PixMe is a backup service for your photos and videos. This policy explains what we collect, why, who helps us run the service, and the choices you have. The short version: we store your files so you can get them back, we don’t show ads, we don’t sell your data, and we don’t use analytics or tracking tools.
01Who we are
PixMe is developed and run by Chitra Kumar (legal name: KUMAR CHITRA), an individual developer based in Chennai, Tamil Nadu, India (“PixMe”, “we”, “us”). PixMe is not a company; Chitra Kumar is personally responsible for how your personal data is handled in the PixMe apps, the PixMe web app and this website.
Questions about this policy go to contact@pixme.cloud.
02What we collect
Account details
- You sign in with your Google account. Google tells us your email address, your name and an ID for your Google account, which we store so the same Google account always opens your PixMe account.
- We never see or store your Google password, and PixMe has no password of its own.
Your photos and videos
- The original files you choose to back up, uploaded unchanged.
- File details we need to organise and de-duplicate them: file name, type, size, width and height, video length, creation and modification dates, and a checksum of the file.
- Small preview images (thumbnails) that we generate so your library loads quickly.
- Albums, favourites, Trash status and share links that you create.
- Search words, if you use the iPhone or Android app. To let you search your library by what a photo shows, the app looks at each photo on your phone, using Apple’s on-device image recognition on iPhone and Google’s ML Kit (which runs inside the app) on Android, and finds words for what it shows, such as “beach” or “cake”, plus any text it can read in the picture. Only those words are sent to us and stored with the photo in your account, so you can search for them on all your devices. The analysis happens on your phone. It does not identify who is in a photo, and the words are erased when you delete your account.
Photos often carry embedded metadata (EXIF), which can include the location where a photo was taken. That metadata stays inside the file exactly as you uploaded it. We don’t read it, index it or use it.
Device details
- A random device identifier created by the app on first launch, used to prevent duplicate uploads. It is not an advertising identifier.
- Device model, operating system version and PixMe app version.
Subscription details
- Your plan, its status and renewal dates, and the transaction references we receive from the payment provider.
- Card and bank details are handled by Razorpay and never reach our servers.
Technical logs
- When your device talks to our servers we record the IP address, time and request, to keep the service secure (for example, to limit repeated sign-in attempts) and to fix problems. Logs are rotated automatically and kept for a limited period.
03What we don’t do
- We don’t show advertising and don’t include advertising or analytics SDKs in our apps.
- We don’t sell or rent your personal data.
- We don’t analyse your photos on our servers to recognise faces, objects or content, and we don’t use your photos or their search words to train AI models. The search words described above are found on your own phone.
- We don’t track you across other apps or websites. This website sets no tracking cookies.
04How we use your data
- To provide the service: store your files, show them on your devices, let you share and download them, and free up space on your phone.
- To run your account: sign-in and security.
- To manage subscriptions and enforce storage limits.
- To send service emails you need, such as a notice that your data export is ready or that your plan is ending. We don’t send marketing email.
- To send push notifications you allowed on your phone, such as “Your export is ready”. We keep your device’s push token only while you are signed in on it; turn notifications off in your phone’s settings at any time.
- To keep PixMe secure, prevent abuse and meet legal obligations.
We process your data because it is needed to provide the service you signed up for, to meet legal obligations, and, for security and abuse prevention, for our legitimate interest in keeping PixMe safe. Where the law requires your consent, we ask for it, and you can withdraw it at any time.
05Who helps us run PixMe
We use a small number of providers who process data only on our instructions:
| Provider | What they do |
|---|---|
| Cloudflare | Stores your photo and video files in a private bucket, and serves the PixMe web app and this website |
| Neon | Hosts our database (account, file details, albums, subscriptions) |
| Resend | Delivers service emails such as export-ready and plan notices |
| Runs the PixMe API and keeps its request logs (Google Cloud, Singapore region), confirms who you are when you sign in with Google, and delivers push notifications to Android phones (Firebase Cloud Messaging) | |
| Apple | Delivers push notifications to iPhones (Apple Push Notification service) |
| Razorpay | Processes subscription payments (made in the web app) |
These providers may process data in countries other than yours. When they do, we rely on the safeguards the law requires.
We may also disclose data if the law requires it or to protect people’s safety. If PixMe is ever handed over to another person or company, your data would move with it only under this policy, and we would tell you before that happens.
06Share links
When you create a share link for a photo, video or album, anyone who has the link can view those items (and download them, if you allow it) without a PixMe account. You can set links to expire and revoke them at any time from the app. Only share links with people you trust.
07How we protect your data
- Your files are kept in private storage, organised under your own account. Every request is checked against the signed-in account.
- Uploads and downloads use signed links that expire within minutes. Our apps never hold storage keys.
- All traffic is encrypted in transit (HTTPS).
- Sessions use short-lived access tokens and refresh tokens that rotate on every use. On iPhone they are kept in the iOS Keychain.
08How long we keep data
- Your files and their details stay until you delete them. Deleted items go to Trash and are permanently deleted after 30 days, or sooner if you empty Trash.
- If you delete your account, we delete your files from storage and your records from our database straight away. Copies in our providers’ short-term backups expire on their normal schedule.
- Sign-in sessions expire after 30 days of inactivity and end when you sign out.
- We keep subscription and payment records for as long as tax and accounting laws require.
09Your choices and rights
- Access and download: view and download your originals at any time in the app or at the web app.
- Correct: update your name in Settings. Your email address comes from your Google account.
- Delete: delete individual items, or delete your whole account in the apps or the web app, or ask us to: see how to delete your account.
- Photos access: choose full or limited Photos access, or turn it off, in iPhone Settings.
Depending on where you live, you may have further rights, such as to object to or restrict processing, to data portability, to nominate someone to act for you, or to complain to your data-protection authority. To exercise any right, email contact@pixme.cloud. We may need to confirm your identity first.
10Complaints and Grievance Officer
If you have a complaint about how your data is handled, contact Chitra Kumar, who acts as Grievance Officer for PixMe, at contact@pixme.cloud. Complaints are acknowledged promptly and resolved within the time the law requires.
11Children
PixMe is not directed at children. If you are under 18, use PixMe only with the consent and supervision of a parent or guardian. If you believe a child has given us personal data without that consent, contact us and we will delete it.
12Changes to this policy
If we change this policy we will update the date at the top of this page. If a change is significant, we will also tell you in the app or by email before it takes effect.