Privacy policy.

Last updated: 13 November 2026

This page explains the current data practices of PhotoGuard’s Android app and this website. PhotoGuard is provided by Clottis. For privacy questions, contact info@clottis.net. It is not a promise that an image is protected against every AI system.

When you choose and process a photo

Choosing an image in the app does not upload it. When you tap Process photo, the image is sent over HTTPS to PhotoGuard’s backend at pg.clottis.net, processed and returned as a PNG. No account is required. We do not maintain a saved photo history or photo library on the server. Image bytes and temporary upload files may exist during processing; they are not kept as a permanent gallery.

On your phone

The app temporarily caches the result so you can compare, save or share it. Its temporary output is removed when replaced or when the app’s normal cleanup runs. If the app closes abruptly, cache files may remain until the operating system clears them. Photos you export are your own saved files and are not removed by PhotoGuard’s cleanup.

Daily allowance and device identification

The Android app sends its Android ID to enforce a limit of three successfully generated photos per device per Pakistan calendar day. The server stores a keyed hash of that ID, the date, successful usage count, an expiry and a keyed hash of the network address supplied through Cloudflare. The quota database does not store the raw Android ID, raw IP address or photos. A shared Wi-Fi connection does not combine everyone’s three-photo allowance.

Usage counters are removed within 48 hours while the service is running. Expired counters are purged when the service starts again after downtime. The server’s private hashing key persists so restarting the service does not reset everyone’s allowance. Factory resets, a different Android profile or a changed app-signing key may change the device identifier.

What counts as a successful photo

A photo counts once the server successfully generates the output and commits the usage count. Invalid images, busy-server responses and failed processing do not count. A network disconnection after generation may still consume an allowance even if the result does not reach your phone.

Hosting and network infrastructure

This website and the app’s HTTPS traffic use Cloudflare. Cloudflare processes network information needed to deliver and secure requests under its privacy policy ↗. Operational infrastructure may process request metadata; the quota database is separate from that infrastructure. The backend runs on Clottis-managed infrastructure.

This website

This landing page does not offer image uploads, accounts, email sign-ups, analytics trackers or advertising scripts. It does not set application tracking cookies or store data in your browser. Normal hosting and security infrastructure still handles network requests.

How we use photos and identifiers

Photos are used to perform the image processing you request. Device identifiers and usage counts support the daily allowance and misuse prevention. We do not use your uploaded photos to train our models, sell your photos, or maintain a face-recognition database. The current app does not include advertising or an account-registration service.

Your choices and deletion enquiries

You can choose not to upload an image, stop using the app, and delete files you saved on your own device. No account exists to delete. Server quota records expire automatically as described above. For questions about access, correction or deletion of data, email info@clottis.net; do not attach sensitive photos or a device identifier to an initial enquiry.

Questions and updates

You can find Clottis and its published contact information at clottis.net ↗. We will update this page if the app’s data handling changes.