Your privacy, in full.

Your local photo workflows

The app’s local-file photo import, RAW development, automatic local layout, local-file beat analysis and exports run on your device. These workflows do not upload your photos or local music to us, a cloud provider or a cloud renderer. Original files are unchanged. Projects contain normalized photo copies and any included local soundtrack; you decide where to save or share them.

The public desktop download is currently for Windows. A Mac App Store version is in prerelease testing and is not yet available to download from the App Store. The Mac-specific sections below describe that version.

iPhone and iPad prerelease

The iOS app is in TestFlight testing and is not yet a public App Store download. Local photo selection, editing, music and exports stay on your device. Optional Auto Crop and Auto Layout use the separate online sharing described below. Photos and Files grant access to the items you choose. Imported copies become project content; your originals stay unchanged. A portable project includes all imported gallery photos, including excluded photos, edits and any imported soundtrack. Review a project before sharing it. Removing the app may remove its local drafts.

Optional account connections and online requests use the services described in this policy. Account credentials stay in the device Keychain, outside the editor and project file. Apple sign-in can create an account or explicitly link to your existing account; matching email addresses do not merge accounts. Apple purchase verification processes the account and transaction information described below. The iOS app adds no app-owned advertising or analytics SDK. Ordinary local editing does not send your gallery or music to an online service.

Your one-time app trial

You can try the full app for 14 days without subscribing or providing payment details. Sign in with Apple to confirm your account. We record your account identifier, trial start and expiry, and device connection information to provide access and prevent repeated trials. Reinstalling, signing out or changing devices does not restart the same account’s trial. The trial does not renew or charge automatically.

Account deletion removes your active app-trial account record and ends that access. We retain a minimal record that the verified Apple identity has already used its trial, together with its original trial dates, to prevent another trial after account recreation. That record contains no photos, email address, access token or payment information and is kept while needed to enforce the one-time offer. It is not used for advertising.

If you paste email excerpts into a caption or vendor request, the text you submit passes through our service to the described service providers. This is message content, distinct from your sign-in email address. Gmail connection is not required for pasted text. Do not submit private material you do not want those services to process.

Optional Auto Crop and Auto Layout

These features require an account connection and your approval before sharing. Auto Crop helps keep important people in view. It sends only reduced copies of the selected complete photographs, without the original files’ embedded metadata. You review the copies before they pass through our Google Cloud service and OpenRouter to Typesafe. Original files, unselected photographs, music and the whole project are not uploaded for this request. Whole-photo and manual framing remain available locally.

Auto Layout helps you find a design you like. It can use the photo sharing described above and also sends the reduced design previews you approve through the same services. The previews include your selected background photographs and visible styling or text, and may show more than one page. Review the photographs and previews before approving sharing, and check the result before exporting. Your layout remains editable.

Our operation records retain account-linked request identifiers, framing observations about visible people, usage and your chosen design to avoid duplicate requests and help recover completed work. They do not store the submitted photo or preview images. These records expire after 30 days and are removed by scheduled cleanup, which may take additional time; account deletion includes them. OpenRouter and Typesafe process submitted images under their own terms and privacy policies. We do not intentionally log image contents. Saved work can be reopened locally without sending the photographs again. Canceling stops work that has not been sent; requests already sent may still use your allowance. Local editing and export do not upload your photos. A current trial or subscription is required for app access.

Collage POP photo captions

The photo-based Caption Generator is an optional service in supported iOS builds. Before generating, you choose one photo or one finished collage page, review its preview and the details and credits you supplied, and confirm the transfer. Only a reduced copy of the image you approve is shared, without the original file’s embedded metadata. It does not upload your unselected photos, original file, soundtrack, whole project or mailbox.

The image you approve passes through our Google Cloud service and OpenRouter to Google. Typed names, vendor credits and other supplied facts are not sent with that image. OpenAI receives the resulting image description, your confirmed text and up to eight earlier caption titles and descriptions through OpenRouter. OpenAI does not receive the image or alt text. These providers process the content under their own terms and privacy policies. The Microsoft Azure service described for desktop text captions below is separate from this photo-caption service.

The names, places and vendor credits you provide are not independently verified. Review them along with the finished title, caption and alt text before using them. The app does not post them automatically. Earlier drafts, edits, confirmed details and credits can be saved locally and in portable projects, so review a project before sharing it.

Our service retains a record linked to your account and session, including request identifiers, service usage and the completed caption and alt text, which can contain the names or credits you supplied. This supports duplicate prevention and an explicit Recover action without another generation. It does not store the submitted image or full input brief in that record. Completed results can be recovered for up to 24 hours; expired records are removed by daily cleanup. Scheduled deletion can take longer than expiry. Account deletion includes these records. Ordinary service and required audit logs follow the separate retention described in this policy. We do not intentionally log submitted images or caption text.

Cloud photo sources

Files can open iCloud Drive and provider locations you have installed, signed into and enabled in Apple’s Files app. This route does not give Photos to Reels your cloud password or OAuth credentials. Provider apps manage their own connections. Folder access and downloads depend on the provider and your account.

Direct Dropbox, Google Drive, OneDrive and Box connections are undergoing prerelease validation and remain disabled in the current iOS release configuration. Development builds may offer a Connect action for testing. Connecting is optional and opens the provider’s authorization screen. Dropbox requests read-only account, metadata and content access. Google’s Picker grants read and edit access to files you select; Photos to Reels only reads them. OneDrive requests read-only file access and permission to maintain the connection. These three connections keep provider credentials in this device’s Keychain and download selected photos directly from the provider. Provider account details, selected file metadata, download requests and normal connection information are processed by that provider.

Disconnecting Dropbox or Google Drive removes saved local credentials and requests provider revocation. If revocation cannot be confirmed, the app explains how to remove access in the provider’s account settings. OneDrive disconnect removes saved credentials from this device; it does not automatically revoke the Microsoft grant. To revoke that grant, remove Photos to Reels in your Microsoft account’s app permissions.

Box works differently: it requires a Photos to Reels account and requests read-only file and folder access. Our Google Cloud service stores encrypted Box authorization credentials while maintaining that connection. It processes selected file metadata and relays selected photo bytes from Box to your device during import. The broker does not retain photo files in our database or object storage.

Disconnecting Box disables access and requests provider revocation. If revocation cannot be completed, encrypted credentials remain for cleanup and retries; there is no fixed completion time. Successful revocation removes those credentials, while a minimal connection record linked to your Photos to Reels account remains until account deletion. Account deletion requests revocation of server-held Box access before removing its connection records. These connection records are separate from operational logs. Disconnecting or deleting an account does not remove copies already saved in local projects.

The Box broker’s application logs do not include photo contents or provider tokens. Its authorization callback receives a short-lived code and state in the URL. Infrastructure request logging and retention for this callback are being reviewed before the direct connector is enabled in a release.

YouTube preview, Feed, built-in Gmail and direct social publishing remain disabled in the current iOS release configuration. Saving a song reference does not import its audio. Provider availability and disclosures will be updated before enabling a service in a distributed build.

Local drafts and preferences

The application saves a working draft on your device so you can return to it. Portable project files embed images, local music and settings. Optional streamed music is represented only by a song and clip reference with your selected times; playback links and account credentials are not included. Files you export, local drafts and project copies remain under your control.

Automatic bug reports and update checks

Supported new desktop releases automatically report predefined failure codes to help us find and fix bugs. The report contains only the app version, platform and a fixed error category or code. It does not include an account or device identifier, your name or email, photographs, music, projects, captions, file paths, raw error messages, stack traces or access tokens. We combine reports into daily counts by version, platform and code rather than retaining individual reports. Aggregate counts are scheduled for deletion after 30 days; scheduled deletion can take additional time.

Automatic reporting is enabled by default in those releases. Turn off Send anonymous bug reports in the app’s account settings to stop future reports. Reports are not tied to an account, so we cannot identify and remove a particular person’s contribution to an aggregate count. This is bug reporting, not user-activity analytics.

Supported Windows releases also check for an available update when they open. You decide whether to download an update; the check does not close your project or install an update automatically. The Mac App Store version uses Apple’s update system rather than the Windows download service. Network connections expose normal technical information, including the public IP address, to hosting providers. IP addresses are not stored in the app’s bug-report aggregates. Our ordinary service request and security logs may include IP addresses, request times and technical response information, and are retained for up to 30 days. Request logging is excluded for the anonymous diagnostic endpoint, so its aggregate feature does not retain IP addresses. Required administrative audit records follow Google Cloud’s separate mandatory retention; they are not app bug-report aggregates.

Account connections

Local layout choices and centered photo framing run on your device without a connected account or online service. The optional iOS Auto Crop, Pro Auto Layout and photo-caption services described above require a connection and your approval before sharing. Connect your Photos to Reels account to access optional cloud caption tools and other account features available in your release. Google connection asks you to approve the code shown on your device; the Mac prerelease can also offer native Sign in with Apple when enabled for your account. Photos to Reels verifies the account, checks plan access for Pro features, and keeps device connection records.

Device credentials stay separate from saved projects. Disconnecting removes the local connection and requests revocation. Contact support for help with connection records. The optional services described here use server-side provider credentials; app users do not need a personal provider API key. Service availability and fair-use limits apply.

Optional desktop text captions

The desktop caption writer, including editable local starters and generated drafts, is a Pro feature. Vendor discovery also requires Pro. When you request a desktop text caption, your supplied brief and selected text pass through the app’s Google Cloud service to OpenRouter and Microsoft Azure to help prepare your caption drafts. Pro includes up to 50 caption or vendor requests per day, subject to service availability and fair-use limits. Free does not include generation or vendor discovery; saved drafts remain available under the applicable app’s editing controls. Caption generation and optional vendor extraction share the daily allowance, which resets at 00:00 UTC. Attempts count even if canceled or unsuccessful. Photos to Reels supplies the provider credentials on its server; you do not need an API key or separate provider credits. This desktop text-caption route does not send your photos, soundtrack or full project. The separate Collage POP iOS photo-caption service is described above. Review the draft and explicitly confirm names and social handles before using them. Email-assisted vendor discovery is optional, is not connected by default, and is not a generally available preconfigured connection in this release.

Text used to find credits

If you choose vendor extraction, review the text before submitting it. Only the selected or pasted text is sent through Photos to Reels to OpenRouter and Microsoft Azure for that request. Confirm suggested names and social handles before using them. Caption generation does not send email or publish a post. Direct publishing, when enabled, is a separate action described below.

Local credentials and project sharing

Connection credentials are kept separately from portable project files. Disconnecting your Photos to Reels account removes the local connection and requests revocation; it does not delete your saved project. Projects can contain your caption brief, drafts, vendor candidates and short supporting excerpts, so review their contents before sharing a project.

Optional Feed Clips preview

Feed Clips integration is in preparation and is not an active or included music service in the current release. If enabled for your account in a future build, connecting is optional and requires your explicit device approval. Photos to Reels would process your account identifier, a device identifier, access status, connection records and selected track/clip references to provide that service. Feed would receive a pseudonymous listener identifier, your public IP address for territory checks, selected music identifiers and required playback/add events. Audio and artwork delivery also exposes normal connection information to the delivery service. Your photos are not sent to Feed.

Connection codes expire after 10 minutes and desktop music sessions after 12 hours; the app protects persistent session credentials with the operating system’s secure storage when available. Disconnecting clears the local connection and requests session revocation. Server-side clip references are retained so saved projects can request fresh playback permission. Contact support about account or connection-record deletion. Streamed music is used only for preview and is excluded from exported videos. Your own local music remains available without connecting.

Optional direct publishing

Social account connections and direct publishing require Pro. Supported desktop releases can offer direct publishing to an Instagram professional account, TikTok account or YouTube channel. Availability depends on platform approval, your account and the enabled release; development access may be restricted to approved testers and private uploads. Each destination is connected separately through its own authorization page. We do not receive your social-account password. Connecting an account does not post anything. You choose an exported MP4, review the destination identity and caption, select the audience and other available settings, confirm your media and music rights, and explicitly choose Post or Upload.

We process the connected account or channel identifier, display name and username when available; the authorization permissions and access or refresh tokens; your selected exported video; and the title, caption, audience, interaction choices and disclosure labels you approve. We also process file characteristics and a file hash, confirmation records, upload progress, platform job or post identifiers and the resulting post link. These support the connection, upload, status checks, duplicate prevention and error recovery. Source photos, the project file, unused music and other exports are not sent with a publishing request. Photos to Reels does not use connected social-account information for advertising, sell it or send it to its caption providers.

Instagram permissions are used for the connected professional account’s identity and publishing reels. TikTok permissions are used for account identity, current creator publishing options and posting the video you confirm. For YouTube, the app requests upload and read-only account permissions: read-only access is used to identify the destination channel and check processing or status for videos uploaded through the app. It is not used to browse your viewing history, subscriptions or unrelated channel content. Platform permission descriptions may be broader than these uses.

Publishing credentials and temporary media

Social access and refresh tokens are encrypted on the server before storage in private Google Cloud Firestore records; the encryption key is held separately in Google Cloud Secret Manager. Social tokens are not exposed in the editor, embedded in saved projects or included in downloads. Short-lived authorization requests expire after 10 minutes. Connection records expire 90 days after connection or token refresh unless disconnected sooner; expired records are removed by scheduled cleanup.

TikTok and YouTube uploads pass through the Photos to Reels service in bounded streaming chunks; we do not retain a separate stored video copy for those uploads. Instagram requires a retrievable video: your selected export is temporarily stored in private Google Cloud Storage and made available to Meta through a signed link that expires after two hours. We request deletion after a confirmed completion, failure or cancellation. Abandoned publishing jobs expire after 24 hours, and temporary objects are also covered by a one-day storage lifecycle rule. Scheduled cleanup and storage lifecycle deletion are asynchronous, so expiration is not a guarantee of deletion at an exact moment.

Publishing jobs, including approved captions and settings, media characteristics, confirmation flags and result references, expire after 24 hours and are removed by hourly cleanup. A recent-job index is limited to 10 entries and also expires after 24 hours. These records let the app show progress and recover the outcome without automatically posting again. A video that reaches a platform is retained by that platform under its own policies and your account settings.

Disconnecting social accounts

Open Publish, select a destination and choose Disconnect, then confirm. This immediately removes the stored social token and account identity from the active Photos to Reels connection and requests revocation from the platform. If the platform cannot confirm revocation, also remove Photos to Reels in that platform’s account or connected-app settings. A short revocation record expires after one day. Disconnecting does not delete a video already accepted by a platform, and it does not replace a request to delete other account or publishing records. See our secure account-deletion page.

YouTube and Google API data

Windows 0.7.8 and later, and the Mac prerelease, offer an optional visible YouTube video player beside the local photo preview. Loading a link connects the player to YouTube, which receives normal network and device information and may use cookies under its policies. We use the video reference, title, duration and playback position to show and time the preview. Your photographs are not sent to YouTube. The player remains visible, including its controls and any advertisements, and pauses when hidden. We do not download or analyze YouTube media for beats, and exported files contain no YouTube audio or video. Preview does not require a Google account connection; channel publishing uses separate authorization.

Google may associate player activity with browser or device identifiers, or with your Google account when signed in. It receives viewing and ad activity and can infer approximate location from your IP address. Google uses information from its embedded services to provide and improve them and measure advertising; depending on your settings, it can personalize content and ads using activity across Google services and other websites and apps. Turning off ad personalization does not stop all collection or advertising measurement. See how Google uses information from sites and apps and Google ad settings.

The optional YouTube integration uses YouTube API Services. Its use is subject to the YouTube Terms of Service, and Google processes information under the Google Privacy Policy. Photos to Reels’ use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can revoke the app’s Google authorization from your Google Account connections, and request deletion of data we hold through the instructions below.

Optional Gmail vendor lookup under review

Gmail vendor lookup requires Pro. The first-party Gmail connection is being prepared for Google's restricted-scope review and is not generally available. It requests read-only access so you can explicitly search planning emails, review excerpts and select messages that identify vendors and social handles. It does not send, edit or delete mail, search in the background, or download attachments. Searches run between your desktop and Gmail; connection tokens stay in encrypted native storage. Full email bodies and searches are not saved in projects; extracted vendor candidates and short supporting email excerpts may be saved with your project. Review them before sharing. Only when you choose specific messages and request vendor candidates are their excerpts, limited to 24,000 characters, sent through our service to OpenRouter and Microsoft Azure for suggestions you review. This selected-text transfer is part of the requested review; we do not describe it as local-only processing. Disconnect removes the local credentials and requests Google revocation. You can also revoke access in your Google Account connections. Pro users can paste and review relevant text without Gmail access.

App and website accounts

When account access is available and you choose to sign in, Google handles website authentication through Firebase. When enabled in the Mac prerelease, native Sign in with Apple can create an account or explicitly link Apple to your existing account; matching email addresses never merge accounts. We verify Apple identity tokens, keep encrypted Apple refresh credentials for validation and revocation, and support Apple private relay email. We use your verified account identifier and email address, sign-in provider, profile creation and last account-access times, plan and subscription status to provide your Pro entitlement, optional cloud services and account services. Account and billing records are stored on our server and are not editable by other customers. Downloading the Free Windows installer and using the local Free editor do not require an account. The Mac prerelease also allows local Free editing without an account. We do not receive your Google password. Website sessions use Firebase authentication tokens.

Payments and downloads

Stripe processes direct subscriptions and earlier one-time purchases. We do not receive or store your full payment-card number. Purchase, subscription, payment, refund and dispute identifiers are used to fulfill orders and support account access. The Free Windows installer is available without sign-in or payment. Download delivery may use expiring links; requesting a download does not start a subscription. Microsoft processes purchases made through Microsoft Store under its own policies.

Apple App Store purchases

Apple handles payment and purchase confirmation for App Store subscriptions. We do not receive your Apple Account password or full payment-card details. Buying or restoring Pro connects the purchase to your Photos to Reels account. Our service processes an account-linking token, Apple transaction and original-transaction identifiers, the product, purchase and expiry dates, signed verification data, renewal or revocation status and whether the transaction is a test purchase. These records are used to verify access, handle renewals and refunds, prevent a purchase from being claimed by another account, and support restoration. They are separate from anonymous bug-report aggregates.

The Mac app can keep an encrypted Apple-signed purchase proof on your device for limited offline Pro access. Offline access lasts no longer than the subscription expiry or 24 hours from Apple’s signed verification time, whichever is earlier; internet access is needed to refresh it and to use cloud services. Purchase data is not included in portable projects. Disconnecting the app account does not cancel an Apple subscription or automatically erase its verified local license. Manage billing through Apple; see Mac App Store support. Transaction records may be retained for the purposes explained under Your choices below.

The iOS app uses Apple-verified current subscription information available on the device. This may support local Pro offline while the entitlement remains valid, up to its recorded expiry or when Apple reports revocation. It does not use the Mac edition’s separate 24-hour offline purchase-proof cache. Purchases, restoration and cloud verification require internet access. iOS purchase information is not included in portable projects. Disconnecting the Photos to Reels account does not itself erase a valid Apple entitlement or cancel Apple billing. See iPhone and iPad support.

Optional cancellation feedback

If you answer cancellation questions, we process the selected reason and improvement categories to understand why you are leaving and improve the service. Answering is optional and is not a condition of cancellation. These billing choices may be associated with your subscription; they are separate from anonymous app bug reports. No free-text response is required.

Optional marketing emails

Signing in with Google, buying Pro or receiving complimentary access does not subscribe you to marketing emails. The separate email preference is unchecked by default. You may choose to receive Photos to Reels tips, product news and offers, decline, or skip it without affecting your app access. Change or withdraw your choice in My account at any time. Billing and essential account communications are separate.

We store your current choice and a server-recorded history of changes, including the time, consent wording/version and website source, so we can honor and document your preference. Consent is tied to your verified account email; a changed email requires a new choice. This preference feature does not send marketing emails or share your address with a mailing-list provider. Use our secure account-deletion page to remove your account and preference records. If self-service deletion is unavailable for your account, contact support to request deletion.

Support and website operations

If you email support, we receive the information you send and use it to respond. Please avoid sending private media, passwords, API keys or payment-card details. Firebase and Google Cloud provide website hosting and account services and may process the network and operational information needed to deliver and protect them.

Analytics and storage

Optional Google Analytics on collagepop.app measures visits to public information pages only after you choose Accept analytics; Decline analytics is equally available. Acceptance loads Google Tag Manager and Google Analytics and may store analytics cookies. Page information is limited to a public address without its query or fragment, a fixed title and the referring website’s origin. We do not track form entries, email addresses, photographs, projects or captions. Advertising features and Google signals stay off. Account, billing, device-connection, review and deletion pages, query strings and unrecognized fragments are excluded. Google also receives analytics-cookie identifiers, standard browser/device information and connection information including your IP address under Google’s privacy policy. Use Analytics settings on a public page to change your choice. Declining disables analytics, removes this site’s analytics cookies and reloads an already measured page when the refusal can be saved safely. If browser storage fails, analytics stays off on the current page. Choices expire after 180 days. Browser privacy signals default to off unless you explicitly accept despite the signal. This describes the website only. Essential browser storage may separately maintain sign-in and prevent duplicate checkout attempts. Signing out ends the website session on this browser.

Your choices

You can use the application’s local media workflows without uploading media or connecting an online service. To request deletion of your account or associated cloud data, follow our secure account-deletion page. If self-service deletion is unavailable for your account, contact support to request deletion. We may need to verify your identity and retain transaction records needed for legal, financial, dispute or fraud-prevention purposes.

Contact

Privacy and account questions: jd@wildwoodai.com. Service provider: Wildwood AI LLC.