Privacy policy

LAST UPDATED · NOVEMBER 8, 2026

Photo Migrate is built so that your photos and your data never leave your control.

What we collect

Photo Migrate has no servers of its own, no accounts and no advertising identifiers. We never see your photos or your files. The app collects a small amount of anonymous usage analytics (via Firebase) so we can understand which features are used and improve the app: things like which kind of source and destination a migration used and coarse, bucketed counts. Never filenames, photo content, album names, dates or anything that identifies you, and never for advertising. You can turn analytics off at any time in Settings, inside the app.

Your photos

Photo Migrate reads your photo library only after you grant permission, and only to copy the items you select to the destination you choose: a USB drive, NAS share, folder, Google Photos, Dropbox or OneDrive. Photos travel directly from your device to your destination. They are never uploaded to us or to any third party of ours.

Connected accounts

If you connect Google Photos, Dropbox or OneDrive, you sign in directly with that service using its own secure sign-in page. Photo Migrate stores the resulting access token in your device’s Keychain and uses it only to transfer the photos you select. You can disconnect any of these accounts at any time from Settings, and revoke access from your Google, Dropbox or Microsoft account settings.

Google user data

When you connect Google Photos, Photo Migrate asks for three permissions and uses each one for a single purpose:

Add to your Google Photos library (photoslibrary.appendonly): to upload the photos and videos you chose to migrate into Google Photos. The app can only add items; it cannot read, change or delete anything already in your library.
Google Photos Picker (photospicker.mediaitems.readonly): to let you pick, in Google's own picker, the items you want to migrate out of Google Photos. The app only receives the items you explicitly select.
Google Drive, app configuration data (drive.appdata): to read your account's storage quota so the Storage tab can show how much space is used and free. This is the narrowest Drive permission that exposes the quota. Photo Migrate does not create, read or modify any Drive files, not even in its own app folder.

Sharing and transfer. We do not share, transfer, sell or disclose Google user data to anyone. The only place your Google Photos data goes is the destination you chose for a migration (your device, a folder or drive you selected, or Dropbox or OneDrive if you connected them), and only for the items you selected. Google user data is never sent to our servers (we have none), to advertisers, to data brokers or to any other third party, and it is never used to train artificial intelligence or machine learning models. The anonymous analytics described above never include Google user data.

Protection. Access tokens are stored in your device's Keychain, encrypted by the operating system, and are never written to logs or problem reports. All communication with Google uses HTTPS (TLS). During a transfer each item is streamed through a temporary file on your device that is deleted as soon as the copy is verified. The app keeps no copy of your photos. Disconnecting in Settings deletes the token from your device immediately, and you can also revoke Photo Migrate's access at any time from your Google Account permissions page.

Retention. Photo Migrate retains Google user data only for the duration of the transfer. The only lasting record is a local list of identifiers of items already migrated, kept on your device to avoid duplicates, which you can clear by reinstalling the app.

Photo Migrate's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Microsoft OneDrive data

When you connect OneDrive, Photo Migrate asks Microsoft for two permissions:

Your OneDrive files (Files.ReadWrite): to list the folders you browse, download the photos and videos in the folder you choose to migrate, upload the items you migrate to OneDrive into a "Photo Migrate" folder, read your storage quota for the Storage tab, and, only if you ask after a verified copy, move the migrated files to your OneDrive recycle bin. Microsoft describes this permission as access to your OneDrive files, including files shared with you. Photo Migrate only opens the folders you browse and the folder you choose to migrate, with its subfolders, and does not offer items that others have shared with you.
Stay connected (offline_access): so you do not have to sign in again during a long migration. It gives the app no additional access.

Sharing and transfer. We do not share, transfer, sell or disclose your OneDrive data to anyone. It goes only to the destination you chose for a migration, and only for the items in the folder you selected. It is never sent to our servers (we have none), to advertisers, to data brokers or to any other third party, and it is never used to train artificial intelligence or machine learning models. The anonymous analytics described above never include your OneDrive data.

Protection and retention. Access tokens are stored in your device's Keychain, encrypted by the operating system, and are never written to logs or problem reports. All communication with Microsoft uses HTTPS (TLS). During a transfer each item is streamed through a temporary file on your device that is deleted as soon as the copy is verified, and the app keeps no copy of your photos. The only lasting record is a local list of identifiers of items already migrated, kept on your device to avoid duplicates, which you can clear by reinstalling the app. Disconnecting in Settings deletes the token from your device immediately, and you can also revoke Photo Migrate's access at any time at microsoft.com/consent.

Deletion

If you choose to delete migrated items from your library, Photo Migrate uses the system deletion flow: the operating system asks for your confirmation, and deleted items remain in your Recently Deleted album for 30 days, where you can restore them.

If you choose to delete migrated files from Dropbox or OneDrive after a verified copy, they go to that service's own deleted files: Dropbox keeps them recoverable for a limited time, depending on your plan, and OneDrive keeps them in its recycle bin for a limited time.

Purchases

The optional Unlimited upgrade is processed entirely by Apple through the App Store. We never see your payment details.

Problem reports

If you choose to send a problem report from the app, it opens an email on your device addressed to us. The report contains the app version, your device model and system version, and a small local log of errors the app encountered, which may include the names of files that failed to transfer. It never contains your photos, your account details or access tokens, and nothing is sent unless you send the email yourself.

Contact

Questions? Contact us at magfer.ltd@gmail.com.