GradeStory Privacy Policy
Effective October 7, 2026 · Published by ChillPixel
Your photos and face matching are processed on your device. Optional network services, technical SDK diagnostics, Android backups and exports are explained below.
1. Who we are and who this app is for
GradeStory is published by ChillPixel for adult parents and legal guardians aged 18 or older to record their child’s school memories. It is not directed to children. Children do not create accounts or operate the app. This policy explains the current Android app, including its optional services. Contact getnahid2@gmail.com for privacy questions.
2. Information on your device
GradeStory stores child nicknames, optional birth details, school-year information, memories, captions, documents, dates, location details you save, and app settings on your device. Imported media and face templates are encrypted using Android Keystore-backed encryption. Timeline metadata is stored in the app’s private database.
3. Photo access and automatic organization
After onboarding, granting photo access allows GradeStory to organize accessible photos on your phone. Full access permits library scanning; selected access limits it to photos allowed by Android. Confident child matches can be saved automatically, and uncertain candidates are offered for review. You can pause scanning, revoke access, edit memories, and pick photos manually. Scanning does not delete original library photos.
4. Face recognition and AI
Reference photos create numerical face templates used to help identify your child. Face matching, text recognition, image classification and local caption generation run on the device. These processing features do not upload your photos, face templates or memory content to an AI service. Recognition may be inaccurate; you can correct or remove results and reset reference profiles.
5. Downloads and network services
Some features download public model files from Google or Hugging Face and cache them locally. Download providers receive normal network information such as IP address and request details, but model requests do not contain your child’s photos or templates. Public-holiday requests send the selected country and year to Nager.Date. Provider handling is governed by the provider’s policies.
6. SDK diagnostics
Google ML Kit collects device and app information, installation identifiers, performance and error information, feature usage events, and custom-model metadata for diagnostics and usage analytics. Google states that this data is encrypted in transit. This technical collection is separate from photo analysis, which runs locally. See Google’s ML Kit data disclosure.
7. Optional location assistance
If you request home-region detection and grant permission, approximate foreground device location is sent to Android’s geocoding provider to obtain country and state. There is no background location tracking. Separately, a photo place suggestion sends a rounded photo coordinate to the geocoding provider after your approval. Coordinates may reveal sensitive locations even after rounding. The provider depends on your device. Photos, child names and face templates are not part of these lookup requests. You can enter regions and places manually instead.
8. Sharing, exports and Android backup
The current release does not offer app accounts, GradeStory cloud backup, shared cloud albums or cloud AI captions. You may export files and share them using destinations you choose. Those external copies are controlled by you and the destination service. Android system backup and device transfer are currently enabled: depending on your device and system settings, Android may copy eligible app data to your backup provider or another device. Manage these features in Android settings. Encryption keys may not transfer, so system backup is not a guarantee that encrypted memories can be restored. GradeStory does not sell your family’s information or use it for advertising.
9. Security and service providers
Imported media and face templates use Android Keystore-backed encryption; metadata is held in app-private storage. No storage or transmission method is guaranteed completely secure. Model download and SDK providers may process technical data outside your country under their own policies. Android geocoding providers vary by device, and their processing and retention practices apply. You can avoid optional location lookups by entering a place manually.
10. Retention, deletion and your choices
Local data is kept until you remove it, clear app storage in Android settings, or uninstall the app. Use memory deletion and reference-profile controls to remove stored content. Deleting app data does not remove originals from your photo library, system backups, exported files, or copies shared elsewhere; manage those separately with the relevant service. Download caches may remain until app storage is cleared or the app is uninstalled. Keep a tested export if you want to preserve memories when replacing or resetting your device. Third-party providers determine retention of their technical request data under their policies; ChillPixel does not promise immediate deletion of provider logs.
11. Support, rights and policy updates
If you contact ChillPixel, we receive the email address and information you send and use them to answer and resolve your request. Do not email child photos or face data unless necessary for a support request you choose to make. We retain correspondence as needed for support and applicable legal obligations. Depending on your location, you may have rights to access, correct or delete personal information, restrict or object to processing, or complain to your local data-protection authority. Contact getnahid2@gmail.com to make a request; we do not have remote access to your local memories. We will update the effective date when this policy changes and provide additional notice or request consent where required for material changes.
Google ML Kit data disclosure · Google privacy policy · Hugging Face privacy policy