Autogram Privacy Policy

Last updated: 29 September 2026

Autogram is a private photo-sharing app for friends and family, without ads or likes. This policy explains what information Autogram handles, why, and the choices you have. We have tried to write it plainly.

Who is responsible

Autogram is provided by Brunner & Bang Global Enterprises AB, c/o Brunner, Brännkyrkagatan 45A, 118 22 Stockholm, Sweden. We are the data controller for the personal data described here.

Contact: autogram@brunnerbang.com

The short version

Your photo library stays on your iPhone. Autogram looks at new photos on the device and only uploads the few that look worth sharing.
Uploaded photos are private to you until you choose to share one.
Nothing is posted with other people in it until everyone you tagged has approved.
Your posts are visible only to you, your followers, and people tagged in them.
No ads, no tracking, no selling of data, and no third-party analytics.
You can delete your account and all of your data from inside the app at any time.

What we collect and why

Your account

Email address and, if you sign up with email, a password (stored only as a secure hash). If you use Sign in with Apple, we receive the email Apple shares with us, which may be a private relay address.
Name, username and bio that you choose, shown to other Autogram users.

Why: to create and secure your account and let friends find you.

Photos

If you turn on automatic suggestions, Autogram reads new photos in your library on your iPhone. Screenshots, receipts, documents and blurry shots are skipped using Apple's on-device image analysis; those photos never leave your phone.

Photos that pass this check are uploaded so they can be reviewed and suggested to you:

A resized copy of the photo (at most 1280 pixels on the longest side). Location, camera details and other metadata are removed before upload.
The date the photo was taken, its size, and an internal library identifier so the same photo isn't uploaded twice.

Each uploaded photo is reviewed automatically to check it is safe to share (for example, no sexual content or violence), to estimate how share-worthy it is, to suggest a short caption, and to count visible faces. We do not use face recognition and do not identify who is in a photo.

Why: this is the core service – suggesting good moments to share while keeping unsafe content off the platform.

Photos imported from Instagram

If you choose to import from Instagram, you pick your own Instagram data export on your iPhone. Autogram reads it on the device and uploads only the photos you choose to import, with their original captions and dates. Other information in the export is not uploaded.

Sharing and people

Captions you write, posts you share, people you tag and their approvals or declines.
Who you follow, who follows you, and anyone you block.
Notifications within the app (for example, a request to approve a photo you're in).

Why: to show your posts to the right people and to make sure no one is posted without their consent.

Reports and blocks

If you report a post or a person, we store who reported what, the reason you chose and any details you add. If you block someone, we store that you blocked them.

Why: to keep Autogram safe. Reported content is reviewed by our moderators, and we act on reports within 24 hours. The person you report or block is not told who reported or blocked them.

Push notifications

If you allow notifications, we store your device's push token so we can send you notifications through Apple. You can turn notifications off at any time in iOS Settings. The token is removed from our systems when you sign out.

Technical data

Our hosting provider keeps short-lived server logs (such as IP addresses and request times) to operate and secure the service.

Stored only on your iPhone

Autogram keeps some information only on your device, for example which library photos it has already looked at and your photo access status. This never leaves your phone.

Who can see your content

Uploaded photos and suggestions: only you, until you share them.
Posts: you, the people who follow you, and people tagged in the post. People who have blocked you, or whom you have blocked, cannot see your posts or profile. Our moderators may view content that has been reported.
Photos you're tagged in: you see them before they are posted, and they are only posted if you approve.
Your profile (name, username, bio and profile picture): other Autogram users, so they can find and follow you. Profile pictures are checked by the same automated safety review as photos before they are shown, and are stored at a hard-to-guess web address that anyone who has it can open.

Service providers

We use a small number of providers who process data on our behalf, under data processing agreements:

Supabase – database, file storage, sign-in and server functions. Data is stored in the European Union (Ireland).
Anthropic – automated review of uploaded photos (safety check, score and caption suggestion). Photos are sent for review only; under Anthropic's commercial terms they are not used to train AI models. Anthropic is based in the United States (see International transfers).
Apple – Sign in with Apple and delivery of push notifications.

We do not sell your personal data or share it with advertisers.

International transfers

Photo reviews are processed by Anthropic in the United States. These transfers are protected by the European Commission's Standard Contractual Clauses and/or the EU–US Data Privacy Framework, as applicable.

Legal basis (EU/EEA users)

Performance of our agreement with you – providing your account, suggestions, sharing, consent requests and feed.
Legitimate interests – keeping the service safe (content safety checks, blocking, security logs).
Consent – access to your photo library and push notifications, which you give through iOS and can withdraw at any time in Settings.

How long we keep data

Your account, photos, posts and related data are kept until you delete them or delete your account.
Photos that were not suggested, that you skipped, or that did not pass the safety check are deleted automatically 30 days later.
Reports are kept for as long as needed to handle them and to keep the service safe, and are deleted when the reporting or reported account is deleted.
When you remove a post, it disappears from everyone's feed.
When you delete your account, your profile, photos, posts, tags, follows, notifications and device tokens are permanently deleted. Backups held by our hosting provider expire within a short period after that.

Your rights and choices

Delete your account in the app: Profile → Delete Account.
Edit your profile in the app: Profile → Edit Profile.
Change photo access in iOS Settings → Autogram → Photos, or turn off automatic suggestions in the app.
Turn off notifications in iOS Settings → Autogram → Notifications.

If you are in the EU/EEA or the UK, you also have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. Contact us at autogram@brunnerbang.com and we will respond within one month. You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or your local data protection authority.

Children

Autogram is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will delete it.

Security

Data is encrypted in transit, photos are stored in private storage, and access is restricted by strict database rules so users can only see what they are allowed to see. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of any breach as required by law.

Changes

If we make meaningful changes to this policy, we will update the date above and let you know, for example by email or in the app.

Contact

Brunner & Bang Global Enterprises AB
c/o Brunner, Brännkyrkagatan 45A
118 22 Stockholm, Sweden
autogram@brunnerbang.com