When we ask
The OS permission sheet appears the first time you tap an action like “attach photo”, “take picture”, or similar inside a customer or order flow. If you deny access, the rest of the app still works; you simply can’t attach images until you change your mind in system settings.
What happens to the image
Photos you attach are stored with the related record in your local database and, if cloud backup or sync is enabled for your account, encrypted in transit to our servers as part of that record. We don’t run facial recognition, advertising segmentation, or “smart wardrobe” experiments on your files. They’re workshop evidence, not training data.
Cloud sync & backups
Synced images follow the same retention rules as other business records — tied to your workspace lifecycle. Deleting a record locally removes its attachments locally; cloud deletion propagates on the next successful sync or through explicit account closure workflows.
What we don’t do
- We don’t access the camera in the background without an action you initiated.
- We don’t combine your client photos with third-party ad networks.
- We don’t scrape your entire camera roll — only items you pick inside the picker sheet.
Your controls
Revoke camera or photos access anytime in Android or iOS settings; the app will stop showing capture options until permission returns. Remove individual attachments from records if you want a lighter footprint without a full reset.
Related: Privacy Policy · Data practices · Microphone & voice