NOBODY Files — Privacy Policy

Version 2026-10-20. Previous versions: https://itsnobody.net/FILES/legal/archive

This Policy is published in Hebrew and in English. If the two versions differ, the Hebrew version prevails, unless mandatory law requires otherwise. Users of the app in other languages read the English version.

In short

1. Who is responsible

1.1. NOBODY Files is operated by Yakov Ganam, a sole proprietor registered in Israel under business number 209301860, trading as ITSNOBODY.NET, 16 Yitzhak Ben Zvi St., Apt. 14, Petah Tikva 4937556, Israel ("we", "us" or the "Operator"). We decide how and why the personal data described in this Policy is processed, and we are the owner of the database for the purposes of Israel's Privacy Protection Law, 5741-1981, and the controller for the purposes of the GDPR where it applies.

1.2. Privacy requests: privacy@itsnobody.net. Support: support@itsnobody.net.

1.3. This Policy covers the NOBODY Files app for Android and, when it becomes available, for iPhone and iPad (the "App"), our account, purchase and cleanup-credit services, and the pages at https://itsnobody.net/FILES. It also describes what the App does only on your device, because access to your photos and files affects your privacy even when nothing is uploaded.

2. What stays on your device

2.1. With the permissions you choose, the App reads your photos, videos and files and their details: names and folders, size and type, dates, image dimensions, video length, the camera details and the location recorded in a photo, and, on Android, storage information, the list of installed apps and when each was last used (for the unused-apps tool). On iPhone and iPad it reads the photo library's details, such as whether a photo is a favourite, a screenshot or a Live Photo and which albums it is in.

2.2. On your device, the App's AI models and rules create: quality and cleanup scores and the reasons for them; groups of duplicates and similar photos; perceptual fingerprints and numerical descriptions (embeddings) of photos for search and memories; an estimate of whether a photo shows people or pets; a mark for photos that may be intimate; memories with their titles and short descriptions; the location events shown in the location screen; and, if you teach the App your taste, your marks and a small model layer learned from them. What you type into the App's search stays on the device.

2.3. The App does not detect or count faces, does not create face templates, does not recognise the same person in different photos, and does not group or name people.

2.4. The App also keeps on the device its settings, your consent versions and times, the list of items it cleaned with their sizes, the Recycle Bin and its records, and the memories you hid, renamed or marked.

2.5. None of this is uploaded to us. On Android, the App's database is encrypted (SQLCipher), Android backup of the App is turned off, and the Recycle Bin is in the App's own storage. On iPhone and iPad, the App's data is protected by iOS Data Protection and may be included in your device backups (iCloud Backup or a computer backup) according to your settings, under Apple's terms.

2.6. The App never opens, shares or hands a file of yours to another app, and it gives no other app access to your files.

3. What leaves your device

This section lists every connection the App makes. The App sends no file names, paths, photos, videos, fingerprints, embeddings, scan results, descriptions or locations of your files to us.

3.1. Your account

When you create an account or sign in, we receive your email address and password over an encrypted connection. We keep a salted password verifier, never the password itself. We also keep a user number, sign-in sessions and their times, whether your email is verified, the versions of the Terms you accepted with their fingerprint and time of acceptance, and account-deletion requests. Email verification codes and password-reset links are single-use, expire after 15 minutes, and are stored only as one-way digests.

We send you transactional emails only: a verification code, a password-reset link and a notice that your password was changed. They are sent from support@itsnobody.net through Cloudflare.

3.2. Purchases and cleanup credit

When you buy, we receive from the App the product, the store's purchase or subscription token and order number, and we check them with Google Play (the Google Play Developer API) or with Apple (the App Store Server API). We keep the order and subscription state, the credit balance and its history (a ledger).

For cleanup credit, the App sends us only totals: the number of bytes a cleanup requests and actually cleans, the bytes restored for a credit return, and random identifiers for each operation. It never sends the names, paths or sizes of the individual files. When a cleanup or a restore covers a single file, the total is necessarily that file's size.

On Android, Google Play receives, with a purchase, a one-way coded reference to your account (a SHA-256 value), not your email or user number. On iPhone and iPad, Apple receives your NOBODY Files user number (a random identifier, not your email) so that the purchase can be matched to your account. Google and Apple process the payment themselves; we never receive card or payment details.

3.3. The optional map

If you open the map in the location-events screen, the App loads map images ("tiles") for the area shown. On Android they come from OpenFreeMap (tiles.openfreemap.org); on iPhone and iPad they come from Apple Maps. The map provider receives your IP address, the time and the requested map area, and ordinary device or app headers. The map can show the area where your photos with a recorded location were taken, so these requests can reveal approximate places (down to the level of a neighbourhood) where you took photos. On Android, the App asks before loading the map for the first time and shows the attribution of OpenFreeMap, OpenMapTiles and OpenStreetMap on the map. The photos and the details of your events are not sent.

3.4. Reporting a description

If you choose "Report this description" in Memories, the App sends us the number of that description in the description bank, the bank's version, the reason you picked, the platform and the App's version. It does not send the photo, any detail of the photo or the memory, or your account. We use reports to remove or fix descriptions.

3.5. Crash and performance reports on iPhone and iPad

The iPhone and iPad App sends crash reports, reports of the App freezing and a sample of about 30% of its performance measurements to Sentry (Functional Software, Inc.). They contain technical data about the device and the App (model, iOS version, App version, memory and the code involved), a record of recent App events (screens opened, controls tapped, and requests to our service with their address and result), and a random identifier that Sentry creates for the installation. They contain no photos, screenshots, screen layouts or the content of your files, and error reports do not include your IP address. The Android App has no crash-reporting, analytics or advertising library.

3.6. A diagnostic report you choose to share (Android)

On Android, you can choose to share a diagnostic report after a crash. The App first removes messages, file paths, email addresses, links and tokens, and then opens Android's share menu; the report goes only to the app and recipient you choose, who handle it under their own terms. The App's database and its recovery copies can never be shared.

3.7. Services of the device's platform

Google Play and Apple process purchases and subscriptions under their own privacy policies. On Android, Google's billing library inside the App communicates with Google Play. If you save your password, Android's or Apple's password manager stores it, not us. On iPhone and iPad, when you view a photo stored in iCloud Photos, iOS may download it from Apple. These providers act under their own terms.

3.8. Our website

When you visit https://itsnobody.net/FILES, Cloudflare hosts the pages and processes connection data such as your IP address. Cloudflare may run an automatic bot check and set a strictly necessary security cookie (__cf_bm). We use no analytics or advertising cookies. If you request early access, we keep your email address, the time and the version of your consent for up to 180 days and use the address only to contact you about access to NOBODY Files; the form's own notice explains it at https://itsnobody.net/FILES/access-privacy.

3.9. Emails you send us

Messages you send to support@itsnobody.net or privacy@itsnobody.net are received and stored by our mailbox provider, Zoho Mail. We use them only to answer you and to keep a record of requests we must keep by law.

4. Why we use your data and on what basis

4.1. Account, purchase, subscription and credit data: to provide the Service you asked for and to perform our agreement with you.

4.2. Security, fraud prevention and limits on request rates: our legitimate interest in protecting you and the Service. For rate limits we keep only a keyed one-way code of your IP address, for a short time.

4.3. Accounting, tax and other legal duties: to comply with the law.

4.4. The processing on your device: to give you the features you turn on. Permissions are optional, and you can refuse or withdraw them in the device settings; the related feature may then not work.

4.5. You do not have to give us personal data by law. Without an email address and password we cannot open an account, and without an account you cannot buy credit or the Memories subscription. Scanning and seeing results do not need an account.

5. Who receives data

5.1. We do not sell personal data and do not share it for advertising.

5.2. Service providers that process data for us: Cloudflare (hosting of our service and website, database, sending of transactional email, network security) and Zoho Mail (our mailbox). Google (Google Play) and Apple (App Store) process purchases. OpenFreeMap or Apple Maps serve map tiles if you open the map. Sentry receives crash and performance reports from the iPhone and iPad App.

5.3. We may also disclose data when the law or a valid legal process requires it, to protect rights and safety, or as part of a transfer of the Service, with the notice the law requires.

5.4. These providers may process data outside Israel and outside your country. Where the law requires a basis for such a transfer, we rely on an adequacy decision, approved contractual safeguards or another lawful basis.

6. How long we keep data

6.1. Data on your device stays until you delete it in the App, clear the App's data or uninstall the App. The Recycle Bin keeps each item for the period you chose (30 days unless you changed it).

6.2. Account, purchase and credit records stay while your account is active and are deleted when you delete the account (section 7). Only detached, pseudonymous transaction facts (a coded reference instead of your account, and the product, amount, currency, date and status, without your email, user number or purchase tokens) may be kept for up to 2557 days (about seven years) for accounting and tax duties; they cannot restore the account or its benefits.

6.3. Unused verification and password-reset challenges expire after 15 minutes and are removed by scheduled cleanup. Rate-limit records expire within hours.

6.4. Description reports are kept for up to 180 days. Safety reports received from earlier versions of the App are kept for up to 180 days and deleted with the account. Cloudflare keeps technical logs of a sample of requests to our service (which may include the IP address and the request's details) for up to 7 days. Sentry keeps iPhone and iPad crash and performance reports for the period of our Sentry plan, and then deletes them. Early-access requests are kept for up to 180 days.

7. Your rights and choices

7.1. You can refuse or withdraw any permission, delete items from the Recycle Bin or restore them, clear the App's data, uninstall the App, and delete your account.

7.2. To delete your account: in the App (Settings, then Account); on the page https://itsnobody.net/FILES/legal/delete-account; or, if you cannot sign in, by writing to privacy@itsnobody.net from the email address of the account. We will delete the account within 30 days of a request we can verify. Deleting the account removes the account, sign-in, entitlement, subscription, ledger, reservation and order records we hold. It does not delete data on your device and does not cancel a subscription in Google Play or Apple.

7.3. Under Israeli law, you may ask to see the personal data we hold about you and ask us to correct or delete data that is wrong, incomplete or not needed. Where the GDPR, the UK GDPR or another privacy law applies, you may also have rights to restriction, portability and objection, to withdraw consent and to complain to a supervisory authority; in Israel, that is the Privacy Protection Authority. Write to privacy@itsnobody.net. We may need to verify your identity, and we will not treat you differently for exercising a right.

7.4. Most of your data is only on your device. We cannot see or delete it remotely; you control it with the App's controls, by clearing the App's data or by uninstalling the App.

8. Security

8.1. Connections to our service use HTTPS, and the Android App blocks unencrypted connections. Sign-in secrets are kept in Android Keystore or the iOS Keychain. Our service keeps salted password verifiers, not passwords, and limits access to its data. On iPhone and iPad, the App checks when it starts whether the device appears to be modified (jailbroken) and, if so, shows a warning; the result is not stored or sent.

8.2. No measure removes every risk: an unlocked or compromised device, screenshots or a software defect can expose data. We will handle and report security incidents as the law requires.

9. Children

The Service is for people aged 18 and over and is not directed to children. If you believe a child has given us account data, write to privacy@itsnobody.net and we will delete it.

10. AI outputs

10.1. Scores, recommendations, labels, memories and descriptions produced by the App's models are suggestions and can be wrong. The App makes no decision with legal or similarly significant effects; you review every deletion.

10.2. The short descriptions in Memories were written in advance with the help of AI and are chosen automatically on your device; they may be inaccurate. No photo was sent anywhere to write them.

11. Changes and contact

11.1. When the App, our providers, our data practices or the law change, we may update this Policy. Every change gets a new version date, and earlier versions remain available at https://itsnobody.net/FILES/legal/archive. If a change is material, we will tell you in the App before it applies and, where the law requires, ask for your consent.

11.2. Contact: Yakov Ganam (ITSNOBODY.NET), 16 Yitzhak Ben Zvi St., Apt. 14, Petah Tikva 4937556, Israel. Privacy: privacy@itsnobody.net. Support: support@itsnobody.net.