App: Apollo · Last updated: October 7, 2026
Data controller: Christos Dimakis, Peristeri, Attica, Greece.
Contact: apollo@dimakis.app
You don't create an account with us, you don't give us an email address, and the app contains no analytics, crash-reporting, or advertising SDKs. We don't track you across apps or websites, and we don't use the IDFA. No photo or video ever passes through our systems.
There are exactly two small helper services, run by us on Cloudflare. Each one exists because there's something that can't be done safely from inside the app:
| Helper | When it is used | What passes through it |
|---|---|---|
| Box sign-in | Only when you connect a Box account, and when the app renews that connection | The one-time sign-in code or the renewal token is forwarded to Box, along with a secret that Box requires and that can't be stored inside the app. Box's response (your new access tokens) goes straight back to your device. |
| Wallet pass signing | Only when you tap Wallet or send a boarding pass as a .pkpass file | Only the pass's manifest.json: a list of file names and their SHA-1 hashes. No passenger name, flight, seat, booking code or barcode. The service returns the signature that Apple Wallet requires. |
Neither helper stores, logs, or analyzes anything that passes through it; request logging is turned off on both. Like any server on the internet, Cloudflare sees your IP address while it handles the request.
Apollo is a viewer for photos you already keep in your own cloud: pCloud, Dropbox, OneDrive, Box, WebDAV, any S3-compatible service, or your device's Photos library. The app connects directly from your device to the service you chose. You can also transfer photos directly between your own accounts (see section 6).
It also keeps track of your trips: flights, ferry journeys, and their boarding passes, which you enter yourself or scan from your tickets.
The following is stored only on your device:
| Category | What it is | Why |
|---|---|---|
| Local index | File name, cloud path, size, dimensions, duration, capture date, GPS coordinates, camera model | So the timeline, albums, and map can be shown without querying the cloud every time you scroll |
| Thumbnails | Small versions of your photos, up to 500 MB | Faster display. Cleared automatically, or manually in Settings |
| Temporary files | Files downloaded for viewing, editing, or sharing, and Wallet passes you create | Deleted automatically |
| Trips and boarding passes | Trips (name, dates, who went, transportation, expenses, ratings), flights and ferry journeys (route, dates, times, carrier, aircraft or ship), and for each boarding pass: passenger name, seat, class, gate, booking code, and barcode | Showing your trips, the pass at the gate, reminders, and Wallet passes |
| Travel images | Airline logos and photos of aircraft or ship types, downloaded as described in section 6 | Display. Cached and rebuilt when needed |
| Credentials | The access tokens for your cloud accounts, and your OpenSky credentials if you enter them | Stored in Apple's Keychain, not in a plain file |
| Settings | Theme, icon, zoom level, album covers, place names | Making the app work |
| Smart analysis results | For each photo: what it shows (e.g. “sea”, “dog”), a quality score, whether it’s a receipt, document or screenshot, the text read from it, and a numeric “fingerprint” used to find identical and similar photos | Searching by content, picking covers and “On this day”, finding duplicates. Deleted from the device if you turn the analysis off (for the shared Family mode file, see section 8) |
Each permission is requested only when you first use the feature that needs it, and all of them are optional.
The app doesn't ask for location access. The locations you see on the map come from your own files (EXIF GPS), not from where you are. You can revoke any permission at any time in the Settings app.
| Service | What is sent | Purpose |
|---|---|---|
| pCloud, Dropbox, OneDrive, Box, WebDAV, S3-compatible | Your access token (or credentials, for WebDAV and S3), file identifiers, and the files themselves when downloading or uploading, only for the services you've connected | Reading your library, thumbnails, viewing, and corrections |
| Our helper services (Cloudflare) | As described in section 2: Box sign-in codes and tokens, and Wallet pass manifests | Box sign-in, Wallet passes |
| Apple (device Photos library) | Nothing is sent to us. Access happens on the device, through the system (PhotoKit) | Reading and updating your library |
| Apple Maps (MapKit) | The GPS coordinates of your photos, one at a time | Turning them into place names ("Athens", "Zakynthos") for the map and search |
| Wikipedia (Wikimedia) | Up to four coordinate pairs per trip. No trip name, no photos, no identifiers. | Finding the names of landmarks near those points, so that your own photo taken closest to the best-known one can be used as the cover. This happens only when you open the editor for a trip that has no cover, or when you tap the matching button |
| Wikimedia Commons | The carrier's name and the aircraft or ship type (for example, "Aegean A320"). No passenger data, no flight number. | Showing a photo of that aircraft or ship type. The photo is downloaded and cached on the device |
| adsbdb.com | The flight number or the aircraft registration | Filling in a flight's route and aircraft type |
| OpenSky Network | Only if you enter your own OpenSky credentials: those credentials (sent to OpenSky's sign-in), the aircraft's transponder code, and the date of the flight | Actual takeoff and landing times |
| Airline logo services (pics. | Only the airline's two-letter code | Showing the airline's logo in the app. Logos aren't added to Wallet passes |
| Frankfurter (European Central Bank rates) | Nothing about you. The app just downloads the day's exchange rates | Converting trip costs between currencies |
| Our website (dimakis.app) | Nothing about you. The app downloads the "Our Apps" list (names, icons and links of our apps) with a plain request | Keeping the "Our Apps" screen up to date without a new app release |
| Flightradar24, MarineTraffic | Nothing, unless you tap their link on a trip. Their app or website then opens, and their own policy applies | Following a flight or a ship live |
| Apple (iCloud key-value store) | Preferences only: which cloud is active, the names of your source folders, sync and EXIF switches, the upload renaming template, zoom levels, and filters. Not appearance settings, not trips | Keeping your settings the same across your devices. Can be turned off in Settings |
We don't send your name, email address, or any device identifier to any of them. Where a service requires it, requests identify the app (its name and our contact address), not you. As with any internet connection, each service sees your IP address. All communication is encrypted (HTTPS).
Transferring between your own accounts. If you choose to transfer photos from one of your connected accounts to another (for example, from your device's library to pCloud, or from Dropbox to OneDrive), each file is downloaded from the first and uploaded to the second directly by your device. It never passes through our systems; it is simply sent to two services instead of one.
Sharing a boarding pass. A .pkpass file you choose to send
contains the pass itself, including the barcode. It goes only where you send it.
Sign-in uses OAuth, the standard that lets an app get access without ever seeing your password. You enter your password directly with the provider. The app receives only an access token, stored in your device's Keychain, which you can revoke at any time:
Box is the one exception. Box requires a secret for sign-in that can't be stored inside an app, so that one step goes through our helper service (section 2), which forwards it without keeping anything. For WebDAV and S3-compatible services, you enter the credentials yourself, and they're stored in the Keychain.
Each provider's privacy policy applies: pCloud, Apple, Dropbox, Microsoft (OneDrive), Box, or the policy of your own WebDAV/S3-compatible provider.
If you turn it on, the app writes three files to the photo folder of the cloud account you choose as the family hub (pCloud, unless you pick another of your connected accounts), so that everyone with access to that folder can read them:
.photoapp-family.json: album covers, year groupings, place names, the member names you set up, your trips (name, dates, who went, transportation, expenses, and ratings), your flights and ferry journeys, your boarding passes (passenger name, seat, booking code, and barcode), and the list of shared photos moved to the Trash..photoapp-exif.json: capture dates, GPS coordinates, and camera models, so each device doesn't have to read them again..photoapp-insights.lzfse: the smart analysis results for the photos in the shared folder (what each one shows, the text read inside it, its score, and a fingerprint for finding duplicates), so each device doesn't have to analyze them again. Anyone with access to the folder can already see the photos themselves. When a photo is deleted from the shared folder, its results are removed from the file automatically. The file is not deleted when you turn the analysis off on one device, because the other members use it too; you can delete it from the folder, and it is only recreated if a member has both the analysis and the Family mode “Smart Analysis” switch turned on.Boarding passes are shared on purpose: one person scans everyone's tickets, and each member finds theirs on their own phone.
The "I am" setting (which member you are on this device) and your choice of family hub are not synced; they stay on the device.
We don't keep any data, so there's nothing to retain: the helper services keep nothing after responding. On your device, data is kept for as long as you want. You can clear thumbnails and temporary files in Settings, turn off smart analysis (which also deletes its results), delete trips and passes, sign out of a provider (which also removes its entries from the index), or delete the app, which removes everything. Your photos in the cloud aren't affected.
If you contact us from Help → Contact, the message is pre-filled with technical details that help us diagnose the problem: app version, OS version, device model, which clouds are connected, whether Family mode is on, the number of photos in the index, free space, and language. No file names, locations, photos, trips, or credentials are included. You can see these details before sending and delete them. Support emails are kept only as long as needed to resolve the issue.
You have the right of access, rectification, erasure, restriction, portability, and objection. Because we hold none of your data, you exercise these rights directly on your device and in your cloud accounts. For anything else, contact us. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (dpa.gr) or your local supervisory authority.
The app isn't directed at children under 13, and we don't knowingly collect data from them. Since we keep no data at all, this risk doesn't arise.
If anything material changes, we'll update the date at the top and mention the change in the release notes. This policy is always available inside the app, under Settings → Support.