Privacy Policy

Account information. When you sign in with Google we receive your name, email address, and profile picture from your Google account, which we store to create and identify your MyFrames account.

Frame configuration. We store the frames you create: their names, which photo source they use, and playback-related settings.

Google Photos selections. When you pick photos with the Google Photos picker, we store the identifiers of the photos you picked and a reference to the picker session that granted access, not the photos themselves.

iCloud shared albums. If you link a public iCloud shared album, we fetch that public page only to extract the public image URLs, which we store so your frame can display them.

Sign-in tokens. We store the OAuth tokens Google issues for your account so your frames can load your picked photos without you signing in again. Tokens are used only server-side for this purpose.

MyFrames requests the read-only Google Photos Picker scope (https://www.googleapis.com/auth/photospicker.mediaitems.readonly). This scope only ever grants access to the specific photos you explicitly select in Google's picker; MyFrames cannot browse or search your photo library.

The photos you pick are used for exactly one thing: displaying them in your own frames' slideshows. When a slideshow plays, our server relays the photo from Google to your display and the photo is cached only on that playback device so your frame keeps working after Google's temporary photo access expires. Photo files are never written to our servers or databases.

MyFrames's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We do not sell your data or share it with third parties.
• We do not use your photos or data for advertising.
• We do not use your photos or Google user data to train AI or machine-learning models.
• No human reads your Google user data, except with your explicit permission (e.g. a support request), when required for security or legal reasons, or in aggregated, anonymized form.

Your account data and frame configuration are kept while your account is active. Deleting a frame in Settings removes its stored photo references immediately. To delete your account and all associated data, contact us at support@myframes.app.

You can revoke MyFrames's access to your Google account at any time from Google Account → Third-party access. Photos cached on a playback device can be removed by clearing that browser's site data.

All traffic between your devices, our servers, and Google is encrypted with HTTPS. Sign-in tokens are stored in our database, accessed only by the application server, and never exposed to other users or third parties.

MyFrames uses only the cookies required to keep you signed in. There are no advertising or cross-site tracking cookies.

MyFrames is not directed at children under 13, and we do not knowingly collect personal information from them.

If we make material changes to this policy, we will update this page and its effective date. Continued use of MyFrames after a change means you accept the updated policy.

Questions about this policy or your data? Contact us at support@myframes.app.