Privacy Policy

1.1 Information You Provide

Your credentials and preferences are stored on your device using Android DataStore. Your Synology password, two-factor device token and shared-album passphrases are additionally encrypted by the App (AES-256-GCM) before being written to disk. We never send your Synology credentials to any server we operate, and never to anyone other than the Synology NAS address you configure.

On Android 12 and later you can optionally enable Automatic Sign-In (Settings → Security, on by default), which includes your encrypted credentials in Android’s end-to-end-encrypted system backup so that a new device can sign back in without you re-entering anything. That backup is encrypted with a key derived from your device’s lock screen and is readable by neither Google nor us. It is skipped on devices that cannot guarantee end-to-end encryption (Android 11 and earlier), and you can turn it off at any time in Settings → Security.

1.2 Information Accessed on the Device

1.3 Information We Do Not Collect

• We do not collect personal data, analytics, telemetry, or crash reports.
• We do not use advertising SDKs or tracking frameworks.
• We do not upload your photos or metadata to any cloud service.
• We do not access your contacts, call logs, SMS, camera, or microphone.

3.1 What we request from Microsoft

• Read and write access to your OneDrive files (scope Files.ReadWrite). Reading lets the App list and display the folder or album you pick. Writing is used only for the two actions you trigger yourself in the slideshow — rotating a photo and deleting a photo — described in 3.2.
• Your name and account e-mail (scope User.Read), used only to show which account is linked.
• Permission to stay signed in (scope offline_access), so the frame keeps showing your photos without asking you to sign in again every hour.

You sign in on Microsoft’s own page, by typing the short code the frame displays. We never see your Microsoft password.

3.2 How we use it

• To list the folder you choose — with or without its subfolders — or a OneDrive album, and display those photos and videos in the slideshow. The list is refreshed periodically so photos you add later appear on their own.
• Rotating a photo, when you ask for it on the frame, rewrites only the orientation tag in the file and uploads that file back in its place, so the photo appears upright in your other OneDrive clients too. The image itself is not re-compressed and OneDrive keeps the previous version in its version history. For formats where this is not possible (HEIC), the rotation is kept on this frame only.
• Deleting a photo, when you ask for it on the frame, moves it to your OneDrive recycle bin, from where you can restore it. Deletion is controlled by Settings → Security.
• We do not upload new files, do not share anything, do not touch files outside the folder or album you picked, and do not use your photos for any other purpose.

3.3 What is stored, and where

• Everything stays on your device. We operate no server; the App talks directly to Microsoft.
• OAuth access and refresh tokens are encrypted at rest by the App (AES-256-GCM), like your Synology credentials.
• The account name and e-mail, the folder or album you picked, and a list of its items (identifiers, file names, dates and, when the photo carries them, GPS coordinates) are kept in the App’s private storage so the slideshow can start offline.
• Downloaded photos are kept in the App’s cache within the size limit you set, so they do not have to be fetched from OneDrive every time they are shown.
• If Automatic Sign-In is on (Android 12+), the encrypted tokens travel with your settings in Android’s end-to-end-encrypted system backup, exactly as described in section 1.1.

3.4 Disconnecting and deleting

• Settings → Connections → Disconnect deletes the tokens, the item list and the cached photos from the device.
• Microsoft offers no way for an app to revoke its own access. To withdraw the permission you granted, remove FrameSway at account.live.com/consent/Manage.
• Uninstalling the App or clearing its data deletes all OneDrive data held on the device.

4.1 What we request from Dropbox

• Read access to your files and their details (scopes files.content.read and files.metadata.read), to list the folder you pick and display its photos and videos.
• Write access to your files (scope files.content.write), used only for the two actions you trigger yourself in the slideshow — rotating a photo and deleting a photo — described in 4.2.
• Your name and account e-mail (scope account_info.read), used only to show which account is connected.

You sign in on Dropbox’s own page and approve these permissions there. We never see your Dropbox password.

Signing in on a TV. You can type on the TV the code that Dropbox shows you, or scan a QR code with a phone that has FrameSway installed. In the second case the TV shows a page on your home network, only while you sign in, and the phone sends it a single-use sign-in code over that network. The code is useless without a secret that never leaves the TV, the phone keeps no Dropbox tokens, and nothing passes through a FrameSway server.

4.2 How we use it

• To list the folder you choose — with or without its subfolders — and display those photos and videos in the slideshow. The list is kept up to date so photos you add later appear on their own.
• Rotating a photo, when you ask for it on the frame, rewrites only the orientation tag in the file and uploads that file back in its place, so the photo appears upright in your other Dropbox clients too. The image itself is not re-compressed. For formats where this is not possible, the rotation is kept on this frame only.
• Deleting a photo, when you ask for it on the frame, moves it to your Dropbox trash, from where you can restore it. Deletion is controlled by Settings → Security.
• We do not upload new files, do not share anything, do not touch files outside the folder you picked, and do not use your photos for any other purpose.

4.3 What is stored, and where

• Everything stays on your device. We operate no server; the App talks directly to Dropbox.
• OAuth access and refresh tokens are encrypted at rest by the App (AES-256-GCM), like your Synology credentials.
• The account name and e-mail, the folder you picked, and a list of its items (identifiers, file names, dates and, when the photo carries them, GPS coordinates) are kept in the App’s private storage so the slideshow can start offline.
• Downloaded photos are kept in the App’s cache within the size limit you set, so they do not have to be fetched from Dropbox every time they are shown.
• If Automatic Sign-In is on (Android 12+), the encrypted tokens travel with your settings in Android’s end-to-end-encrypted system backup, exactly as described in section 1.1.

4.4 Disconnecting and deleting

• Settings → Connections → Disconnect revokes the App’s access at Dropbox and deletes the tokens, the item list and the cached photos from the device.
• You can also remove the App at any time from dropbox.com/account/connected_apps; the App will then ask you to connect again.
• Uninstalling the App or clearing its data deletes all Dropbox data held on the device.

5.1 What we request from Google

• Read access to the photos and videos you pick for this frame (OAuth scope photosambient.mediaitems). You choose the albums yourself inside the Google Photos app; the App can only see the albums you assigned to this frame there, never your whole library.
• Your account e-mail (scopes openid, email), used only to show which account is linked (“Linked as …”). On a TV the e-mail is shown masked.

Before you are sent to Google, the App shows you this same information and asks for your explicit consent on Google’s own consent screen. We do not receive your Google password.

5.2 How we use it

• To register this device as a “frame” in your Google Photos account (with a name you can edit), list the media of the albums you assigned to it, and display those photos and videos in the slideshow. The list is refreshed periodically so photos you add later appear on their own.
• We do not upload, edit, share, print or delete anything in your Google Photos, do not build a general-purpose gallery of your library, and do not use your photos for face grouping, advertising, analytics or any other purpose.
• FrameSway’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5.3 What is stored, and where

• Everything stays on your device. We operate no server; the App talks directly to Google.
• OAuth access and refresh tokens are encrypted at rest by the App (AES-256-GCM), like your Synology credentials.
• The frame identifier and name, the address of its settings page in Google Photos, the names of the albums you picked, and the last list of media items (identifiers, temporary download addresses, type, dimensions and capture time) are kept in the App’s private storage so the slideshow can start offline.
• Downloaded photos are kept in the App’s cache within the size limit you set, so they do not have to be fetched from Google every time they are shown.
• If Automatic Sign-In is on (Android 12+), the encrypted tokens travel with your settings in Android’s end-to-end-encrypted system backup, exactly as described in section 1.1.

5.4 Disconnecting and deleting

• Settings → Connections → Disconnect removes the frame from your Google Photos account, revokes the App’s access at Google, and deletes the tokens, the album list and the cached photos from the device.
• You can also revoke access at any time from your Google Account at myaccount.google.com/permissions; the App will then ask you to link again, and offers to delete what it stored.
• Uninstalling the App or clearing its data deletes all Google Photos data held on the device.