Privacy policy

Who provides Fotofavn?

Fotofavn is provided by Collaborator ApS, CVR 42564125, Krudtmøllegårds Allé 6, 2300 København S, Denmark. It is independent of Aula, KOMBIT, MitID and Apple.

This policy covers the Fotofavn Mac app. It explains processing on your device and distinguishes it from information handled by the services you connect to. It does not describe the separate hosting of this website.

Information the app uses

• Aula access: sign-in information, session tokens and the account and profile information needed to identify your guardian account and the albums you can access. Sign-in data is sent directly to the relevant authentication services.
• Photos and their details: images, filenames, dates, titles, captions and album information available through Aula. These may contain information about children or other people. Fotofavn downloads them to save and organise them in Photos.
• Existing Photos content: the app reads the library open in Apple Photos and exports originals locally to compare image contents and avoid duplicate imports. This can include existing photos that did not come from Aula. It does not perform facial recognition or AI analysis.
• Archive history: source and Photos identifiers, image fingerprints, album membership, progress, import confirmations, your review choices and records used to remember deletions. This history lets the app resume work and avoid repeating saved or deliberately removed images.
• Preferences and diagnostics: language, sync schedule, battery preference, last completed sync time, saved folder access, and a local activity log used for troubleshooting.

Fotofavn saves images in the library currently open in Photos. Where supported and appropriate, Aula titles, captions, dates and album details are added without overwriting fields you have already filled in.

What stays on your Mac

Photo comparison, duplicate checks, previews and archive processing take place on your Mac. Fotofavn has no developer-hosted photo storage, analytics service or AI service. It does not upload your images, archive history or sign-in details to Collaborator ApS.

Saved sign-in details are protected by macOS secure storage and are not configured to sync through iCloud Keychain. The app normally stores its archive in its private app storage. If you already use a previously selected archive folder, Fotofavn continues using that folder.

macOS permissions control access to Photos and any selected archive folder. The app does not provide a separate encrypted vault for archive files. Your Mac’s disk encryption, access controls and backup settings also affect their protection.

Connections and other providers

Your Mac connects directly to Aula, the services involved in MitID sign-in, and Aula-authorised image download addresses. These services receive the requests needed to sign in and retrieve your content, including authentication data and ordinary connection information such as your IP address. Resuming a download can tell the download service how many bytes have already been received. Local processing does not mean the app works without a network connection.

Apple Photos may download existing originals from iCloud for comparison and upload imported pictures if iCloud Photos is enabled. Your chosen backup services may also copy local app data. These operations follow your Apple and backup settings; they are not a Fotofavn cloud archive.

Aula, authentication providers, Apple and any backup provider handle their own service records under their own privacy information, including their own storage locations and retention periods. Fotofavn does not create a separate online account with Collaborator ApS.

Purchases and subscriptions

Apple handles payments, renewals, cancellations and refunds through the App Store and your Apple Account. Fotofavn uses Apple’s verified purchase and subscription information on your Mac to check access to new Aula syncs, restore purchases and show trial eligibility. The app does not send purchase receipts to a Collaborator ApS server, and we do not receive your payment-card details through the app.

When subscription access ends, new Aula syncs stop. Your saved pictures and archive history remain. Manage or cancel your subscription in your Apple Account. Apple’s own privacy information and retention rules apply to its payment and account records.

Your controls

New installations use daily sync, with the first automatic run due after 24 hours. Existing preferences are preserved. You can choose manual, hourly, daily or weekly sync. Automatic runs require the app to be open and signed in; syncing on battery power and launch at login are optional. Pausing suspends automatic syncing until you explicitly resume the work. Quitting stops it.

You can sign out and revoke the app’s permission to control Photos in macOS System Settings. Signing out removes the app’s saved sign-in but keeps imported pictures and archive history. Revoking access prevents further access; it does not erase existing copies.

The optional demo uses bundled fictional pictures and does not contact Aula or MitID. It uses real Photos operations and can add sample pictures to your open library, including iCloud if enabled. Its archive history and preferences are separate. Leaving demo mode keeps any imported sample pictures.

Retention and deletion

• Saved pictures: remain in Photos until you delete them there. Photos’ Recently Deleted, iCloud and backup behaviour applies. Fotofavn does not delete the originals in Aula.
• Saved sign-in: remains available across app launches until you sign out, replace it or it can no longer be used. Signing out does not delete your Aula, MitID or Apple account.
• Archive history and settings: remain locally between runs, without a fixed expiry, to support resuming, matching and remembered deletions. Deleting the app alone should not be relied on to erase these files or saved sign-in details.
• Working copies: private downloads are removed as processing completes and they are no longer needed. Unfinished, uncertain or review-required items can retain their downloaded originals for recovery. Preview and export files are local working files; preview caches are bounded and older unneeded entries are removed.
• Activity logs: the app rotates the local activity log at about 1 MB and keeps one previous log. Entries are replaced as new activity occurs, rather than after a fixed number of days.

To remove local archive data, first sign out and quit Fotofavn, then remove its archive files and preferences. Ask for guidance if you are unsure which folder your installation uses. Removing history can cause future syncing to reconsider previously imported or deleted images. Photos and backups must be managed separately. Collaborator ApS cannot remotely read or erase files held only on your Mac.

Diagnostics and support

Fotofavn does not automatically send support reports or usage analytics. Automatic crash uploads from its bundled worker runtime are disabled. macOS diagnostics and any sharing you enable with Apple are separate.

The local activity log contains timestamps, progress counts, timings and restricted diagnostic messages. The support summary you can review and copy contains app and macOS versions, architecture and app status. That summary excludes photos, account details, sign-in codes, archive history and activity logs. Copying it does not send it to us.

You can contact Collaborator ApS at hej@fotofavn.dk. We use Google to handle email and receive the contact details, messages and attachments you choose to send. Do not send children’s pictures, private school information, passwords, MitID codes or complete archive folders.

Collaborator ApS is responsible for the personal information you send us for support. We use it to respond to your enquiry and troubleshoot problems. Our basis is our legitimate interest in providing support and maintaining Fotofavn (GDPR Article 6(1)(f)). Where we handle a request to exercise your data-protection rights, we also process the information needed to meet our legal obligations (Article 6(1)(c)).

We delete support correspondence when it is no longer needed, normally within 12 months of our last contact once the enquiry is resolved. Specific information may be kept longer where necessary to meet legal obligations or handle a legal claim. Deleted email may remain in Google’s Trash for up to 30 days. This support retention period does not apply to your local photos or archive.

Google may process email outside the EU/EEA. Google describes its use of adequacy decisions, the EU–US Data Privacy Framework and standard contractual clauses in its information about international data transfers. Contact us if you need more information about the handling of your support enquiry.

Questions and your rights

You can write to hej@fotofavn.dk or the postal address above about privacy or deletion guidance. For personal information held by the company, applicable data-protection law can give you rights to access, correction, deletion, restriction, objection and portability. These rights depend on the circumstances. You can also complain to Datatilsynet, the Danish Data Protection Agency.

For information held only in your Photos library or local archive, use the local controls described above. Requests about Aula, MitID, Apple or backup-provider records should go to the relevant provider. Only archive pictures you are entitled to keep.

Changes to this policy

We will update this page when Fotofavn’s data handling changes. The date below the title identifies the policy version.