You approve the album. We protect the boundary.

What we receive

We receive your account details, your active album approval, eligible resources from that album, basic file details, search and source requests from your connected AI, and a record of what your AI opened. A raw resource crosses from your device to LensPermit’s sanitizer; the accepted stored copy is a sanitized WebP with source metadata stripped by default, not the original photo object.

Photos can contain private information. Put only photos you want to make available in the album you approve.

How we use it

• List regular albums so you can approve one active album
• Repeatedly scan only that album for eligible photo resources
• Create and search sanitized copies when you ask a question
• Show protected sanitized sources that support the answer
• Keep a history of what your AI opened
• Protect your account and prevent misuse

We use your information only to provide, protect, and operate LensPermit, including support. Public signup and billing are currently disabled. If paid access is offered later, Stripe may process payment under its own privacy notice; LensPermit will not receive or store your full card number.

What we never do

• ×Sell your data or use it for advertising
• ×Use face recognition or try to identify people
• ×Use your photos to train LensPermit models
• ×Silently synchronize your whole photo library

Connected AI providers

When you ask a connected AI to analyze approved photos, LensPermit sends sanitized photo copies and relevant source information to that provider.

LensPermit requires any enabled AI provider configuration to prohibit model training, advertising, profiling, sale, and independent use of customer content. Human-access, retention, backup, and deletion controls must also be reviewed and approved before that provider can receive photo content. The provider’s approved terms and settings apply to copies it receives.

How access is protected

LensPermit checks your account before every search and source view. A protected source link returns a sanitized WebP only to the right account and only while access is active. It does not return the original photo. Your access history shows what was opened.

LensPermit’s policy is to keep your photos and questions out of normal analytics, crash reports, and support messages unless you choose to include them in a support request.

Stopping access and deleting photos

Disconnecting an AI provider stops future access through that connection. Disconnecting alone does not delete LensPermit’s stored photos or content already retained in your AI account.

To stop sharing an album, choose Stop sharing and confirm its name. LensPermit blocks future retrieval and uploads for that album, then removes its managed photo copies and associated search data. Your AI connection, other album approvals, and originals in Apple Photos are unaffected. Sharing the album again requires a fresh approval in the iPhone app.

After managed cleanup completes, we keep a content-free receipt and tombstoned access history, not the deleted photo content.

Copies retained in your AI account are separate from LensPermit’s storage. You can use your AI provider’s built-in deletion controls to delete the relevant conversations and any separately saved photos or files. Deleting LensPermit’s copies does not perform those provider-account deletions for you.

In ChatGPT, delete the conversations that used the photos. This also removes connected-app data retained within those conversations. If copies were also saved to ChatGPT Library, delete those Library files separately. The provider’s published retention periods and applicable exceptions govern permanent deletion from its systems.

We may keep minimum account, payment, tax, security, and legal records when needed to run the service or comply with law.

Your choices and contact

You can approve an album, review access history, and stop sharing that album without asking us. For privacy help, email privacy@lenspermit.com.

We will update the date above when this notice changes.