← About Photo Transfer

Privacy Policy

Applies to the Photo Transfer web app and website at phototopc.app.

Where photos and records are stored

Photos, videos, PDFs, albums, folder assignments, notes, tags, annotations, work records, and outputs are stored in the destination you choose. Supported computer browsers use an ordinary folder you select, containing original media and JSON organization files. Phones and browsers without direct folder access use browser storage on that device. The operator does not provide an online repository for your photos or records.

Protection and recovery

Files in an ordinary folder are not encrypted by the app. Manage their protection with your device lock and disk encryption. Browser storage encryption is optional and off by default. The app does not send the operator your encryption passphrase, recovery key, or backup passphrase. The operator cannot restore encrypted data if the necessary keys or stored data are lost.

Device transfer and connection signaling

When you initiate a transfer and approve the matching code on both devices, the selected media and records are sent directly between the devices with encryption. The signaling service at connect.phototopc.app, hosted on Cloudflare, receives encrypted connection information and short-lived room information to connect the devices. It does not receive photo or record contents, or the temporary key in the QR code. There is no fallback to a photo-relay server. Transfer fails if a direct connection is not possible. Copies received on another device are managed separately on that device.

Site delivery and connection information

The operator uses Cloudflare to serve application code and interface files from phototopc.app and to provide connection signaling. Loading the app, updates, and signaling use the network. To deliver, connect, and protect the service, Cloudflare may process IP addresses, requested files, connection times, and similar connection information. Application caching is separate from your stored photos and records. This website does not include advertising or behavioral analytics scripts.

Camera and imported files

Starting the camera requests browser camera permission. Recording video with audio also requires microphone permission. Imports read the files you select. Original files may contain metadata such as capture time and location, and this metadata remains in stored originals. Check the contents before sharing files that may contain location information.

External tools and AI

The app has no built-in AI and does not automatically send photos or records to an external AI service. If you let an external tool open your folder, that tool may read or modify files or send them to its own services. Check each tool’s settings and terms to decide what it may access or send. You import and review externally created notes and images through your own actions. External AI subscriptions, charges, and data handling are governed by that service’s terms.

Exports, backups, and deletion

You manage exported photos, encrypted backups, and copies transferred to other devices. If you choose a cloud-synced folder or use operating-system backups, those services operate outside the app’s control. Browser data can be deleted in Settings. Disconnecting a folder leaves its files in place. Trashed photos remain until permanently deleted; exported files and transferred copies require separate deletion. Browser data clearing, storage eviction, low storage, or device failure may also cause data loss. Keep a backup in a separate location.

Operator and contact

RYOTA UEMATSU
medixmatch2025@gmail.com

Do not send private photos or documents, passphrases, or recovery keys in inquiries. Your email provider’s policies apply to email messages.

Updated: September 21, 2026