legal basis, we rely on:
- Performance of a contract: providing the App and paid features you request.
- Legitimate interests: security, crash diagnosis, product improvement, and preventing abuse, balanced against your rights.
- Consent: where required for advertising identifiers or optional analytics, according to platform and local rules.
- Legal obligation: when we must retain or disclose information.
6. Sharing of information
We share information with:
- Google LLC and affiliated services: Maps, Places, Geocoding, Street View, Cloud Vision, generative models used for visual locate (including Gemini), Play billing, Firebase Analytics, Crashlytics, Remote Config, and on-device ML Kit models.
- RevenueCat, Inc.: subscription status and restore.
- OpenStreetMap Nominatim or similar geocoding endpoints, when used to turn coordinates or place text into an address.
- Professional advisers and authorities when required by law or to defend legal claims.
- A successor if we sell or reorganise the business, subject to this Policy or a successor policy that is no less protective in material respects.
We do not sell your personal information for money. Some analytics and advertising identifiers may be treated as “sharing” or “sale” under certain U.S. state laws when used for cross-context advertising. PhotoGps is not designed as an ad-supported social feed; any advertising identifier is used mainly for measurement and fraud-related platform requirements. You can reset or limit the advertising ID in Android settings.
7. International transfers
Our providers may process data in the United States and other countries. Where required, they use standard contractual clauses or equivalent safeguards.
8. Retention
On-device analysis data for the current session is kept only while you use that trace, except for local history you can delete. Crash logs and analytics are retained by those providers for their standard periods. Purchase records are kept as long as needed to provide the subscription and meet tax and accounting rules. Support emails are kept as long as needed to resolve your request.
We do not run a user-photo archive on Bomera servers. Cloud providers that receive a visual-locate preview may retain that preview for a limited time under their policies.
9. Security
We use HTTPS for network calls and process people-masking and EXIF reading on the device where described. No method of transmission or storage is perfectly secure. Do not use the App to upload images you are not willing to send, even in masked form, to the providers listed in this Policy.
10. Children
The App is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will delete it where we control it. Visual locate and maps are not appropriate tools for monitoring minors.
11. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or port personal information, to object to certain processing, and to withdraw consent. You may also lodge a complaint with a supervisory authority.
Because we do not require an account, much of the photo data never leaves your device except during a visual-locate request you start. To exercise rights over analytics or purchase records, contact us with enough detail to locate the relevant records (for example the Google Play order number). You can also:
- Delete history items in the App.
- Delete the App, which removes local App data from that device.
- Reset advertising identifiers in system settings.
- Manage subscriptions in Google Play.
- Use platform privacy controls for Google and other providers.
California and similar U.S. state residents may have additional rights regarding sale or sharing of personal information and sensitive data. We do not use sensitive categories from your photos for advertising. To make a request, use the contact method in Section 1. We will not discriminate against you for exercising privacy rights.
12. Third-party services and links
Maps, Street View, Play, Firebase, RevenueCat, Cloud Vision, generative AI, OpenStreetMap, and similar APIs are operated by third parties. Their terms and privacy policies apply to their processing. The App may open web pages (for example this Policy). Those sites are not controlled by us.
13. Changes
We may update this Policy. The “Last updated” date will change. Continued use after an update means you accept the revised Policy, except where law requires additional notice or consent.
14. Contact
Bomera: bomerasoftwareinfo@gmail.com