Frameport collects nothing about you.

• There is no Frameport account, no Frameport cloud, and no analytics, advertising, tracking or crash-reporting service.
• Your photos and videos go directly from your phone to the Immich server you set up. Vexon Group LTD never receives or can see them.
• Frameport can only add files to your server. It can't browse, download, search, edit, share or delete anything in your Immich library.
• Everything Frameport remembers stays on your phone and is removed when you uninstall the app.

Frameport is made by Vexon Group LTD, which is the controller for the limited information described in this policy (essentially, messages you send us and basic web server logs). Because the apps never send us any personal data, Vexon Group LTD does not hold personal data about you from using them.

Frameport reads only the photos, videos and albums you give it access to, and only to back them up. It uploads the original files, without resizing, recompression or metadata changes, to the Immich server address you enter, using the upload key or sign-in you provide. Nothing passes through Vexon Group LTD or any other party in between.

Along with each file, Frameport sends the details Immich needs to store it: the file's original name (for example IMG_1234.jpg), its dates, and on Android whether you marked it as a favourite. On Android you can switch off “Keep original file names” in Settings, and files are then uploaded under a generated name instead.

Your Immich server is run by you or whoever you chose. How it stores, keeps and protects your files is governed by that operator, not by Vexon Group LTD.

Photos and videos often record where they were taken inside the file. Because Frameport uploads originals unchanged, that information travels inside the file to your own server. Frameport doesn't add, remove or alter it.

Frameport never reads your phone's current or past location and doesn't request device-location permission. On Android it does request the photo-location permission (ACCESS_MEDIA_LOCATION), only so that Android doesn't rewrite a file's own location data. That keeps the copy on your server identical to the original on your phone.

To do its job, Frameport keeps the following on your device only:

• your server address and upload credential;
• your backup selection and settings;
• a checksum (fingerprint) and status for each file, so it knows what is backed up, waiting or skipped;
• the details it needs to show what is left to back up, such as album names and each item's date, type and size, and small previews of your own local photos.

Credentials are stored in the Android Keystore or the iOS Keychain. Credentials and backup state are excluded from cloud backup, iCloud backup and device-to-device transfer, so they are not copied to a new phone. If you sign in with a password or OAuth to create an upload-only key, those sign-in details are used once and discarded; only the narrow upload key is kept.

Before uploading, Frameport sends your server a checksum of each file so the server can say whether it already has it. This goes only to your server.

If you save a second address for your home network, Frameport checks on Wi-Fi or Ethernet whether it responds and uses it if it does. It doesn't read the Wi-Fi network's name.

Frameport connects only to the Immich server you configure. Connections use HTTPS. Plain HTTP is possible only to a private-network address and only after you explicitly confirm it, so a server on your home network can be used. Traffic on that path is not encrypted, as with any other app on your network.

Frameport's notifications are created on your phone. They show progress and counts, never file names, thumbnails or your server's name. No push token is sent to Vexon Group LTD or anyone else. Permissions are used as follows:

• Photos and videos: only to read media you authorise for backup.
• Network: only to reach your Immich server.
• Notifications, background and foreground services, start at boot (Android): to show progress and to run and resume scheduled backups.

On Android 11 and later, Settings offers “Free up space” for photos and videos your server has already confirmed, that haven't changed since, and that are older than an age you choose. Frameport never deletes anything itself. It asks Android, which shows its own confirmation and moves the files to Android's trash, where they can be restored for 30 days. Nothing on your Immich server is changed or deleted.

Frameport can prepare a diagnostic report if you ask for one. It is built on request, has credentials, addresses, file names and media locations removed, and you can review all of it before choosing where to share it. Nothing is sent automatically, and nothing is sent to Vexon Group LTD unless you choose to send it, for example by emailing it to support.

Frameport has no advertising, analytics, crash reporting, tracking identifiers or third-party SDKs that collect data. We don't sell personal data and don't share it for advertising.

This site uses no cookies, analytics or advertising trackers. Like any web server, our hosting records standard technical logs (such as IP address, browser type and the page requested) to deliver the site and keep it secure, and these are kept for a limited time. We use this only for operating and securing the site, on the basis of our legitimate interest in doing so.

If you email us, we use your address and message to reply, and keep the correspondence as long as needed to resolve your request. Links to Google Play, the App Store, Immich and other sites are governed by those sites' own policies.

Frameport's data lives on your phone. Disconnecting a server removes its saved credential and connection details, and uninstalling the app removes everything it stored, without deleting any photo on your phone or on your server. To end Frameport's access to your server at any time, delete its upload key in your Immich account settings.

Files already on your server are under your control there; Frameport can't delete them. As no data about you reaches Vexon Group LTD from the apps, there is nothing for us to delete on your behalf.

Under UK and EU data protection law you can ask to access, correct, delete, restrict or object to the use of personal data we hold about you, ask for a copy of it, and withdraw consent where we rely on it. For the apps there is normally nothing to provide, but we will confirm that if you ask. If you are unhappy with our response you can complain to the UK Information Commissioner's Office or your local supervisory authority.

Frameport isn't directed at children and collects no data from anyone, including children.

The apps don't send personal data to us. Website logs and email may be processed by our hosting and email providers in the UK, EEA, US or elsewhere, using appropriate safeguards such as the UK IDTA or Addendum and EU Standard Contractual Clauses.

If Frameport's data practices change, we will update this page and the date above before the change takes effect, and describe significant changes in the app's release notes.