Privacy Policy

1.Who we are

Galleri is made by legal name of the company or person, CNPJ, address (“Galleri”, “we”, “us”). We are responsible for the personal data described in this policy.

Questions, requests or complaints: contact email. That address also reaches the person in charge of data protection (the “encarregado” under Brazil’s LGPD): name.

2.What stays on your computer

Galleri is a desktop app. Everything you put in it is kept on your own computer and is never uploaded to us:

• your libraries, the images, notes and documents in them, and the address of the page each one was saved from;
• tags, colours, and the index that powers search by meaning;
• your backups and exports, written only where you choose;
• your settings and the on-device search model.

Search by meaning and suggested tags are worked out by a model that runs on your machine. Once it is installed, your pictures and what you search for are never sent anywhere.

3.What we collect

We collect only what is needed to sell you Galleri, check your licence and deliver updates.

3.1Licence

Your email address; a one-way hash of your access code (we never store the code itself); your plan; whether the licence is active; when it was issued, first activated and last checked; and until when it includes updates.

3.2Licence checks

Each time Galleri starts, and when it looks for an update, it sends your email and access code over an encrypted connection so our server can confirm the licence. The app also sends the release date of the version you are running, to tell whether your licence covers it. That date is not stored.

3.3Member card

If you fill in your card, we keep the name, role, colour and “member since” date you chose, so the card follows you to another computer. You can leave it empty.

3.4Failed checks

When a licence check fails, we record the email and the time, to stop anyone from guessing access codes.

3.5Purchases

Payments are handled by payment processor. They receive your payment details; we never see or store card numbers. From them we receive what is needed to issue your licence and keep our accounts: e.g. your name, email, country, what you bought and the amount.

4.What we do not collect

• No analytics, usage statistics or telemetry, in the app or on this website.
• No crash reports.
• No device identifiers or fingerprints. Your licence works on your computers without registering them.
• No advertising, and no selling, renting or sharing of your data for marketing.

5.Services Galleri connects to

A few features need to reach another service. Each one only sees what it needs for that job, and like any website it sees your IP address when your computer connects to it.

5.1Supabase

Hosts our licence and update server, in São Paulo, Brazil. It processes the licence data above on our behalf.

5.2GitHub

Update files are downloaded straight from GitHub’s servers, through a short-lived link our server gives the app.

5.3Hugging Face

When you choose to install search by meaning, the model (about 156 MB) is downloaded once from Hugging Face. After that it runs offline.

5.4Spotify and Apple Music

When a note is just a link to a song, an album or a playlist, Galleri fetches its title and artwork from Spotify or Apple, and keeps them on your computer.

5.5Websites you save from

When you save a picture from a link or with the browser extension, it is downloaded from the site that hosts it.

5.6Payment processor

Takes your payment when you buy Galleri. Link to their privacy policy.

5.7Cloudflare

Hosts this website on Cloudflare Pages. Like any web host it keeps short technical logs, which include your IP address.

6.Save on Galleri for Chrome

The extension adds “Save on Galleri” to the menu you get when you right-click on a page.

• It reads a page only when you choose that option, to find the pictures on it. On other pages it only notes where your last right-click was, and keeps that in the page.
• It downloads the pictures you pick from the site that shows them, with your usual login for that site, so it gets the full-size version. Your cookies are sent only to that site, never to us.
• It sends the pictures, and the address they came from, only to the Galleri app on your own computer (127.0.0.1). Nothing goes to our servers.
• It remembers the library and collection you used last, inside Chrome.

It asks to run on every site because it cannot know in advance where you will want to save a picture from.

Its use of this information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements: it is used only to save what you ask it to, never sold, never used for advertising, and never read by people.

7.This website

This website sets no cookies and runs no analytics or tracking scripts. It remembers your choice of language and theme in your browser’s local storage, and nothing else. Its fonts are served from the site itself.

8.Why we use your data

• To provide what you bought: issuing and checking your licence and delivering the updates it includes (performance of a contract).
• To keep Galleri secure: stopping access codes from being guessed, shared or abused (our legitimate interest).
• To keep your member card on file, which you choose to fill in (consent, which you can withdraw by clearing it).
• To meet tax and accounting duties for purchases (legal obligation).

9.How long we keep it

• Licence and member card: for as long as the licence exists, and up to period after it ends or you ask us to delete it.
• Failed checks: period, e.g. 30 days.
• Purchase records: for as long as tax law requires, e.g. 5 years.
• Server and hosting logs: for the short periods set by Supabase and Cloudflare.

10.Where your data is processed

Our licence server is in Brazil. GitHub, Hugging Face, Cloudflare and payment processor may process data in the United States or other countries. Where the law requires it, these transfers rely on appropriate safeguards, such as the standard contractual clauses approved by Brazil’s ANPD or the European Commission.

11.Your rights

Depending on where you live (for example under Brazil’s LGPD or the EU and UK GDPR), you can ask us to:

• confirm whether we hold data about you, and give you a copy;
• correct it if it is wrong, incomplete or out of date;
• anonymise, block or delete data that is not needed or is handled against the law;
• delete data we hold on the basis of your consent;
• hand it to you, or to another provider, in a portable format;
• tell you which companies we share it with;
• object to a use based on our legitimate interest, or limit it;
• withdraw a consent you gave, and tell you what happens if you do not give it.

Write to contact email from the email on your licence. We reply within 15 days. Deleting your licence data means that licence can no longer be checked or updated. You can also complain to your data protection authority: in Brazil that is the ANPD (Autoridade Nacional de Proteção de Dados); in Europe, the authority where you live.

12.Security

Everything between the app and our server travels encrypted. Access codes are stored only as a one-way hash, the licence records cannot be reached from outside our server, and on your computer the code is kept with your operating system’s protected storage where it offers one.

If a security incident could put you at risk, we will tell you and the ANPD, as the law requires.

13.Children

Galleri is made for adults. To buy it you must be 18, or have the permission of a parent or guardian. We do not knowingly collect data from children, and if we learn that we have, we delete it.

14.Changes to this policy

If we change this policy we will update the date at the top. If a change affects what we collect or how we use it, we will say so on this website and in the app’s changelog before it takes effect.