On this page
About this policyPhotos, videos and on-device processingOptional usage analytics and crash diagnosticsOptional rewarded ads and privacy choicesModel downloads and service providersLocal logs, storage and backupsRetention, deletion and withdrawing choicesSecurity and sharingChildren and minorsUsing this websiteUpdates and contactAbout this policy
This policy applies to the TimeGrove iOS app (also called Timeglow / 拾光 in the app) and this support website provided by silverfish.ltd. It explains how information is handled and the choices available to you. Contact: silverfisher@cleanweb.info.
The app requires no account and offers no purchases or subscriptions. Some actions offer optional rewarded ads in exchange for one action credit. Photo classification and semantic search run on your device.
Photos, videos and on-device processing
With your permission, the app uses iOS Photos access to work with the photos, videos and related metadata you allow, for classification, previews, search, editing, favorites and album operations. You can grant access to selected photos or revoke access in iOS Settings.
We do not upload your photos, videos, photo identifiers, album names or original search text to our servers or send them to a cloud AI service. Models run on your device. Classification records, manual labels, keep marks, search indexes and preferences are stored locally.
iOS may download items from your iCloud when you preview them. Deleting photos requires confirmation in the app and in iOS. If you choose to share photos, export a backup or export logs, the content goes to the destination you select in the system share sheet. Review it before sharing.
Optional usage analytics and crash diagnostics
Usage analytics and crash uploads are both off by default on a new installation. You can opt in to each separately, or turn either off, in Me → Data & privacy. Saved choices are retained. These options are not required to organize or delete photos or create albums.
| Optional feature | Information and purpose |
|---|---|
| Usage analytics | Google Firebase Analytics processes allowed metrics such as feature interactions, permission status, operation outcomes, item counts, duration and search character counts, together with installation identifiers, device and app information, and approximate region inferred from IP, to understand usage and improve the app. |
| Crash diagnostics | Google Firebase Crashlytics processes crash stacks, sanitized error codes, runtime environment, device and app information, installation-related identifiers and limited feature steps to investigate stability issues. |
These reports do not include photos, videos, original search text, album names or complete local performance logs. Firebase analytics does not enable advertising identity support. The app does not request the IDFA or cross-app tracking permission. Installation-related identifiers should not be described as completely anonymous.
Turning an option off stops subsequent reporting for that option. When you disable crash uploads, the app requests deletion of unsent reports; the SDK may still retain diagnostic files locally. Turning an option off does not automatically delete records already received by the service.
Optional rewarded ads and privacy choices
Batch deletion and new album creation each include one free successful action. You may then choose to watch a Google AdMob rewarded ad for one action credit. Closing early may not earn a reward; cancelled or failed actions do not consume credits. When ads are unavailable, you can continue free. Credits are stored on this device and cannot be transferred or redeemed for cash.
The advertising SDK is initialized and ads are requested only after you tap to watch; no launch ad is preloaded. Requests are non-personalized, use a general-audience content limit and disable publisher first-party ID. We do not read the IDFA or require cross-app tracking permission, and do not provide photos, videos, album names, original search text, photo identifiers or classification content to the ad service.
Google Mobile Ads SDK may still process IP addresses and inferred approximate location, device- or app-scoped identifiers, ad impressions and interactions, device and app information, crash data and performance diagnostics for ad delivery, measurement, fraud prevention and service diagnostics. Non-personalized ads do not mean no data collection or no privacy choices. Ad processing is separate from optional Firebase analytics and crash-upload settings; turning those off does not disable ads you choose to request.
The app uses Google UMP to update consent status and offer applicable consent, refusal and management choices, and loads ads only when UMP permits requests. Manage applicable choices again in Me → Ads & free actions → Ad privacy options. If an ad cannot be requested, you can continue free. Ad reporting is available from the ad choice screen and Me. Google processes and retains advertising information under its policies and may process it outside your country. See Google advertising and privacy and the Google Privacy Policy.
Model downloads and service providers
The default classification model is bundled with the app. The optional EmbeddingGemma 2 model and semantic search require a model download of approximately 388 MB, which starts only after you confirm. The file is obtained from a pinned Hugging Face address. The download service receives the IP address and request information needed to deliver it, but not your photos or original search text. The verified model runs on your device and can be removed in Me → Model experiments.
Optional analytics and diagnostics are provided by Google Firebase. Service providers may process network requests or diagnostic information outside your country or region, under their applicable terms and privacy safeguards. We use these services only for the purposes described here and do not sell your personal information.
Local logs, storage and backups
Local performance diagnostics record operation timings and runtime state, without photo content, and are not automatically sent to us. You can turn recording off or choose to export a log in Me → Performance diagnostics. You decide whether to share the exported file.
Local settings, classification records and indexes remain in app storage for later use. Preview caches can be cleared or rebuilt. Clearing preview caches or removing a downloaded model does not delete photos. Removing the app normally removes data in its local container, but exported files, device or cloud backups, and your system Photos library must be managed separately.
Retention, deletion and withdrawing choices
We retain relevant information only as needed to provide features, handle support requests, investigate problems and improve stability. Server-side records from optional analytics and diagnostics are governed by the Firebase project retention settings and the provider’s retention rules; uninstalling the app or turning reporting off does not immediately erase them.
You can turn optional analytics and crash uploads off at any time and change Photos access in iOS Settings. To ask about, access, correct or request deletion of information we hold about you, contact silverfisher@cleanweb.info. We handle requests as required by applicable law and request only the information necessary to verify them. Because the app has no accounts, an email address alone may not identify installation-level diagnostic records; we will explain the available scope and necessary limitations.
Support emails and attachments you choose to send are used to respond to and handle your request. After resolution, we retain them only as needed for follow-up support, necessary records or legal obligations. Do not send sensitive photos, passwords or unrelated personal information.
Security and sharing
We reduce exposure through on-device processing, data minimization, optional reporting, restricted event fields and encrypted network connections. No storage or transmission method is completely secure. We do not send photos, album names, classification content or original search text to advertising services. Necessary information is shared only with providers that deliver the functions described here, or where disclosure is required by law or necessary to protect legitimate rights and safety.
Children and minors
Timeglow is intended for a general audience and is not operated as a service specifically directed to children. If a guardian believes that optional services or a support request have provided information about a minor that should not have been collected, contact us so we can investigate and take appropriate action.
Using this website
This website provides privacy information, help and email contact links. It has no accounts, comments or file upload features and does not load ads or additional website analytics scripts. The hosting provider may process IP addresses, access times and request information to deliver and secure the pages. Email links open your own email app and do not send a message automatically.
Updates and contact
We may update this policy when features or information practices change and will show the date here. Where a change requires renewed consent, we will provide appropriate information and choices.
Publisher: silverfish.ltd.
Privacy and support: silverfisher@cleanweb.info