Privacy Policy

Last updated: April 3, 2026

Treemarks Sync (“the app”) is a photo and video backup application for Android. This policy explains what data the app accesses, how it is used, and where it is stored.

Data we access

The app accesses the following data on your device:

• Photos and videos — file metadata and file content for upload.
• Photo location (GPS) — Android strips GPS coordinates from photos when another app reads them. Treemarks requests the ACCESS_MEDIA_LOCATION permission to preserve the original GPS data in your backup. Without this, your backed-up photos would lose their location — making it an incomplete backup. The GPS data is uploaded to your own storage bucket and is never sent to Treemarks or any third party.
• Device identifier — Android ID, used to associate uploads with a device. Not shared with third parties.
• Device model — manufacturer and model name, stored as upload metadata.
• Network state — to determine WiFi/mobile connectivity for respecting your upload preferences.

Where your data goes

Your photos and videos are uploaded directly to your own S3-compatible storage bucket. The app does not upload your files to any Treemarks server. You control:

• Which S3 provider to use (AWS, Impossible Cloud, Backblaze, Hetzner, or any S3-compatible service)
• Which bucket to upload to
• The access credentials (stored locally on your device)

If you subscribe to Treemarks storage, we provision a dedicated storage bucket for you at Impossible Cloud. Even then, the bucket is yours:

• Your files are stored in your own dedicated bucket — not shared with other users
• You can request your S3 credentials at any time to access your bucket directly
• If you cancel your subscription, your data remains available for 30 days for download
• Treemarks never locks you in — you can migrate your data to any S3-compatible provider at any time
• For non-US residents, your data is stored exclusively in European data centers. Treemarks is a European company with no US operations and is not subject to the US CLOUD Act or FISA Section 702

Data we do NOT collect

• We do not collect analytics or usage data
• We do not use advertising SDKs
• We do not track your location
• We do not share any data with third parties
• We do not have access to your S3 credentials or your uploaded files

Local storage

The app stores the following data locally on your device:

• Upload journal — tracks which files have been uploaded to avoid duplicates
• S3 credentials — endpoint, bucket, access key, secret key (stored in Android DataStore)
• Preferences — upload mode, sort order, selected folders

This data is not backed up to Google and is deleted when you uninstall the app.

Treemarks subscription (optional)

If you subscribe to Treemarks storage, the app generates RDF/Turtle metadata sidecars alongside your photos for indexing and search. Payments are processed by Mollie; we do not store payment details. Authentication is handled via Keycloak. Your photos and videos are never stored on or processed by Treemarks servers — they go directly from your phone to your S3 bucket.

Permissions

• READ_MEDIA_IMAGES / READ_MEDIA_VIDEO — access your photos and videos for upload
• ACCESS_MEDIA_LOCATION — prevent Android from stripping GPS coordinates from your photos during backup. Without this permission, your backed-up photos would lose their location data. The GPS data goes only to your own storage bucket.
• INTERNET — upload files to your S3 storage
• FOREGROUND_SERVICE — keep uploads running when the app is in the background
• POST_NOTIFICATIONS — show upload progress notifications

Children

The app is not directed at children under 13. We do not knowingly collect data from children.

Changes

We may update this policy. Changes will be posted on this page with an updated date.

Contact

Questions about this privacy policy? Contact jeroen@kransen.nl.