Privacy Policy for onePhoto
Last updated: April 7, 2026
Overview
onePhoto is a photo viewer and organizer that connects to your Microsoft OneDrive account. We take your privacy seriously. This policy explains what data the app accesses, how it's used, and how it's protected.
Data We Access
Microsoft OneDrive Data
- Photos and videos: onePhoto reads your photos and videos stored in OneDrive to display them in the app. The app does not upload, modify, or delete any files in your OneDrive.
- Account information: Your name, email address, and profile photo are retrieved from Microsoft to display in the app's settings screen.
- Storage quota: Your OneDrive storage usage is retrieved to display in settings.
Device Data
- Network status: The app checks your internet connection type (Wi-Fi or mobile data) to respect your data usage preferences.
Data Storage
- Photo metadata (file names, dates, camera info) is cached locally on your device in an encrypted database to enable offline access and faster loading.
- Authentication tokens are stored securely using your device's encrypted keystore (Android Keychain / EncryptedSharedPreferences).
- App settings (theme, grid preferences) are stored locally on your device.
- Purchase and trial status are stored locally on your device.
Data We Do NOT Collect
- We do not collect, transmit, or store any personal data on external servers.
- We do not use analytics, tracking, or advertising SDKs.
- We do not share any data with third parties.
- We do not access photos stored on your device's local gallery. The READ_MEDIA_IMAGES permission is only used when you explicitly choose to save a photo from OneDrive to your device.
Third-Party Services
- Microsoft Graph API: Used to access your OneDrive photos with your authorization. Subject to Microsoft's Privacy Policy.
- Google Play Billing: Used to process your one-time purchase. Subject to Google's Privacy Policy.
Data Security
All data stored on your device is encrypted at rest. Authentication tokens are stored in platform-secure storage. Photo metadata is stored in an encrypted SQLite database. No data is transmitted to any server other than Microsoft's APIs (to access your OneDrive) and Google Play (to process purchases).
Your Rights
- You can sign out at any time, which clears your authentication tokens.
- You can clear the image cache from the app's settings.
- You can uninstall the app at any time, which removes all locally stored data.
- You can revoke the app's access to your Microsoft account at account.microsoft.com/privacy.
Children's Privacy
onePhoto is not directed at children under 13 and does not knowingly collect data from children.
Changes to This Policy
We may update this policy from time to time. Any changes will be reflected by the "Last updated" date at the top.
Contact
If you have questions about this privacy policy, please contact us at: hello@onephoto.com