Privacy Policy

Effective Date: October 26, 2026

Developer: M-PAX Group · App: BatchList Photos (iOS/iPadOS, iPhone & iPad, iOS 17+, Bundle ID net.m-pax.BatchListPhotos)

BatchList Photos turns one set of product photos into ready-to-upload export sets for every marketplace you sell on, in one batch. It is designed so that we, the developer, do not operate a server, do not create accounts, and do not receive your photos. Everything — import, framing, metadata scrubbing, verification — happens on your device.

1. Data we (the developer) collect

We collect nothing automatically. BatchList Photos contains no third-party analytics, crash-reporting SDKs, advertising SDKs, session replay, or fingerprinting. Crash diagnostics are Apple-only. We do not sell personal data and we do not share personal data with data brokers.

The only personal information we ever receive is what you choose to send us yourself, for example if you email [email protected] for support. We use such messages only to answer you, and we delete them on request.

2. Your photos & data — where they live

Everything you put into the app stays on your device, in the app sandbox:

• Source photos — imported via the system photo picker or Files into sandbox copies. Originals are never modified, moved or deleted. If a photo is still downloading from iCloud, the app waits for the system to deliver it; the app runs no photo sync of its own.
• Batch settings — photo order, pad colour, framing overrides, scrub policy, rename base / SKU, chosen marketplaces, seller region.
• Copyright profile (optional) — the display name, creator, handle/website and year you enter for the Keep copyright policy. Used only to stamp your own exported files, on-device.
• Free-tier counter & purchase state — the per-day export count and whether Pro was unlocked via the App Store (see section 7).
• Exported files — written to the app sandbox, then delivered to the destination you chose (Photos, Files, ZIP, share sheet). Sandbox exports are kept only until you leave the Verified Export screen or start a new batch, then deleted; any leftovers are deleted on next launch.

There is no developer backend and no cross-device sync. Deleting the app removes its on-device data. Photos or files you saved to the system Photo Library or Files remain there under your control (the app cannot delete them — iOS does not allow it).

Category	Examples	Stored where
Photos you import	Sandbox copies of your product photos, order, per-photo framing flags	Your device only. Originals untouched. Never on a developer server.
Batch & export settings	Marketplaces, pad colour, scrub policy, rename base / SKU, region	Your device only. Never on a developer server.
Copyright profile you enter	Display name, creator, handle, website, year override	Your device only; stamped into your exports on-device when you pick Keep copyright.
Counter & entitlement	Daily export count, Pro unlocked flag from App Store transaction	Your device only. Never on a developer server.
Data the app refuses to hold	Marketplace accounts, listing credentials, buyer data	Nowhere — no such fields exist. The app ends at “files ready to upload”.

3. Location & metadata scrubbing (on-device)

• At import, the app reads each photo's metadata only to show you issue badges (e.g. GPS found, HEIC, <2000 px) and to record what was present before cleaning. Coordinates are never displayed — the badge says only that a location was present.
• At export, each file is built from decoded pixels into a fresh JPEG with a minimal property set (orientation 1, sRGB). Source properties are never copied-and-trimmed. Depending on your policy: Location only removes GPS; Everything (default) removes GPS, EXIF, TIFF, IPTC, XMP, maker notes and embedded thumbnails; Keep copyright applies Everything then writes exactly © year name, creator, and usage terms from your profile — nothing else.
• Verification re-reads the written files from disk and reports per file, per dictionary, as Removed, Wasn't there or Still present. A failed check blocks the Verified stamp. The shareable receipt text contains counts and warnings only — never coordinates.
• The app transmits nothing during scrubbing or verification. Scrubbed files reach third parties only if you upload or share them with a marketplace or buyer.

4. Data minimisation

BatchList Photos does not ask for contacts, HealthKit data, or precise location. It does not enrich, match or profile your photos. Reports (the verified receipt) are computed live on-device from the files just written; nothing is uploaded for computation.

5. Device permissions

• Photo Library (import) — not requested. Import uses the system picker / Files, which grants the app only the photos you choose, without library access.
• Photo Library (save) — add-only, requested only at the first save-to-Photos export, never at launch. Denying it keeps every other destination usable.
• Files / share sheet — used only when you choose Files, ZIP or direct share as the destination.
• Camera, Location, Contacts, Microphone, Notifications, HealthKit — not requested.

6. Sharing and export (you send; the app never sends itself)

BatchList Photos has no accounts, no messaging and no server upload. Photos and files leave the device only through your explicit actions: Save to Photos, Save to Files, ZIP share, or the iOS share sheet (e.g. sending a set directly to a buyer). Nothing is transmitted anywhere by the app except through those actions you initiate.

The shareable verification receipt (counts per marketplace, cleaning verdict, warnings) is generated on-device and shared only when you tap Share receipt.

7. Purchases

BatchList Photos is free to try with a one-time Pro unlock (US $14.99, localised per storefront): up to 4 marketplaces per batch, ZIP / Files export, custom rename base + SKU, all scrub policies, custom pad colour. There is no subscription. The verified receipt is fully available in the free tier and is never paywalled.

Purchase and restore are handled entirely by Apple’s StoreKit / App Store; the price shown comes from the App Store and we never see your payment details. Use of the app is governed by Apple’s Standard Licensed Application End User License Agreement: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/.

8. Relationship to marketplaces

BatchList Photos is an independent export tool. It does not post or cross-list to any marketplace, has no marketplace API integration, and is not affiliated with or endorsed by Etsy, eBay, Vinted, Depop, Poshmark, Mercari, Meta or Shopify. Preset labels marked Working target are our best-checked canvases (specs checked October 2026), not platform-published values — the app never labels them as official and never promises a platform will accept an export.

9. What we do NOT do

• No tracking across apps or websites (App Tracking Transparency: not requested).
• No third-party SDK network traffic — only Apple services you choose (App Store / StoreKit, system picker, Photo Library save).
• No accounts, no sign-in, no backend storage of photos.
• No usage analytics and no advertising.
• No sale of personal data and no use of your photos for advertising.
• No modification of your originals — ever.

10. Apple privacy labels & manifest (for App Store review)

App Privacy: Data Not Collected applies to the developer. Photos and settings you enter are stored by you on-device at your direction and are not collected by the developer. The app declares no tracking and includes no third-party SDKs. The app’s privacy manifest reflects this.

Notes for review: the app is fully offline except StoreKit and external help links; no login; no demo account or test server needed. Demo path: pick sample photos → tick Etsy → Export → receipt. Location metadata is cleaned on-device; coordinates are never rendered.

11. Retention, export & deletion (your control)

• Export anytime: Photos albums (one per marketplace, named Listing Prep – {name}), Files folders, ZIP archives, direct share, and the shareable receipt text.
• Correct: reorder, re-frame, rename or remove photos freely before export; batch settings can be changed at any time.
• Delete: removing a photo from a batch or starting a new batch discards the sandbox work; sandbox exports are deleted as described in section 2. Uninstalling removes on-device data; copies you saved to Photos / Files remain until you remove them.

Because there is no developer account or database, privacy access/deletion requests are fulfilled with these in-app steps. If you need help, email us and we will walk you through them.

12. Security

Records are protected by iOS file protection on-device. Temporary export files are deleted after you leave the receipt screen (or on next launch). The receipt is computed by re-opening the exported files from their written location, so any number on it can be traced back to a file you can open yourself.

13. Children

BatchList Photos is a general-audience productivity tool. We do not knowingly collect children’s data as a developer; photos and settings stay on the device as described above.

14. Changes to this policy

If privacy practices change (e.g. a future optional feature requiring data), this page will be updated with a new effective date, and the app’s privacy manifest / App Privacy labels will be updated before release. Material changes will also be noted in release notes.

15. Contact

Developer: M-PAX Group.
Privacy / support: [email protected]
Support page: https://m-pax.net/batchlistphotos.html