Privacy & security
What we store, and why
VacayTidy has to store your photos to organize them, so we will not claim zero retention. Originals are uploaded to private storage, plus a downscaled thumbnail used for grids and comparisons. Metadata we read from the file (capture time, GPS, camera, orientation), hashes and quality signals are stored in your account's database rows.
Access
Every table and every storage folder is scoped to your account with row-level security rules enforced by the database, not by the interface. Images are served through short-lived signed links. Albums are private by default; nothing is published unless you explicitly share it.
Training
We do not train models on your photos. The opt-in flag on your account is off by default and there is no pipeline that reads your images for training.
Deletion
Removing a photo during review is a decision, not a deletion. Files are only erased after a final confirmation screen that shows the file count and storage impact. You can delete an entire trip (photos, derivatives and metadata), or delete your whole account from Settings, which erases every file, all analysis, your profile and your login record.
Processing providers
Here is exactly what runs on your photos today, and what is still a placeholder interface. Everything currently marked real runs locally in your browser — full-size photos are never sent to a general-purpose AI model.