Neo Gallery · Android

Privacy Policy

How Neo Gallery handles your media, service data and privacy choices.

Effective and last updated: 21 October 2026

Application: Neo Gallery (NeoGallery)
Package: com.neogallery.app
Developer: Neo Gallery Team
Privacy contact: neogallery.support@gmail.com

Your media and service data are different.

Photo management and private-vault encryption take place on your device. Neo Gallery does not provide a developer-operated cloud photo backup or require an app account. Advertising, usage analytics, crash reporting, purchases and model downloads can involve network access and third-party processing.

1. Photos, videos and local app data

The app accesses the photos and videos you permit it to access, including file metadata, to display, organize, edit and manage your library. Album information, preferences, favourites, thumbnails, recycle-bin records and vault data are stored on your device. The app does not automatically upload your media library or vault contents to a Neo Gallery server.

If you choose Share, selected files are made available to the destination app you choose. That app's handling of those files follows its own policy. Files saved to shared storage may also be accessible to other apps or backup services that you independently authorize. Neo Gallery cannot control those separate services.

There is no Neo Gallery account registration. A vault PIN or pattern is a local access credential, not a cloud-account password.

2. Advertising, analytics and other services

Device and installation identifiers are pseudonymous, not necessarily anonymous. They and other technical records can be personal data under applicable law. The following services process data according to their features, your choices and device settings.

Google AdMob and consent messaging

The free version uses Google Mobile Ads for banner, interstitial, app-open and opt-in rewarded advertising. Ad services may process IP addresses (including an estimate of general location), advertising and app/device identifiers such as the Advertising ID and App Set ID, ad or app interactions, and diagnostic information. Purposes include delivering and measuring ads, analytics, security and fraud prevention. Availability and personalization depend on consent, location, device settings and ad-service configuration. See Google's Privacy Policy and the Mobile Ads data disclosure guide.

Google's User Messaging Platform presents consent messages and privacy options where applicable. In the app, use Settings → Ad & Privacy Preferences when that option is available to review your advertising choices. You can also use Android's advertising controls to reset or delete your Advertising ID; the exact settings path varies by device. These controls do not delete previously processed records or automatically turn off every diagnostic service.

Firebase Analytics and Crashlytics

Firebase Analytics helps us understand app usage and improve the experience. It can process app-instance identifiers, device/OS and app information, sessions, engagement and automatically collected usage events. Crashlytics helps diagnose failures using crash traces, exception information, installation/session identifiers and device/app details. These services are not used to upload your photo library or vault contents.

Firebase Analytics Advertising ID collection is disabled in the app. This is separate from AdMob's advertising-ID processing. Advertising privacy choices are not an app-wide analytics or crash-reporting switch. See Firebase privacy information and Analytics data collection information.

Google Play purchases and updates

Google Play handles subscription checkout and payment details. The app receives purchase information such as product identifiers, purchase tokens, purchase timing and status to determine Premium access and restore purchases. Neo Gallery does not receive your full payment-card details. Google Play's update service checks app/version and update availability information. See Google's Privacy Policy.

ML Kit subject segmentation

Background removal and cutout use on-device ML Kit subject segmentation. Images supplied to this on-device feature are processed locally, rather than uploaded for cloud image processing. Google Play services may download model files and process service-usage/device diagnostics. See ML Kit Terms & Privacy.

What Premium changes

Ads are suppressed while your Premium entitlement is active. Premium does not disable Firebase Analytics or Crashlytics, erase historical service records, or cancel processing needed for purchases and updates.

Special access stored on your device

Developer-issued Special access codes are checked locally. The feature does not transmit the code to us or log it. The app stores the access state and failed-attempt cooldown in an authenticated, encrypted record protected by Android Keystore and excluded from app backup. The entered code is not saved. Deactivate removes the local Special access grant; clearing app storage or uninstalling also removes it. This does not disable Analytics or Crashlytics or change the other service-data practices described above.

3. Device permissions

Photos and videos: READ_MEDIA_IMAGES and READ_MEDIA_VIDEO on Android 13+, with READ_MEDIA_VISUAL_USER_SELECTED for supported selected-media access on Android 14+. Access is limited by the permission you grant.
Legacy storage: READ_EXTERNAL_STORAGE through Android 12L/API 32 and WRITE_EXTERNAL_STORAGE through Android 10/API 29, where needed for media access and saving edits.
Biometrics: USE_BIOMETRIC/USE_FINGERPRINT allow supported vault-unlock authentication through Android. The app does not receive raw fingerprint or face templates.
Wallpaper: SET_WALLPAPER supports your explicit wallpaper action.
Network, billing and SDK services: Internet/network-state access supports the services above; Google Play Billing permission supports purchases. Included SDKs may declare wake-lock, install-referrer, advertising-ID and Android AdServices permissions for their service functions. A declared permission does not mean every device or session uses it.

You can change media and other user-controlled permissions in Android Settings → Apps → Neo Gallery → Permissions. Limiting access can limit the affected feature.

4. Vault security and recovery

Vault file contents use local AES-256/GCM encryption with keys managed by Android Keystore. Hardware protection depends on the device and its Keystore implementation; StrongBox protection is not promised. Android handles biometric authentication where enabled. No security method can guarantee protection against every threat.

We do not maintain a remote vault backup or recovery key. We cannot recover vault contents after their local data or key is lost. Restore or export any vault files you need before clearing app storage or uninstalling. The app disables Android's app-data backup flag; this is not a backup service for your media.

5. Retention and deletion

Shared photos and videos: remain in device shared storage until you delete them through the app or another authorized device tool. Uninstalling Neo Gallery or clearing its data does not by itself delete ordinary shared photos or saved exports.
App-private records, vault and recycle-bin copies: remain until deleted through applicable app controls, app-storage clearing or uninstall. Clearing app storage/uninstall removes the private data; it does not remotely erase other apps' copies.
Recycle bin: eligible entries older than 30 days are removed when the app next runs its cleanup during initialization. Removal is not guaranteed at an exact deadline while the app is closed. Recovery copies whose original removal was not confirmed may be retained separately to avoid losing the only copy. You can restore or permanently delete items earlier through the app.
Crashlytics: Google's published policy describes retaining crash traces and associated identifiers for 90 days before starting removal from live and backup systems.
Analytics: retention depends on the Analytics property configuration and record type. Google's controls provide 2- or 14-month periods for user-level data; activity resets and aggregate reports can be treated differently. These are provider settings, not a promise that all records disappear exactly 14 months after installation. See Analytics retention controls.
Advertising, purchases and other provider records: follow the relevant provider's retention rules and applicable obligations; they are not deleted simply by uninstalling this app.
Support correspondence: is retained as needed to handle the enquiry and related follow-up, disputes or applicable legal obligations. You may request deletion as described below. Any necessary retention exception will be explained in our response.

6. Support, privacy requests and your choices

If you contact support, we receive your email address, message and any attachments you choose to send. This correspondence is handled in our email provider's systems to respond to your request. Do not send vault credentials, payment-card details or private media that is not needed for the enquiry.

Depending on applicable law, you may request access, correction or deletion, object to or restrict processing, request portability, or withdraw consent where processing relies on consent. Contact neogallery.support@gmail.com. We may request limited information to verify and locate the relevant records. We handle requests within applicable legal time limits and explain what was deleted, cannot be identified, or must be retained. We do not promise that an email address can identify every pseudonymous SDK record.

See the data deletion instructions for local-data steps and an email request link. Where relevant, service delivery, responding to enquiries, security and service improvement, legal obligations, or your consent provide the basis for processing. You may also contact your local data-protection authority about your rights. Service providers may process data in countries other than yours under their applicable privacy terms.

7. This website

These pages are hosted on GitHub Pages. They include no site analytics scripts or advertising scripts. GitHub may process request information such as IP addresses and browser/request details to operate and secure hosting, under the GitHub Privacy Statement. Clicking an email link opens your email application; no deletion form is submitted automatically. External links are governed by the destination's policies.

8. Children, security and changes

Neo Gallery is intended for users aged 13 and above and is not directed to children under 13. If you believe a child has supplied personal information through our support or services, contact us so that we can investigate and take appropriate action.

Integrated Google services use encrypted connections for supported network communications. Local vault encryption and Android's app-storage protections reduce risk but do not make data loss or unauthorized access impossible.

We may update this policy when practices or services change. The date above identifies this version. Material changes and any required consent will be handled as required by applicable law.

Related: Terms of Service · Delete data · App homepage

Documentation for Neo Gallery 1.1.8 (version code 10).

Purchase validation and retry

The app verifies Google Play purchase signatures using the app-specific public key. It refreshes purchase ownership with Google Play and may retry unfinished purchase confirmation in the background when a network is available. A device-bound local entitlement cache supports temporary offline use. No new Neo Gallery account or developer-operated purchase server is used by this version.