Privacy Policy

Last updated: 10 October 2026

Photoch is a photo editor that runs in your browser. The images you open and edit stay on your device. They are only sent anywhere when you use an AI feature, and even then they are not stored. Signing in is optional.

Your images

Opening, editing and saving images happens entirely in your browser. Your files are not uploaded to Photoch. Recently opened files are kept in your browser's own storage on your device, so you can reopen them from the home screen.

AI features

When you use Generative Fill, Generative Edit, Select by Prompt, Select Subject or Remove Background, the image (or the part you selected, made smaller) and your prompt are sent over an encrypted connection to Photoch's AI server and processed on a computer run by Photoch. They are:

• kept in memory only, and deleted as soon as the result has reached your browser, or after 10 minutes at the most;
• never written to disk, logged, shared or used to train AI models;
• checked by an automatic safety filter that blocks inappropriate results.

If the AI server can't be reached, Select Subject may run an AI model inside your browser instead. Nothing is uploaded in that case.

Signing in (optional)

You can sign in with Google, or with an email address and password, to get a larger daily allowance of AI features. Sign-in is provided by Google's Firebase Authentication service, which stores your username (or, for Google accounts, your name), email address, your password in securely hashed form (never readable, not even by Photoch) and, for Google accounts, your profile picture, along with sign-in records. When you create an account with an email address, Firebase sends you an email to confirm the address, and it can send you a link to reset your password when you ask for one. This is covered by Google's Privacy Policy and the Firebase privacy information.

Photoch's own server never stores your name or email. It only receives proof that you are signed in, and keeps your account ID with the number of AI features you used today, so that it can apply your daily allowance. These counts start again every day.

You can delete your account at any time from the account menu (your initial at the top right of the editor).

Daily limits when you're not signed in

To share the AI server fairly, signed-out visitors are counted by IP address. These counts are kept in memory only, are never written to disk, and reset every day at midnight UTC.

Visitor statistics

Photoch counts visits with Umami, which runs on Photoch's own server. It records pages viewed, the referring site, browser, device type and country. It uses no cookies, does not store IP addresses and does not build profiles of people.

Server logs and fonts

• Like most websites, Photoch's web server keeps standard access logs (IP address, time, page requested and browser) for up to 14 days, for security and troubleshooting. They never contain your images.
• The editor loads typefaces from Google Fonts, so your browser connects to Google's servers to download them. See Google Fonts' privacy information.

Cookies and storage on your device

Photoch uses no advertising or tracking cookies. Your browser's storage keeps your preferences (such as the colour theme), the recent files list and, when you sign in, Firebase's sign-in session. Clearing your browser's site data for photoch.com removes all of these.

Children

Photoch is not directed at children under 13, and accounts are not intended for them.

Changes and contact

If this policy changes, the date at the top changes too. For questions, or to ask about your data, contact info@photoch.com.