Privacy

Last updated: August 2, 2026

Bestkept looks at every photograph you own. That is exactly why it does the looking on your iPhone and nowhere else.

Every photo is read and judged on this device. Nothing is uploaded and there is no account. Only two requests ever leave your phone: one turns a coordinate into a place name, the other reports a crash. Neither carries an image, an album name, or a screenshot.

What never leaves

Your photographs, their thumbnails, their filenames, your album names, and every measurement the app makes about them — sharpness, exposure, faces, duplicates, dates. All of it is computed on-device and stored on-device. There is no server holding a copy, because there is no server.

The first request: place names

When you sort your library by place, the coordinates already stored in a photo's metadata are sent to Apple's geocoding service to get a city name back. No image is attached. If you never open the place view, this request never happens.

The second request: crash reports

Released versions of the app send crash reports through Sentry, hosted in the European Union. A report contains a stack trace and a device model. It is configured well below the defaults for this app in particular:

No screenshots. A screenshot of Bestkept is a screenshot of your photo library.
No view hierarchy, which would carry the labels around every thumbnail.
No breadcrumbs, which would record which months and places you opened.
No performance traces, and no IP address or device name.

There is no account to attach a report to, so none is attached.

No analytics

Bestkept has no analytics, no tracking SDK, no advertising identifier, and no third-party profiling of any kind. Nobody is counting your taps.

Purchases

Subscriptions are handled by Apple and by RevenueCat, which records an anonymous identifier and whether that identifier has an active subscription. It never receives your name, your email, your card, or anything about your photographs. Apple handles the payment; we never see it.

Photo library permission

Bestkept asks for access to your photo library because it cannot do its job without it. The permission is requested after the app has explained what it is for, and iOS asks you again before any photo is deleted. You can withdraw access at any time in iOS Settings.

Your rights

There is no account and no personal data held on any server, so there is nothing to export or erase on request. Deleting the app removes everything Bestkept has ever stored about your library.

Children

Bestkept is not directed at children under 13 and collects no data from anyone.

Changes

If this policy changes, the date at the top changes with it, and any change that affects what leaves your phone will be announced in the app before it takes effect.

Contact

Questions? Email support@bestkept.app.