Gallery Maker

Privacy Policy

Gallery Maker is designed to organize and curate personal photo libraries while minimizing the information sent off the device.

Effective September 24, 2026 · Version 1.1

At a glance

Gallery Maker does not require a user account.
Gallery Maker does not use advertising, tracking, analytics, or third-party crash-reporting SDKs.
After you separately allow cloud AI processing, Gallery Maker sends reduced image copies and limited task context through a QualiaSphere secure relay to OpenAI for AI-assisted photo analysis and organization.
Gallery Maker does not send OpenAI the original photo files, original filenames, Apple Photos identifiers, camera EXIF metadata, or raw GPS coordinates.
OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in.

1. Who we are

Gallery Maker is provided by QualiaSphere Inc., a Canadian corporation doing business in Québec as Technologies QualiaSphère Inc. (“QualiaSphere”, “we”, “us”).

Privacy Officer: President, QualiaSphere Inc.
Email: privacy@qualiasphere.com
Québec, Canada

2. Apple Photos access and on-device processing

Gallery Maker requests access to your Apple Photos library so it can analyze, organize, and curate photos. The app also uses Apple system frameworks such as Photos, Vision, and MapKit for app features. iOS controls Photos permission, and you can change Gallery Maker’s access at any time in iOS Settings.

3. Cloud AI processing

Gallery Maker uses OpenAI to analyze photo content and provide AI-assisted organization and curation. Before any photo content is sent for this purpose, Gallery Maker presents a separate disclosure and asks you to explicitly allow cloud AI processing.

When you use an AI-powered feature, Gallery Maker may transmit:

small JPEG copies of selected photos or contact-sheet images made from photo pixels;
instructions needed for the requested analysis;
keywords you enter to guide how photos are analyzed;
random per-image identifiers that are not original camera filenames or Apple Photos identifiers; and
limited contextual information needed for the feature, such as photo counts, a short place name, a month/year label, or locally generated descriptive text.

Information not sent to OpenAI

Gallery Maker does not send OpenAI the original photo files, original filenames, Apple Photos identifiers, camera EXIF metadata, raw GPS coordinates, or camera metadata. The JPEG copies sent for AI processing are newly created from image pixels and do not contain the source photo’s EXIF, GPS, or camera metadata.

Visible photo content can itself reveal information about people, places, text, activities, or other potentially sensitive details even when metadata has been removed.

4. QualiaSphere secure relay

Gallery Maker routes AI requests through a QualiaSphere-operated secure relay hosted by DreamHost. The relay authenticates the app request, applies security controls, and forwards the request to OpenAI. The relay is configured not to intentionally store photo thumbnails, prompts, or model responses after the request has been completed.

DreamHost’s standard HTTP access logs may record technical information such as IP address, timestamp, requested path, status code, referrer, and user agent. DreamHost states that these HTTP logs are retained by default for up to 7 days. Gallery Maker’s relay does not intentionally place photo content, prompts, relay credentials, or model responses into application logs.

5. Apple Maps and place names

Gallery Maker may use Apple MapKit or related Apple mapping/geocoding services to convert photo-location coordinates into a place name used by Gallery Maker. Those Apple services may receive the coordinates needed to perform that lookup. Gallery Maker does not send raw GPS coordinates to OpenAI; only a short place-name string may later be included in an AI request. Apple services are governed by Apple’s privacy practices.

6. How OpenAI handles API data

OpenAI processes content forwarded by the QualiaSphere relay to provide the requested AI result. OpenAI states that API inputs and outputs are not used to train or improve OpenAI models by default unless the API customer explicitly opts in to data sharing. QualiaSphere does not opt in to sharing Gallery Maker API inputs or outputs for model training.

OpenAI states that standard API abuse-monitoring logs may contain customer content and are retained for up to 30 days by default, unless a longer period is legally required. OpenAI offers approved customers additional retention controls, including Zero Data Retention, for eligible endpoints.

Gallery Maker uses OpenAI’s Chat Completions API. QualiaSphere configures requests with store: false so Chat Completion responses are not intentionally stored for later retrieval. This does not by itself eliminate OpenAI’s separate abuse-monitoring retention.

OpenAI also states that image inputs may be scanned for certain serious safety content; an image flagged by the relevant safety classifier may be retained for manual review in accordance with OpenAI’s policies.

7. Local storage

Gallery Maker may store information needed for its features locally on your iPhone, such as sorting results, tags, gallery information, settings, and your AI-processing preference. QualiaSphere does not receive information merely because it is stored locally by the app.

8. Analytics, advertising, tracking, and diagnostics

Gallery Maker contains no advertising SDK, analytics SDK, third-party tracking SDK, or third-party crash-reporting SDK. Gallery Maker does not track you across other companies’ apps or websites.

Apple may make TestFlight or App Store diagnostic information available to developers through Apple’s own services. Gallery Maker does not add a separate third-party crash-reporting service.

9. Retention and deletion

QualiaSphere relay: photo thumbnails, prompts, and model responses are transiently processed to complete the request and are not intentionally persisted by the relay.
DreamHost access logs: standard HTTP access logs may include technical request information such as IP address and are retained by DreamHost by default for up to 7 days.
OpenAI: standard API abuse-monitoring logs may retain customer content for up to 30 days by default, subject to OpenAI’s applicable policies and legal requirements.
Your iPhone: locally stored app data remains until removed using available app controls or by deleting the app.

10. Your choices and privacy rights

You may decline OpenAI cloud AI processing. If you do, Gallery Maker will not send new photo content for AI processing, although AI-powered features that require OpenAI will not work.

You can withdraw or re-enable permission for future AI processing from the gear icon in Gallery Maker → Privacy & AI. You can change Gallery Maker’s Photos permission through iOS Settings.

Depending on where you live, you may have rights concerning personal information, including access, correction, deletion, or complaint rights. Gallery Maker has no user accounts and QualiaSphere does not maintain a server-side photo archive or user profile. Contact our Privacy Officer at privacy@qualiasphere.com.

11. Security

Gallery Maker uses encrypted HTTPS connections for online services. It minimizes information sent for AI processing by using reduced image copies and excluding source-photo metadata and identifiers. The OpenAI API credential is kept on the QualiaSphere server and is not embedded in the distributed iPhone app.

12. Changes to this policy

We may update this policy if Gallery Maker’s features, providers, or data practices change. We will update the effective date and provide notice of material changes when appropriate.

13. Contact

Privacy Officer, QualiaSphere Inc.
privacy@qualiasphere.com