Privacy Policy

Last updated: September 26, 2026

Hic Pic Nunc is a free, open-source desktop app. It runs entirely on your computer. The developer does not operate any server, and never receives your photos, your Google account data or anything else about you.

What the app accesses

When you sign in with Google, the app asks for permissions to:

• view your email address (openid and email scopes), so the app can show which account is currently connected;
• open the Google Photos picker (https://www.googleapis.com/auth/photospicker.mediaitems.readonly), where you choose which photos and videos to share with the app;
• read and download only the items you picked, together with the information Google provides about them (file name, type, dimensions, creation time, camera make and model).

The app cannot see the rest of your library, cannot change or delete anything in Google Photos, and cannot upload anything to it.

How that data is used

Picked items are used for one purpose: to create copies on your computer that keep their capture dates and the metadata you choose in Settings. The app writes those copies to a ZIP file you download. Nothing is analyzed, shared, sold or used for advertising, and no person, including the developer, reads your data.

What is stored, and where

Everything stays in the app’s data folder on your computer (~/Library/Application Support/GPhotoMetaSync on macOS, %LOCALAPPDATA%\GPhotoMetaSync on Windows):

• Google sign-in token and account email (credentials/google_token.json): so you don’t have to sign in every time, and can see which account is currently connected. It never leaves your computer except to talk to Google.
• Working copies of downloaded items: deleted as soon as each item is processed.
• Exported copies, kept so you can download the ZIP: deleted automatically after 24 hours.
• Your settings (which metadata to keep) and a random key that protects the app’s local session.
• A log file (logs/) with technical messages, which may include file names, to help diagnose problems. It is never uploaded.

Who the app talks to

Only Google: its sign-in service, the Google Photos Picker API and the servers that deliver your picked media. The app contains no analytics, tracking, crash reporting or advertising, and makes no other network requests. The user interface is served by the app itself at 127.0.0.1 and is not reachable from other devices.

Limited Use of Google user data

Hic Pic Nunc’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the export feature described above. It is not transferred to anyone, not used for advertising, and not used to develop or train AI or machine-learning models.

Removing access and data

• Click Sign out in the app to revoke the token with Google, drop your local session, and delete the saved credentials file.
• Revoke the app’s access to your Google account at any time from your Google Account’s third-party connections.
• Delete the app’s data folder listed above to remove everything it stored, including the sign-in token.

Children

The app is not directed at children under 13, and does not knowingly process their data.

Changes

If this policy changes, the new version will be published on this page with a new date. The full history is in the project repository.

Contact

For questions about this policy, open an issue on GitHub.