Privacy Policy — albms™ by Varosso, LLC

🔒 The short version: albms™ collects almost no personal data. Your photos and videos never touch our servers. We do not sell your data. We do not show ads. Ever.

1. Who We Are

albms™ is operated by Varosso, LLC, a limited liability company organized under the laws of the State of California, United States.

Contact: All privacy inquiries are handled through our Privacy Request webform or by emailing info@varosso.com.

For EU/EEA residents: Varosso, LLC acts as the data controller for personal data processed in connection with albms™.

2. What We Collect

What we collect

OAuth tokens when you connect a cloud service (Google Drive, Dropbox, OneDrive) — stored securely on your device only, never on our servers
App preferences (default destination, notification settings) — stored locally on your device only
Support messages when you contact us — your email and message, retained for up to 2 years
Subscription status — confirmed via Apple or Google billing; we never receive payment details

What we never collect

Your photos or videos — they never touch our servers
Your location
Your contacts, calendar, or other device data
Your name, age, or demographic information
Any data for advertising or behavioral profiling

3. How Your Photos Are Handled

Your photos and videos travel directly from your device camera to your chosen destination — your phone or your cloud account. albms™ acts as a conduit only. We have no ability to view, access, or analyze your content at any time.

4. Legal Basis for Processing (GDPR)

For EU/EEA users, we process personal data under the following legal bases:

Performance of contract — operating the App and subscription (Art. 6(1)(b))
Consent — connecting cloud services (Art. 6(1)(a))
Legitimate interests — responding to support inquiries (Art. 6(1)(f))
Legal obligation — compliance with applicable law (Art. 6(1)(c))

5. Your Rights — California (CCPA)

Right to know what data we hold about you
Right to delete your personal information
Right to opt out of sale of data — we don't sell data, so nothing to opt out of
Right to non-discrimination for exercising your rights
Right to correct inaccurate information

Exercise your rights via our Privacy Request webform. We respond within 45 days.

6. Your Rights — EU/EEA (GDPR)

Right of access to your personal data
Right to erasure ("right to be forgotten")
Right to rectification of inaccurate data
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time
Right to lodge a complaint with your local supervisory authority

Exercise your rights via our Privacy Request webform. We respond within 30 days as required by GDPR Article 12.

7. International Data Transfers

Varosso, LLC is based in California, USA. When EU/EEA users connect to cloud services, data may be transferred to the USA or other countries. Cloud providers we integrate with (Google, Microsoft, Dropbox) maintain Standard Contractual Clauses and other GDPR-compliant transfer safeguards.

8. Security

OAuth tokens stored in iOS Keychain or Android Keystore — highest security available on each platform
HTTPS/TLS encryption for all network communications
In the event of a data breach affecting EU/EEA users, we will notify the relevant supervisory authority within 72 hours as required by GDPR Article 33

9. Children's Privacy

albms™ does not knowingly collect personal information from children under 13 (or under 16 for EU/EEA users). Contact us immediately via our privacy request webform if you believe a child has provided personal information.

10. Changes

Material changes will be communicated via push notification in the App and by updating this page. The effective date above reflects the most recent update.

11. Contact

For all privacy questions, requests, or complaints: