This policy applies to the Keepworthy app for iPhone and Mac, and to the keepworthy.photos website, made by Dirkes Medical, PLLC ("Keepworthy," "we," or "us").
Keepworthy is built so that this policy can be short and still be complete:
Keepworthy analyzes your library on your device. It has no app backend and does not automatically send us your library analysis or usage history. It includes no third-party analytics, advertising, or tracking SDKs. You can choose to send us diagnostics for support.
What Keepworthy does on your device
Keepworthy analyzes your photo and video library on your iPhone or Mac using Apple's on-device frameworks. This includes finding similar photos and videos, scoring photo quality, detecting duplicates, suggesting albums, and estimating video-compression opportunities. Keepworthy stores settings, derived analysis, cached place names, and activity records locally so the app can show results and avoid repeating work. Keepworthy does not automatically upload that content or analysis to us.
Part of judging a photo means looking at faces. Keepworthy uses Apple's on-device Vision framework to find faces in a shot and to read whether eyes are open, then keeps a small anonymous record for that one moment in your library — measurements tied to positions within a single burst or group of similar shots. Keepworthy does not build a face template, does not identify or name anyone, does not match a face across your library, and does not use faces to recognize you. Like the rest of the analysis, none of it leaves your device.
Keepworthy has no user accounts and no sign-in. We do not use an advertising identifier or assign you a Keepworthy account identifier.
The only network transfers Keepworthy initiates
Keepworthy initiates network transfers involving your photo library, photo locations, analysis, or diagnostics only through the paths below. Operating-system backups are described separately further down:
- Fetching your own photos and videos from your own iCloud account. If you include iCloud media in a scan using Keepworthy's visible media-source setting, Keepworthy may download your iCloud-stored photos and videos through Apple's PhotoKit. Device-only is the default. This is a transfer between your device and your iCloud account through Apple's infrastructure, not an upload to Keepworthy.
- Naming the place a photo was taken. Keepworthy's "Look up photo and video locations with Apple Maps" setting is on by default and can be turned off at any time. While it is on, Keepworthy may send a rounded, roughly kilometer-scale coordinate — the one your camera saved in the photo or video itself — to Apple's reverse-geocoding service to obtain a place name for Smart Album suggestions, asset metadata, and Best Shot Review. Apple receives the coordinate; Keepworthy does not send the photo, video, thumbnail, asset identifier, or analysis result. Results are cached locally by approximate area to reduce repeat requests. Keepworthy does not use location services to determine where you are. The app does not request location permission and never reads your device's current position; every coordinate it looks up came from an item already in your library.
- Using Apple maps for photo locations. While that same setting is on, a Smart Album suggestion may show a small, noninteractive Apple MapKit inset. If you tap a mapped location in photo or video details, Keepworthy hands that asset's exact saved coordinate to Apple Maps so you can see where it was captured. Apple receives the coordinate and, for map previews, the visible region. Keepworthy does not send photo or video content, thumbnails, asset identifiers, or analysis results with either request.
- Diagnostics you explicitly choose to share. Keepworthy can create diagnostic, performance, or activity files on your device. Depending on which one you ask for, a diagnostic file can contain photo previews from the group you were looking at, Photos identifiers, capture metadata including the location saved with a shot, your keep-and-delete decisions, and scoring details. Keepworthy tells you what a file will contain before it builds one. A file leaves your device only if you invoke a share action and choose a destination in the system share sheet. Nothing is sent automatically or in the background.
Outside these paths, the app sends nothing about your photos, videos, photo locations, analysis, or app usage to any network service. All analysis of your library happens on your device.
Notifications
Keepworthy can send you notifications: that a scan finished, that a recovery window is about to close, a daily reminder about photos taken on this day in earlier years, an occasional reminder of cleanup left to do, and — if you ever hold a subscription plan — a reminder before it renews. Every one of them is composed and scheduled on your device from your own library and activity. There is no push server and no remote notification: a notification never sends anything anywhere. You choose whether notifications are allowed at all in system settings, and which kinds you receive in Keepworthy's settings.
Information you choose to send us
If you email contact@keepworthy.photos, or choose to send us a diagnostic file, we receive the information you include, such as your email address, message, and attachments. A diagnostic file you attach may contain photo previews and location metadata as described above, and we receive whatever the file contains. We use it only to respond, provide support, investigate the issue you reported, protect Keepworthy and its users, or comply with law. We do not add support contacts to a marketing list.
Our email provider processes and stores these messages to operate the mailbox. We retain correspondence only as long as reasonably needed for those purposes or legal obligations. You may ask us to delete a support conversation by emailing contact@keepworthy.photos; we will honor the request unless we need to keep it for a legal or security reason.
What we don't do
- We don't run analytics SDKs, advertising SDKs, or third-party tracking code in Keepworthy.
- We don't sell or rent personal information.
- We don't use your photos, videos, photo locations, analysis, or app usage to target ads. Keepworthy shows no ads.
- We don't automatically receive your diagnostic files or usage history.
Purchases
Keepworthy Pro is offered through Apple's In-App Purchase system as a one-time purchase. Keepworthy is configured as a Universal Purchase for iPhone and Mac, and Family Sharing is enabled for the purchase subject to Apple's account, storefront, and family-group rules. Apple processes the transaction and payment details; Keepworthy does not receive or store your card number or billing address. Apple provides the app with entitlement information needed to unlock Pro. Apple's privacy policy governs Apple's processing: apple.com/legal/privacy.
Keepworthy does not currently offer an annual subscription. Apple administers the purchase and refund eligibility. You can request a refund at reportaproblem.apple.com.
What Keepworthy changes in your library
When you approve deletion through Keepworthy, Photos asks for system confirmation. Deleted items move to Photos' Recently Deleted and are generally recoverable there for up to 30 days unless you permanently delete them sooner. If you use iCloud Photos, Apple's own syncing behavior may apply the deletion across your devices. Keepworthy does not control Photos' retention or sync.
Keepworthy also writes to your library when you ask it to: creating an album from a Smart Album suggestion, merging albums you selected, creating a recovery album before an exact-duplicate cleanup, saving a smaller copy of a video, and saving a still frame taken from a video. A saved copy is a new item in your Photos library, and Keepworthy gives it the capture date and camera metadata of the item it came from so it files itself next to the original instead of at the top of your library. Keepworthy does not modify an existing photo or video in place; when it produces something new, it saves it alongside the original and leaves the original for you to decide about.
Local data, retention, and backups
Keepworthy's settings, analysis cache, place-name cache, purchase-entitlement cache, and activity records remain on your device so the app can work across launches. Performance history can be cleared in Keepworthy's settings. Other local app data remains until the operating system removes the app's data or you use an applicable in-app reset control. Removing Keepworthy's local data does not delete items from your Photos library.
Keepworthy marks its local analysis store, including decisions, Cleanup History, Lifetime Impact, and mutation-recovery records, for exclusion from system backups. Backup and restore behavior is controlled by Apple and the backup tools you use; exclusion is a request, not a guarantee, and does not remove copies from existing backups. After restoring, reinstalling, or moving devices, you may need to scan again, and earlier decisions, Cleanup History, and Lifetime Impact may not return. Settings remain eligible for backup according to your backup settings. Apple- or user-controlled backups are not operated by or delivered to Keepworthy.
Data security
Keepworthy's analysis lives in the app's own storage on your device, protected by the operating system's app sandbox and by your device passcode and disk encryption. Because there is no Keepworthy account and no Keepworthy server, there is no central store of user data for anyone to breach. Support email sits in a mailbox at our email provider behind access controls and two-factor authentication, and is kept only as long as described above. No method of storage or transmission is perfectly secure, which is why we hold as little as possible in the first place.
The Keepworthy website
keepworthy.photos serves this policy, the Terms of Use, and a support page. The site sets no cookies, runs no analytics, and carries no ads or trackers. Like any website it is delivered by a hosting provider that keeps standard request logs — such as IP address, time, and browser type — to serve and protect the site. The site has no accounts and no forms; the only way to send us anything is the email address below.
Children's privacy
Keepworthy is a general-audience utility and is not directed to children. The app has no accounts and collects nothing from your photo library. Anyone can still choose to email us or attach a diagnostic file, so we do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact contact@keepworthy.photos and we will review and delete it.
Your choices and rights
You control Photos access in system settings, whether Keepworthy may include iCloud media in scans, whether Keepworthy looks up the place a photo or video was taken, whether notifications are allowed and which kinds, whether to open Apple Maps, and whether to share a diagnostic file. Place lookup is on by default and is independent of the iCloud scan setting — turning either one off does not change the other. With place lookup off, Keepworthy shows only place names it has already cached on your device.
Depending on where you live, you may have rights over personal information we hold — to access it, correct it, delete it, receive a copy, or object to or restrict how we use it. Because Keepworthy has no accounts, no backend, and no analytics, what we may hold is normally limited to correspondence and attachments you sent us. Email contact@keepworthy.photos to make a request. We may need enough detail to locate the conversation and to confirm the request is yours. Making a request is free, and we will not treat you differently for making one. If you live in California or another US state with a privacy law, the same route applies; we do not sell or share personal information, including for cross-context behavioral advertising.
Where the GDPR or UK GDPR applies, Dirkes Medical, PLLC is the controller for that correspondence. We rely on your consent when you choose to write to us or send a diagnostic file, and on our legitimate interest in answering support requests, keeping Keepworthy working, and protecting it from abuse; where the law requires it, we rely on compliance with a legal obligation. We keep support correspondence only as long as reasonably needed for those purposes. Keepworthy makes no automated decision about you that has a legal or similarly significant effect — its suggestions about photos are only suggestions, and every decision is yours. If you believe we have mishandled your information you can complain to your local data-protection authority, and we would welcome the chance to put it right first.
International use
Keepworthy is available through Apple's App Store in multiple countries. Keepworthy does not transfer your photo or video content to us. Apple processes iCloud, geocoding, MapKit, and purchase transactions under Apple's terms and privacy practices. If you contact us, your message may be processed where we and our email provider operate, which is the United States and may be outside your country.
Languages
This policy is published in several languages so you can read it in the language your device uses. The English version is the original. If a translation and the English version differ, the English version governs, except where the law where you live requires the local-language version to control.
Changes to this policy
If this policy changes, we will update the date above. If a future app version materially changes what it sends or collects, we will update this policy and the App Store privacy disclosures before or when that version is released, and provide any additional notice required by law.
Contact
Privacy, support, and general questions: