Privacy Policy
Last updated: April 2026
Sierra Data Labs LLC, doing business as PhotoMetrics ("we", "our", "us", or "PhotoMetrics"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.
Quick Links: California Privacy Rights | International Users | Data Retention | Service Providers
Information We Collect
Account Information
When you sign in with Google or Apple, we receive:
- Your email address
- Your display name (if provided)
- Your profile picture URL (Google only)
We do not have access to your Google or Apple account passwords.
Photos and Data
When you use PhotoMetrics, we collect:
- Photos you add to the app
- Metric data extracted from your photos by our AI, which may include health-related values (e.g., weight, blood pressure) depending on what you track
- Tracker names and descriptions you create
- AI Advisor names, voice preferences, and custom instructions you configure
- Goal titles, target values, and personal motivation text you provide
- EXIF metadata from your photos (date taken only; location data is not extracted)
Device Information
We may collect:
- Device type and operating system version
- Push notification tokens (for sending you notifications)
Identifiers and Analytics
We collect the following for account management and product analytics:
- A unique user identifier assigned by our authentication system (AWS Cognito)
- App usage analytics via PostHog, including screen views, feature interactions (e.g., adding photos, metric edits), and subscription events
- Your user identifier and email are linked to analytics data to help us understand usage patterns and improve the app
We do not collect advertising identifiers (IDFA) or use any advertising SDKs.
Purchase Information
When you make in-app purchases, we collect:
- Apple transaction identifiers
- Product type (e.g., photo credit pack)
- Purchase status
Payment processing is handled entirely by Apple. We do not have access to your payment card or billing details.
How We Use Your Information
We use your information to:
- Provide and maintain the PhotoMetrics service
- Process your photos using AI to extract metric data
- Send you push notifications about photo processing status
- Manage your account and enforce daily usage limits
- Analyze app usage patterns to improve the product (via PostHog analytics)
- Respond to support requests
Data Storage and Security
Your data is stored securely using Amazon Web Services (AWS):
- Photos are stored in encrypted S3 buckets
- User data is stored in encrypted RDS databases
- All data transmission uses HTTPS/TLS encryption
- We use AWS Cognito for secure authentication
Third-Party AI Photo Processing
PhotoMetrics shares your photos with third-party AI services operated by Google LLC. When you upload a photo, the following occurs:
- What data is sent: The photo image you upload is transmitted to Google's servers
- Who receives it: Google LLC processes your photos through two services: Gemini AI (to extract metric values from your photos) and Vertex AI (to detect similar photos across your trackers)
- Where data is processed: Your photos are processed on Google's servers in the United States
- Data retention: Google does not store or retain your photos after processing is complete. Only the extracted metric data is saved to your PhotoMetrics account
- Data protection: Google provides the same or equal protection of your data as described in this Privacy Policy, in accordance with their API Terms of Service
Before any photos are processed, the app requests your explicit consent through an in-app AI Data Disclosure screen. You can revoke this consent at any time from the app's Settings > AI & Data section, which will disable photo analysis features.
Data Sharing
We do not sell your personal information. We do not share your personal information with third parties for their direct marketing purposes.
We may share data with:
- Service Providers: As described in our Sub-Processor List below
- Legal Requirements: When required by law, subpoena, or to protect our rights
- Business Transfers: In connection with a merger, acquisition, or sale of assets
Service Providers (Sub-Processors)
We use the following third-party service providers to operate PhotoMetrics:
| Provider | Purpose | Data Processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, storage, authentication | All user data, photos | US (Virginia) |
| Google (Gemini AI) | Photo analysis, metric extraction | Photos (not retained) | US |
| Google (Vertex AI) | Photo similarity detection | Photo embeddings | US |
| PostHog | App analytics | Usage data, device info | US |
| Canny | Feature requests, feedback | Email, feedback content | US |
| Apple App Store | App distribution, payments | Purchase data | US |
All third-party service providers with whom we share user data provide the same or equal protection of user data as described in this Privacy Policy. Each provider is bound by data processing agreements and is only permitted to process your data as necessary to provide their services to us.
Data Retention
We retain your data for as long as your account is active or as needed to provide you services:
- Account data: Retained until you delete your account
- Photos and metrics: Retained until you delete them or your account
- Analytics data: Aggregated and anonymized after 24 months
- Backup data: Retained for 7 days after deletion for disaster recovery
- Support communications: Retained for 3 years for quality and training purposes
After account deletion, your data is permanently removed within 30 days, except where retention is required by law.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate personal data
- Deletion: Request deletion of your personal data ("right to be forgotten")
- Portability: Request your data in a machine-readable format
- Restriction: Request restriction of processing in certain circumstances
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Withdraw consent for processing at any time. You can revoke AI photo processing consent directly in the app from Settings > AI & Data
To exercise any of these rights, contact us at support@photometrics.io. We will respond within 30 days (or 45 days for complex requests). For AI data processing consent, you can also manage this directly within the app without contacting us.
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
- Right to Delete: You can request deletion of your personal information
- Right to Opt-Out: You have the right to opt-out of the "sale" or "sharing" of your personal information
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
We do not sell or share your personal information as defined by the CCPA/CPRA. However, if you wish to make a verifiable consumer request or have questions about your California privacy rights, please contact us at support@photometrics.io.
International Data Transfers
PhotoMetrics is operated from the United States. If you are accessing our service from outside the US, please be aware that your data will be transferred to, stored, and processed in the United States.
By using PhotoMetrics, you consent to the transfer of your information to the US and other countries which may have different data protection laws than your country of residence.
For users in the European Economic Area (EEA), UK, or Switzerland: We rely on Standard Contractual Clauses approved by the European Commission and other lawful transfer mechanisms to transfer personal data outside these regions.
Account Deletion
You can delete your account at any time from the Settings screen in the app. Deletion removes:
- Your user profile
- All trackers and metric definitions
- All photos and extracted data
- All files from cloud storage
This action is permanent and cannot be undone.
Children's Privacy
PhotoMetrics is not intended for children under 13. We do not knowingly collect information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have questions about this Privacy Policy, please contact us at: