Your photos never leave your device

PixiPile is a local-first application. All photo viewing, sorting, rotating, and organizing happens entirely on your Mac. Your image files, thumbnails, metadata, filenames, and folder paths are never transmitted to us or to anyone else. There is no opt-in that changes this, and we do not operate any service that receives your photos.

Usage analytics are opt-in and off by default

PixiPile sends no usage analytics unless you turn on "Share anonymous usage statistics" in Settings, which is off by default. When you turn it on, the app sends only feature-usage events: a fixed event name (for example that a duplicate scan was run), the app version, and a random session identifier that is generated fresh each launch and never stored. It never includes your photos, filenames, paths, folder contents, or any count of your content. The receiving service does not see your IP address, and turning the setting off stops all sending immediately.

Find Similar Online uses your own key, per search

The optional Find Similar Online tool is off until you choose to use it. When you do, you provide your own image-search API key, and only the single photo you are searching is sent to that provider under your key, each time you run a search. PixiPile does not receive the photo or the results, and nothing routes through our servers.

Crash reports

PixiPile ships no third-party crash reporter. If you have enabled Apple's "Share with App Developers" setting, Apple's own pipeline may share anonymized, symbolicated crash reports with us. If you have that setting off, we receive nothing.

No account required

PixiPile does not require an account, email address, or sign-in to use. There is no registration step and no personal data to provide.

macOS App Sandbox

PixiPile runs inside the macOS App Sandbox. It can only access folders you explicitly grant via the system file picker. It cannot read your contacts, calendar, browser history, or other applications' data.

Local storage

The app stores your preferences (such as window layout, sort order, and folder bookmarks) in the standard macOS user defaults container for the app. This data stays on your Mac and is not synced or transmitted anywhere. You can reset it at any time from the Help menu.

Changes to this policy

If we add features that change how data is handled, we will update this policy before those features ship and note the changes here.

Contact

Questions about this policy: support@pixipile.com

Privacy Policy