Privacy Policy
Last updated: September 23, 2026
Who we are
Dedupo is a phone app (bundle id: com.offjar.dedupoapp) made by Offjar. The website is https://dedupo.com. Help is at https://dedupo.com/site/help. For questions about this policy or the app, email dedupoapp@gmail.com or use Feedback.
What stays on your device
Features such as Similar Photos, Clean Up, Bulk Compress, Albumizer, Edit, Profile, and Archive run on your phone. They process photos and videos on the device. Dedupo does not upload your camera roll, Profile indexes, OAuth tokens, or Archive file bytes to Dedupo servers.
Dedupo also keeps app data on your iPhone so features can resume and stay fast. That may include reviewed or deleted markers, ranks and reminders settings, cleanup and album scan caches, Archive account labels (such as email or display name), unfinished Archive Move, Copy, or Upload jobs (item ids and destination labels for a later retry), a local index of media Dedupo lists for Archive or Profile, cached Google Photos previews for app-created items Dedupo uploaded, and pending delete-original retries after an edit.
Production builds store that local database in an encrypted SQLite file (SQLCipher). The encryption key, cloud OAuth tokens, FTP passwords, and any FTPS certificate pins you accept are kept in the iOS Keychain, with access limited to when the device is unlocked. Uninstalling Dedupo removes the app's local database from the device.
Profile
Profile lets you choose This Device (your Photos library) or a connected Google Drive, OneDrive, Dropbox, FTP, or Google Photos account as the Current profile for on-device tools. When you choose a remote Current profile for Google Drive, OneDrive, Dropbox, or FTP, Dedupo builds a local index of folder and file metadata from folders you select so Similar Photos, Clean Up, Albumizer, and related tools can work against that library on the phone. Profile scanning runs only after you connect an account and choose it as Current profile; it is for features you use in the app, not for advertising or sale of your files.
Google Photos as Current profile works differently: Dedupo can index and show only photos, videos, and albums that you uploaded through Dedupo (the same app-created library access described under Archive below). Dedupo does not browse, import, or index the rest of your Google Photos library the way Drive-style providers do. Disconnecting an account deletes the local index and related profile data for that account.
Archive
Archive (in the app menu; shown as Archive / Organize when a remote Current profile is active) is a one-way copy or organize flow for photos and videos you choose. It is not a camera-roll sync and not automatic backup like iCloud Photos or Google Photos' own backup.
You pick items, pick a Destination, and upload, move, or copy. After a successful upload you may delete the This Device or Current profile copies. Nothing is deleted until you choose. After local delete, those items stay only in the destination you chose. They will not reappear on this phone or a new phone unless you download them again.
When the Archive Destination is the same cloud account as your Current profile (Drive, OneDrive, Dropbox, or FTP), Dedupo can Move or Copy items on that provider instead of re-uploading bytes. Unfinished Move, Copy, or Upload batches may be saved on the device so Dedupo can offer a retry; you can decline that retry.
Destinations: Google Drive, Google Photos, OneDrive, Dropbox, and your own FTP or FTPS server. Dedupo does not provide SFTP. Dedupo does not run a file-hosting backend. Files go to the account you connect, under that provider's own terms and privacy policy. Dedupo does not sell the contents of your photos or videos.
Google Photos as an Archive destination
When you connect Google Photos for Archive, Dedupo uses Google's Photos Library API with limited scopes: it can upload photos and videos you select into albums you choose or create, and it can read back only media and albums that Dedupo created through the app (for destination browsing and consistency). Dedupo does not browse, import, or index your existing Google Photos library. Previews of app-created items may be cached on your device so Archive can show them.
Google Photos does not support server-side Move or Copy the way Drive-style destinations do. Deleting from Google Photos inside Dedupo does not call a Google delete API: Dedupo removes the item from its on-device index and can open the item in Google Photos so you can delete it there if you want. Files you uploaded remain in your Google Photos account until you delete them in Google Photos or through other tools from Google.
Cloud and FTP access
Archive and Profile can connect to Google Drive, OneDrive, Dropbox, or Google Photos if you tap Connect. Archive can also connect your own FTP or FTPS server. The sign-in screen is from that company, not from Dedupo. Dedupo does not create a Dedupo account for Archive or Profile and does not receive or store your Google, Microsoft, or Dropbox passwords.
After you agree, Dedupo can use that connection only for actions you start: pick a Destination, create a folder or album, upload, move, or copy selected items (where the provider supports it), browse and preview items Dedupo is allowed to see, download back to Photos when you choose, delete on the provider when the provider and feature allow it, and (for Profile providers) build the on-device Profile index described above. Dedupo may show the email or name from that account so you can tell connections apart.
For Google Drive, OneDrive, and Dropbox, Dedupo may access account email or display name, folder and file metadata, and the photo or video files you select. For Google Photos, access is limited to uploading and to reading app-created albums and media, as described above. Dedupo uses this information only to operate Archive and Profile. Dedupo does not use it for advertising, selling data, training AI or machine learning models, credit decisions, or any purpose outside those features.
For FTP or FTPS you type the host, username, and password yourself. Those details and the files you upload go to your server, not to Dedupo. If iOS cannot verify an FTPS server certificate with a trusted authority, Dedupo may ask whether to trust that certificate anyway and may store a pin for that host in the Keychain. Disconnecting the FTP account removes related credentials.
The Archive Accounts list can require Face ID or your device passcode before showing connected accounts. Uploads and API calls to Google Drive, Google Photos, OneDrive, and Dropbox use HTTPS. FTPS uses TLS when you enable it. Plain FTP is unencrypted; use it only on networks you trust.
Disconnecting an account in Dedupo removes local tokens or FTP passwords from the Keychain and clears related on-device Profile and Archive data for that account. You can also revoke Dedupo's access in your Google, Microsoft, or Dropbox account settings. For Google, revoke at https://myaccount.google.com/permissions.
Sharing, transfer, and disclosure
Dedupo does not sell, rent, or license data from your connected cloud accounts to third parties. Dedupo does not share it with data brokers, advertisers, information resellers, or other third parties for their own purposes. When you archive, browse, preview, download, move, copy, delete, or index a Current profile on a connected service, those operations go directly between your iPhone and that provider.
The only third parties that may receive data related to your use of Dedupo are:
- The cloud provider you connect (for example Google Drive, Google Photos, Microsoft OneDrive, or Dropbox). Files you upload and folders or albums you create or browse are stored in and served from your own account at that provider, under that provider's terms and privacy policy.
- Geocoding and place search providers (when you use attach or adjust location and search for a place). On iOS this may include Apple MapKit. Dedupo may also use Photon (Komoot / OpenStreetMap) or your device's platform geocoder (Apple on iOS, Google on Android). These services receive the search text you enter and may receive approximate map-center coordinates. They do not receive your photo files from Dedupo.
- Map tile providers (Apple Maps or Google Maps) when the location picker map is shown. This is for displaying the map, not for storing your media.
- Firebase (Analytics and Crashlytics). The iOS app may send anonymous or pseudonymous app usage and crash diagnostics to help keep the app reliable. Firebase does not receive your cloud file contents, folder listings, Profile indexes, OAuth access tokens, or place search queries.
Dedupo does not disclose data from your connected accounts to any other third party except as required by law or with your explicit direction (for example, when you choose to upload files to your own cloud account, or when you choose to search for a place while attaching location).
Retention and deletion
Sign-in tokens stay on your iPhone until you disconnect or revoke access, as described above. Files you upload remain in your connected account until you delete them. For Google Drive, OneDrive, Dropbox, and FTP, deleting a file in Archive's Destination tab can remove it from that remote account. For Google Photos, Dedupo clears its local index entry and can open the item in Google Photos for you to delete there; the remote file stays until you delete it in Google Photos or through other tools from Google.
Attach or adjust location
In Albumizer, Archive, and related photo viewers you may optionally attach or change GPS metadata on photos you select. This is user-initiated. Dedupo does not add location to photos in the background and does not send your photo files to Dedupo servers for this feature. When you save, Dedupo embeds the coordinates you pick into the photo on the device. For a photo in a connected cloud account that supports replace uploads, Dedupo may upload a replaced file with that metadata to your account.
If you grant location access, Dedupo may read your current location once to center the map. You can still pan the map and pick a spot without searching. Dedupo does not track your location in the background. If you use place search, Dedupo sends your search text (and may send approximate map center) to a geocoding service listed under Sharing above. Your photos, filenames, and cloud account identifiers are not included in those search requests. Dedupo does not use place search for advertising.
App health analytics
The iOS app uses Firebase Analytics and Firebase Crashlytics for reliability, as described under Sharing. The website may use Google Analytics to understand how the site is used.
Who Dedupo is for
Dedupo is for a general audience. It has no kid-specific content, no chat, and no social feed. You do not create a Dedupo account or a public profile. If you contact us through Feedback or email, we only see what you send. Ask us to delete that message and we will.
Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will change when we do. Continued use of Dedupo after an update means you accept the revised policy.
Contact us
Email: dedupoapp@gmail.com
Feedback: https://dedupo.com/site/contact
Website: https://dedupo.com