Privacy Policy

Effective October 14, 2026

The short version

oCIS Gallery is a photo and video gallery for a self-hosted ownCloud Infinite Scale (oCIS) server, whether it's your own or one run by someone you trust. The publisher of oCIS Gallery, Allen J. Blodgett ("we", "us"), does not run a server for it and does not collect, receive, store, sell or share your photos, your videos, your account details or your usage.

• No account with us. You sign in to an oCIS server that you or someone you trust runs.
• No analytics, advertising, tracking or crash-reporting code in the apps.
• The apps talk to the oCIS server you choose, and to nothing else we control.

What this policy covers

This policy covers all parts of oCIS Gallery:

• The web app: an extension installed on an oCIS server, which runs in your web browser inside oCIS.
• The thumbnail generator: a script installed on the server that indexes your gallery folders and makes thumbnails.
• The client apps: oCIS Gallery for iPhone, iPad and Apple TV, and any future client apps, such as one for Android.

It does not cover the following, which have their own policies:

• The oCIS server you connect to. Whoever runs that server controls the data on it, and their privacy policy applies to it. If you run your own server, that's you.
• The website you downloaded oCIS Gallery from.
• Apple, Google, ownCloud and OpenStreetMap (see "Other services" below).

Where your data goes

oCIS Gallery shows photos and videos that already sit on an oCIS server. All traffic goes directly between your device and that server. None of it passes through us.

We can't see any of this data and have no way to reach it.

The client apps

What they store on your device

• Accounts: the server address and account name for each account you add.
• Credentials: sign-in tokens, kept in the system keychain. On iPhone and iPad, this includes any Apple TV sign-in tokens you create, so you can show them again later.
• Preferences: things like grid layout and sort order.
• A cache of library listings and thumbnails, so the gallery opens quickly. Signing out of an account clears that account's cache.
• Offline copies: photos and videos you choose to keep on your device. They appear in the Files app under On My iPhone (or iPad) › oCIS Gallery, and you can delete them there.

Your device's own backups (for example iCloud Backup) may include this data, under that backup service's terms. Deleting the app removes the data it stored, except that the operating system may keep keychain items. Sign out of your accounts first if you want those removed too.

Permissions

The apps ask for a permission only when you use the feature that needs it:

• Add to Photos: to save a photo or video to your photo library when you ask. This permission lets the app add items, not read your library.
• Local network: to reach an oCIS server on your home or office network.

The apps don't use your camera, microphone, contacts or device location.

Playing on a TV

When you play a video over AirPlay or on a connected display, your device gives that screen a time-limited link to the video on your oCIS server. The video then streams straight from your server to that screen.

The web app and thumbnail generator

Both run on your oCIS server, which you control.

• The web app runs in your browser inside oCIS. It reads your files and writes gallery data to the .gallery folder in your personal space, using your own oCIS sign-in. It doesn't contact any other service.
• The thumbnail generator runs on your server as the account whose gallery it indexes. It authenticates with an app token that you create and store in a configuration file on your server. It talks only to your oCIS server.

Other services

• Apple and Google run the App Store and Google Play. They may collect data about downloads and app use under their own policies. If you choose to share crash reports or usage data with app developers in your device settings, Apple or Google may pass anonymous crash and usage statistics to us. They contain no photos and no account details. We use them only to fix problems.
• In-app purchases: if you buy a paid feature, Apple or Google handles the payment. They tell the app only what you are entitled to. We don't receive your name, payment details or store account.
• OpenStreetMap: when a photo has a location, the web app can show a link to it on a map. Nothing is sent until you click the link. Clicking it opens openstreetmap.org with those coordinates, under OpenStreetMap's privacy policy.
• ownCloud: oCIS is software made by ownCloud. We are not affiliated with ownCloud, and running oCIS is governed by its own terms.

Children

oCIS Gallery is not directed at children under 13, and we do not knowingly collect personal information from anyone, of any age.

Your rights

Because we don't collect personal data, we hold nothing of yours to access, correct, export or delete. To exercise privacy rights over data on an oCIS server, contact whoever runs that server. On your own devices, you can remove everything the apps store by signing out and deleting the app.

Security

The apps keep credentials in the system keychain and connect to your server over the address you give them. Use HTTPS for any server reachable from the internet. The security of the server, and of the data on it, is the responsibility of whoever runs it.

Changes to this policy

If what oCIS Gallery does with data changes, we will update this policy and its effective date before the change ships. If an update means data would leave your devices or your server in a new way, we will say so in the release notes.

Contact

Questions about this policy: hello@allenjblodgett.com