Privacy Policy

Last updated: February 2026

Sierra Data Labs LLC, doing business as PhotoMetrics ("we", "our", "us", or "PhotoMetrics"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

Quick Links: California Privacy Rights | International Users | Data Retention | Service Providers

Information We Collect

Account Information

When you sign in with Google or Apple, we receive:

• Your email address
• Your display name (if provided)
• Your profile picture URL (Google only)

We do not have access to your Google or Apple account passwords.

Photos and Data

When you use PhotoMetrics, we collect:

• Photos you add to the app
• Metric data extracted from your photos by our AI, which may include health-related values (e.g., weight, blood pressure) depending on what you track
• Tracker names and descriptions you create
• AI Advisor names, voice preferences, and custom instructions you configure
• Goal titles, target values, and personal motivation text you provide
• EXIF metadata from your photos (date taken only; location data is not extracted)

Device Information

We may collect:

• Device type and operating system version
• Push notification tokens (for sending you notifications)

Identifiers and Analytics

We collect the following for account management and product analytics:

• A unique user identifier assigned by our authentication system (AWS Cognito)
• App usage analytics via PostHog, including screen views, feature interactions (e.g., adding photos, metric edits), and subscription events
• Your user identifier and email are linked to analytics data to help us understand usage patterns and improve the app

We do not collect advertising identifiers (IDFA) or use any advertising SDKs.

Purchase Information

When you make in-app purchases, we collect:

• Apple transaction identifiers
• Product type (e.g., photo credit pack)
• Purchase status

Payment processing is handled entirely by Apple. We do not have access to your payment card or billing details.

How We Use Your Information

We use your information to:

• Provide and maintain the PhotoMetrics service
• Process your photos using AI to extract metric data
• Send you push notifications about photo processing status
• Manage your account and enforce daily usage limits
• Analyze app usage patterns to improve the product (via PostHog analytics)
• Respond to support requests

Data Storage and Security

Your data is stored securely using Amazon Web Services (AWS):

• Photos are stored in encrypted S3 buckets
• User data is stored in encrypted RDS databases
• All data transmission uses HTTPS/TLS encryption
• We use AWS Cognito for secure authentication

AI Processing

We use Google's Gemini AI to analyze your photos and extract metric data. When processing:

• Photos are sent to Google's API for analysis
• Google does not retain your photos after processing
• Extracted data is stored only in your PhotoMetrics account

Apple Health Integration

PhotoMetrics can optionally write validated metric values to Apple Health (HealthKit) on your device:

• Write-only: PhotoMetrics only writes data to Apple Health; it does not read your health data
• Per-metric opt-in: You choose which metrics sync to Apple Health; no data is written without your explicit consent
• On-device only: Health data is written directly to Apple Health on your device and is not sent to our servers
• User control: You can disable sync at any time from the metric detail screen or Settings

Data Sharing

We do not sell your personal information. We do not share your personal information with third parties for their direct marketing purposes.

We may share data with:

• Service Providers: As described in our Sub-Processor List below
• Legal Requirements: When required by law, subpoena, or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Service Providers (Sub-Processors)

We use the following third-party service providers to operate PhotoMetrics:

All service providers are bound by data processing agreements and are only permitted to process your data as necessary to provide their services to us.

Data Retention

We retain your data for as long as your account is active or as needed to provide you services:

• Account data: Retained until you delete your account
• Photos and metrics: Retained until you delete them or your account
• Analytics data: Aggregated and anonymized after 24 months
• Backup data: Retained for 7 days after deletion for disaster recovery
• Support communications: Retained for 3 years for quality and training purposes

After account deletion, your data is permanently removed within 30 days, except where retention is required by law.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Request your data in a machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for processing at any time

To exercise any of these rights, contact us at support@photometrics.io. We will respond within 30 days (or 45 days for complex requests).

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: You have the right to opt-out of the "sale" or "sharing" of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

We do not sell or share your personal information as defined by the CCPA/CPRA. However, if you wish to make a verifiable consumer request or have questions about your California privacy rights, please contact us at support@photometrics.io.

International Data Transfers

PhotoMetrics is operated from the United States. If you are accessing our service from outside the US, please be aware that your data will be transferred to, stored, and processed in the United States.

By using PhotoMetrics, you consent to the transfer of your information to the US and other countries which may have different data protection laws than your country of residence.

For users in the European Economic Area (EEA), UK, or Switzerland: We rely on Standard Contractual Clauses approved by the European Commission and other lawful transfer mechanisms to transfer personal data outside these regions.

Account Deletion

You can delete your account at any time from the Settings screen in the app. Deletion removes:

• Your user profile
• All trackers and metric definitions
• All photos and extracted data
• All files from cloud storage

This action is permanent and cannot be undone.

Children's Privacy

PhotoMetrics is not intended for children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

support@photometrics.io