Privacy,
in plain language.

Who is responsible

Then & There is published by Jamie Nandhra-Pezone. For support, privacy questions or a request about information you have sent us, email jampez77@gmail.com. There is no Then & There account to create. Connecting an existing photo service is optional.

Your archive stays on your device

The app stores your scans, original images, crops, photo backs, narration, transcripts, captions, dates, comparisons, people and life events in a local archive. We do not operate a server that receives or hosts that archive. You choose whether to export or share it. Operating-system backups are a separate choice, described below.

You can enter names, birth dates, death dates, ages and other family details to help date photographs. The app does not read your address book or device calendar. Only add information and photographs you are entitled to use, and take particular care when sharing details about other people.

Face data, matching and on-device analysis

Face detection and matching run on your device using recognition models bundled with the app. For a scanned or imported photograph, the app can calculate face positions, detection confidence, image-quality scores and a numerical face template (128 values) for matching. These results are kept in a local analysis cache in the app’s private storage. Face landmarks are used temporarily to align a face and are not saved as a landmark record. Face previews are cropped views of the saved photograph; no separate face-image collection is uploaded.

The app uses this face data to draw face frames, let you identify and correct the people in a photograph, and suggest possible matches to people already tagged in your archive. Opening a photograph can analyse its faces and previously tagged reference photographs locally; you can also request analysis across a bundle. The names, birth dates, death dates, ages and life events you enter help date photographs. The app does not verify anyone’s legal identity, and a face match is a suggestion for you to confirm. Google Photos reference previews are not used to produce face clusters.

Then & There does not send photographs, face templates, recordings, transcripts or archive information to a third-party AI service for analysis. Face matching, object labelling and photo text recognition run on the device. We do not receive or host your face templates, sell them, use them for advertising or use your photographs, face templates or recordings to train a shared AI model. Optional photo connections, user-chosen exports and device backups are separate and are explained below.

Camera permission is used to scan prints. Microphone permission is used when you record narration. Speech transcription is requested on-device only; there is no cloud-transcription fallback. Its availability depends on the operating system, recogniser and language. Android transcription requires Android 13 or later and a supported recogniser. If on-device transcription is unavailable, your recorded audio stays in the local archive without a cloud transcript. Face matches, transcriptions, labels and inferred dates can be wrong and remain yours to review.

Google Photos, when you connect it

Google handles sign-in and consent. Then & There uses your account identifier to keep selections separate and shows your email as the account label. The Photos Picker gives access to the photographs you explicitly select, not unrestricted access to your library. The app stores up to 2,000 selected reference previews with available dates, titles and media identifiers on your device so you can compare them with a scan.

Google receives sign-in, permission, picker and image requests. This does not upload your scanned archive to Google Photos. Google manages sign-in credentials through its SDK; the app does not include access tokens in archive backups. Saved reference candidates and date clues can be included in your bundle backups.

Then & There uses Google Photos information only for its visible photo-comparison and dating features. Its use and transfer of information received through Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements, and the Photos API User Data and Developer Policy. We do not sell this information or use it for advertising.

Immich, iCloud and device photos

A personal Immich connection sends your API key and photo searches directly to the HTTPS server you choose. Searches can include dates and a person filter. The server returns reference previews, dates and available people information; its operator may keep request logs. API keys use platform-protected storage and are excluded from Then & There archive backups. You can connect more than one library and remove each connection separately.

Try Immich demo is an optional connection to the real public library at demo.immich.app, operated by Immich. It uses the published demo login and a temporary session, so you do not need your own server or API key. The service receives login and image requests, date ranges, paging and sorting choices, any public-demo person filter you choose, and normal network information such as your IP address. Its operator may keep request logs. The connection reads the library without uploading your scans, archive or face templates, or editing its photographs. Public-demo content is separate from Then & There’s fictional sample archive.

The public-demo session token is held only in memory and is not included in archive backups. The app can renew it when the server invalidates the session. Disconnect clears the local session and attempts to log it out of the demo server; the server may be unreachable at that time. The public demo periodically resets and may be temporarily unavailable. It is not storage provided for your photographs. References you deliberately save as candidates or date clues follow the local retention and backup rules below.

The iCloud option opens Apple’s Photos website in a system browser so you can sign in and download selected pictures. You then choose downloaded images or ZIP files to import as local references. This is an import workflow, not automatic iCloud library access or synchronisation. Then & There does not read Apple passwords or browser cookies. Your browser and Apple handle that session and its downloads.

The system photo and file pickers give the app the files you choose. Your device or cloud provider may download those files to complete your selection. Imported references retain a preview, filename and available capture date locally. References you save as candidates or clues remain with the bundle even if you later disconnect a service or clear the browsing collection.

Third-party components and diagnostics

Then & There contains no adverts and operates no developer-run analytics or crash-reporting service. This does not mean every platform or third-party component processes no data.

Google sign-in can process account details and identifiers, network information including IP-derived general location, device identifiers and usage information for sign-in, security and SDK analytics. Google’s iOS SDK privacy manifest also lists name, email and phone number as account-related data. Then & There itself uses the account identifier and email label; it does not ask you for a Google phone number.

Android text recognition uses Google ML Kit. Google documents device and app information, installation identifiers, feature-use events, errors and performance information for diagnostics and usage analytics. The app disables its bundled metrics transport discovery component, but does not make a blanket promise that Google components or platform services send no diagnostics. Photo recognition is performed on-device; diagnostic information is separate from the content of your photographs. See Google sign-in’s privacy information, ML Kit’s data disclosure and the Google privacy policy.

Exports, sharing and backups

You decide where exported photographs and archive backups are saved or shared. Photo exports include the full date you reviewed, which may be an estimate. Optional companion files can contain stories, audio and other context. Archive backups preserve more information for restoring your work, including saved people, face positions and assignments, earlier bundle edits, and reference clues and previews. The app’s numerical face-matching cache and source credentials are excluded from archive exports. Photographs still contain the faces visible in their pixels.

Exports and archive ZIP files are not password-encrypted by the app. Anyone who can open a copy can read its contents. Use a destination and sharing method you trust. A receiving app, service or person controls its own copies; we cannot recall them.

Android private app data is excluded from automatic cloud backup and device transfer by this app’s configuration. On iOS, local archive data may be included in operating-system backups according to your device settings. Then & There does not run an automatic archive backup service. Keep a separate archive backup somewhere safe.

Keep, correct or delete your information

Local archive information has no automatic expiry and remains until you remove it. Deleting a photograph first moves it to that bundle’s recycle bin, where it can be restored. Permanently deleting a photo from the bin, emptying the bin or deleting a bundle removes the retained photo files and their associated recognition cache. Moving a photograph to the recycle bin does not clear its cached analysis; analysis caches can also be pruned as new photographs are processed.

Clear face analysis removes a bundle’s current recognition cache and pauses its automatic bulk analysis. It does not delete photographs, confirmed people or manual face assignments. Opening a photograph can generate fresh local face analysis. Saved people and face assignments, including earlier edits in bundle history, remain with the retained archive. Permanently deleting a photo removes its image files and recognition cache, but does not erase all of that bundle’s people records or earlier metadata revisions. Delete the bundle to remove its retained people records and history, and manage exported or backup copies separately.

Disconnect Immich in Settings to remove its saved connection. Disconnecting Google removes the local selected-photo collection and attempts to revoke the app’s Google access. If revocation cannot complete, you can also remove access in your Google account’s connections. Choose Remove imported collection to remove the local iCloud/download collection. These actions do not remove candidates or clues you deliberately saved in bundles; remove those from their photos or delete the relevant bundle as well.

Deleting the app’s data removes local archives and reference collections. Disconnect providers first if you also want to remove their grants and stored connection credentials. Deleting Then & There does not delete your originals in Google Photos, Immich or iCloud. Downloaded files, exported copies, previous archive backups and operating-system backups must be managed separately.

If you contact support

Your email address, message and anything you choose to attach are received in the support mailbox hosted by Google. We use them to answer you, investigate the reported problem and keep a record of its resolution. Please do not send passwords, API keys or a full family archive. If an example image is needed, send only one you are comfortable sharing and remove unnecessary personal details.

Support correspondence is kept only as long as needed to resolve the request, deal with related follow-up or meet applicable legal obligations. You can ask us to delete correspondence or attachments; we will explain if a limited record must be retained. We have no remote access to erase an archive that is stored only on your device.

This website

The website has no newsletter form, advertising tracker or developer-added analytics script. Guide searches and the example date slider work in your browser without sending those entries to us. The site is hosted using OpenAI Sites at the domain shown in your browser. Its hosting and security infrastructure may process IP addresses, browser details, requested pages and service logs to deliver and protect the site, including necessary security mechanisms. This is separate from your photo archive.

Following a link to Google, Apple, a store or another website brings you under that service’s policies. The support link opens your chosen email application.

Payments and notifications

The app is a one-time paid download. Apple or Google handles checkout, payment information and refunds under its store terms. Then & There does not ask for or store your card details. The publisher may receive the sales and transaction reports provided by the store.

Processing and export notifications are generated on your device. There is no Then & There remote-push registration service. You can turn notifications off in device settings.

Your choices and rights

You control camera, microphone, speech and notification permissions in device settings. External photo sources are optional. You can correct archive details, stop using a connection, export your work or delete local information using the app’s controls.

For information we receive directly, such as support email, we rely on providing the support you request, our legitimate interests in resolving faults and keeping services secure, and applicable legal obligations. Optional provider access is initiated by you through the provider’s permission flow. Google, Apple and your chosen server operator explain their own processing grounds in their policies.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to the use of your personal information, obtain a portable copy and withdraw consent where processing relies on consent. Contact jampez77@gmail.com to exercise these rights or raise a privacy complaint. You can also complain to your local data-protection authority, including the UK Information Commissioner’s Office.

Google, Apple, the website host and a server you choose may process information in other countries under their own privacy policies and safeguards. We do not transfer your local archive to them automatically. The app is designed for people organising family photographs, rather than services directed at children; photographs may of course contain children, so consider their privacy before sharing.

Changes to this policy

We will update this page when relevant features or practices change and show the new date above. Material changes that need your attention or permission will be brought to your attention through the app or the relevant feature.