Privacy

Last updated: 2026-11-06

Sorting and text recognition happen on your iPhone, and no photos are uploaded. Only anonymous usage counts, crash reports and purchase records leave the phone. No account needed.

1. Summary

• Your photos and screenshots stay in your photo library on your iPhone. There is no Sortroll account and no Sortroll server holding them.
• Sorting and text recognition run on the device — photos are not uploaded and we keep no copy.
• Filing adds an item to an album in Apple Photos. It does not move the item, and the album lives in your Photos library, not ours.
• We collect anonymous crash reports and coarse usage counts so we can fix bugs and see what gets used.
• We do not sell data, run ad trackers, or send your data to brokers.

2. Data controller

Alessandro Nicoli
Zürcherstrasse 53b
8104 Weiningen, Switzerland
Email: info@sortroll.com

3. What we collect and why

Your photo library

Sortroll reads the photos you give it access to so you can sort them, and writes your choices back to Apple Photos as album membership, favorites, and items marked for deletion. All of this happens on your device through Apple's Photos framework. We receive no copy of your photos, your albums, or their contents. You can change what Sortroll can see in iPhone Settings at any time. Lawful basis: Contract (GDPR Art. 6(1)(b)).

Text recognition and the Smart preset

To suggest albums, Sortroll reads text in a screenshot using Apple's on-device text recognition, and on devices that support it an on-device model from Apple. This runs on your iPhone. The image and the recognized text are not uploaded and are not kept. Lawful basis: Contract.

Deletion

A delete swipe only marks an item. Nothing is deleted until you review the list and confirm, and confirmed items go to Recently Deleted in Apple Photos, where they stay for 30 days. We are not involved in that step and hold no record of it. Lawful basis: Contract.

Purchases

Sortroll Pro is sold through the App Store. We use RevenueCat to manage subscriptions and unlock your Pro entitlement across devices. The app sends RevenueCat an anonymous installation identifier (not your email or name) together with the store's purchase and entitlement status. We never send your payment details — your card is handled by Apple, and neither RevenueCat nor we ever see it. RevenueCat is based in the United States; transfers rely on the Standard Contractual Clauses in our data processing agreement with them. RevenueCat receives nothing about your photos. Lawful basis: Contract (GDPR Art. 6(1)(b)).

Crash reports

When the app crashes, the next launch sends an anonymous report to TelemetryDeck, an analytics provider based in Germany. The report is a fingerprint, not a dump: the crash's exception type and signal, plus the app version. Like every signal, it also carries what TelemetryDeck's SDK attaches by default — an anonymised per-installation identifier, your device type, system version and build number, whether the build came from the App Store or TestFlight, and a timestamp rounded to the hour. Your IP address is not stored. Full stack traces are never sent to us — they stay in Apple's own crash reporting, under your Apple settings. No photo, album name, or recognized text is attached. Lawful basis: Legitimate interest in fixing bugs (GDPR Art. 6(1)(f)). You can opt out by uninstalling the app.

Usage counts

At the end of a sorting session the app sends a single anonymous snapshot to TelemetryDeck, plus a handful of one-off events: finishing onboarding, confirming a deletion, seeing the paywall, and completing a purchase. They carry only coarse counts and fixed labels, never content: how many items you reviewed and which swipe actions you used, which of the built-in preset shapes was active, which category you sorted, and a rough size bracket for your library rather than an exact count. The same per-installation identifier and device metadata described under Crash reports travel with them. Photos, album names, your own preset names, recognized text and file names are never sent. Lawful basis: Legitimate interest in understanding which features are used (GDPR Art. 6(1)(f)). You can opt out by uninstalling the app.

Website analytics

Our marketing website (sortroll.com) uses Umami, a privacy-focused, cookieless analytics tool, to count page views and referrers in aggregate. Umami sets no cookies, does not collect data that identifies you personally, and does not track you across other websites. The Sortroll app itself contains no Umami. Lawful basis: Legitimate interest in understanding site traffic (GDPR Art. 6(1)(f)).

What we don't collect

• No advertising identifiers (IDFA / GAID).
• No advertising, attribution or profiling SDKs in the app (no Mixpanel, no Amplitude, no Google Analytics, no Facebook SDK). The only two that send anything are TelemetryDeck, for the anonymous counts above, and RevenueCat, for purchases.
• No precise location.
• No address book / contacts.
• No microphone access.
• No copies of your photos, and no image data beyond the moment it is shown to you for sorting.
• No account: we never ask for your email or a password.

4. Where the data is stored

Your photos and albums live in your photo library on your device, held by Apple under your Apple Account, and in iCloud Photos if you have that turned on. Crash reports and usage counts go to TelemetryDeck, which hosts in the EU: Frankfurt, Falkenstein and Nürnberg in Germany, and Amsterdam in the Netherlands. The marketing site and its analytics run on our own server in Germany. We operate no database of photos.

5. Sub-processors

TelemetryDeck's own published position is that the data it receives is anonymous and therefore falls outside the GDPR, so the agreement they offer is not an Art. 28 processing agreement. We list them here regardless, so you can see every service the app talks to.

6. How long we keep your data

Your photos and albums are kept until you change or delete them — we hold no copy to keep. Crash reports and usage events are held by TelemetryDeck under their own retention policy. They carry no name, email or account — only the anonymised per-installation identifier described above, which we cannot tie back to you. Website analytics are kept in aggregate only.

7. Your rights (GDPR / FADP)

• Access: request a copy of all data we hold about you. For most people the honest answer is anonymous crash reports and counts that cannot be tied back to you.
• Rectification: correct anything inaccurate.
• Erasure: remove an item from an album, or delete it, in Apple Photos. Delete the app and its own settings go with it; your photos and albums stay in your library because they were always yours.
• Portability: your photos and albums are already in Apple Photos, and are included in an encrypted device backup.
• Objection / withdrawal: opt out of crash reports and usage counts by uninstalling the app.
• Complaint: lodge a complaint with the Swiss FDPIC (Switzerland) or your national EU data protection authority.

To exercise any of these: info@sortroll.com.

8. Children

Sortroll is not directed at children under 13 and we do not knowingly collect their data.

9. Changes

We'll post material changes on this page and, where required, notify you in-app. Continued use after a change means you accept the updated policy.

10. Contact

Questions? info@sortroll.com