Privacy policy

Effective 27 October 2026

The short version: RetrievalP works on your own computer. Your photos and the data on your iPhone are never sent to us or anyone else. The app goes online only to check your pass and to look for updates. The website uses no cookies, no analytics and no tracking. The only personal data we handle comes from buying and activating a pass, and from emails you send us.

Who is responsible

The controller of your personal data is al-Itawa Jusef, [Street address and postcode], Lappeenranta, Finland, Business ID 3578144-1. Contact: [email protected].

The app: your photos stay on your computer

• RetrievalP reads your iPhone over the USB cable and processes everything on your computer. Photos, videos, the photo library and anything else from the phone are never uploaded to us or to anyone else.
• While you use it, the app keeps a temporary copy of what the scan found in its own folder on your computer (%LOCALAPPDATA%\RetrievalP on Windows, ~/Library/Application Support/RetrievalP on a Mac). This copy is encrypted with a key that exists only while the app is open, so it can't be viewed outside the app. Starting a new scan deletes the previous one, and you can delete the folder at any time. Uninstalling on Windows removes the scan folder.
• Files you choose to save go to the folder you pick. They are yours; we never see them.
• The optional clean-up add-on deletes leftover files from your iPhone only after you confirm. It sends nothing anywhere.
• The app keeps a diagnostics log in the same folder: what it did and any errors, such as which steps ran and how many items were found. It never contains your photos or licence key. It stays on your computer unless you choose to email it to us for support.
• When it starts, the app checks retrievalp.com for a newer version by downloading one small public file. Like any web request, this reveals your IP address to our website host, Cloudflare; nothing else is sent.

Activating and checking a pass

When you activate a pass or add-on, and about twice a day while you are online after that, the app sends your licence key and a generic label (“Windows PC” or “Mac”) to our payment provider, Lemon Squeezy, to check that the key is valid. Like any internet connection, this also reveals your IP address to Lemon Squeezy. We use this to provide what you bought (legal basis: performing our contract with you, GDPR Art. 6(1)(b)). The app stores the activation on your computer, locked to that computer.

If you buy from inside the app, the app attaches a random one-time code to your order so it can activate by itself. After payment, Lemon Squeezy sends your new licence key to our website, which keeps it under a scrambled form of that code until the app collects it, and deletes it then, or after 24 hours at the latest. Nothing else about you is stored. If you buy on the website instead, the key only goes to you by email.

Buying a pass

Passes are sold through Lemon Squeezy (Lemon Squeezy LLC), which acts as the merchant of record: it takes the payment, charges sales tax and VAT, and issues receipts. Lemon Squeezy collects your payment details, name, email address, billing country and address as an independent controller under its own privacy policy. We never see your card details.

Lemon Squeezy shares with us the order details we need to support you: your name, email address, country, what you bought, when, and your licence key and its activations. We use them to answer support requests, handle refunds and keep the records the law requires (legal bases: contract, Art. 6(1)(b), and legal obligation, Art. 6(1)(c)). We don't use them for marketing, and we don't sell or share them.

This website

The website is hosted by Cloudflare, Inc. When you visit, Cloudflare's servers process your IP address, browser details and the pages requested, to deliver the site and protect it from abuse (legal basis: our legitimate interest in running a secure website, Art. 6(1)(f)). Cloudflare keeps these logs for a short time under its privacy policy. The site sets no cookies, uses no analytics or advertising, and loads its fonts from our own server, not from Google.

Emails

If you email us, we use your email address and message to reply (legal basis: legitimate interest in answering you, or contract if it is about a purchase). We keep support emails for up to two years after the conversation ends, unless they are needed longer for a refund or legal claim.

Email to our address is received by Cloudflare, which forwards it to our inbox at Google (Gmail). Our replies are sent through Resend, from its servers in the EU (Ireland). We don't track whether you open our emails or click links in them.

How long we keep data

• Order and licence records: as long as your pass is valid, then as long as Finnish accounting law requires (generally 6 to 10 years after the end of the financial year).
• Support emails: up to two years, as above.
• Website logs: as long as Cloudflare keeps them, which is short.

Who receives data, and transfers outside the EU

These services process data for us or alongside us:

• Lemon Squeezy: payments, taxes and licence keys.
• Cloudflare: hosting this website, our domain's name servers, and receiving and forwarding email sent to us.
• Google (Gmail): our email inbox.
• Resend: sending our email replies, from the EU.

Lemon Squeezy, Cloudflare, Google and Resend are based in the United States. Transfers to them rely on the EU–US Data Privacy Framework where the company is certified, or on the European Commission's Standard Contractual Clauses. We use no other services that receive your data.

Your rights

You can ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to its use, and to receive it in a portable format. Write to [email protected]; we answer within one month. Some records must be kept by law even if you ask us to delete them. For data Lemon Squeezy holds as merchant of record, you can also contact Lemon Squeezy directly.

You can complain to a data protection authority. In Finland that is the Data Protection Ombudsman; you can also contact the authority where you live.

We make no automated decisions about you. You don't have to give us any personal data to use the free scan; buying a pass requires the details Lemon Squeezy asks for.

Children

RetrievalP isn't aimed at children, and we don't knowingly collect data from anyone under 16.

Changes

If we change this policy, we will update it here and change the date at the top. If a change matters for data we already hold, we will tell affected customers by email.