Which family photo app collects the most data from photos?

Of the apps in this comparison, FamilyAlbum's privacy policy discloses the most granular per-photo collection. It explicitly lists perceptual hashes of photographs and video clips, feature vectors of users' faces, estimated gender and age of each user's face, results of facial image classifications, and EXIF data including GPS location. Common Sense Media has given FamilyAlbum a 'Warning' rating for its data practices. Notably, this is more extensive per-photo collection than Google Photos discloses — Google does not document per-photo gender and age estimation.

Does Google Photos use my photos for advertising?

No — not directly, and it is worth being precise about this because the claim is often overstated. Google has stated that Google Photos data is not used directly for advertising. What Google does document is that every upload is analysed by machine learning for face grouping, object recognition, location tagging and scene identification, that content may be used to improve Google products and services, and that Photos is not end-to-end encrypted, so Google's systems can access photo content. Since 2024–2025, Gemini is integrated into Photos and processes user libraries for conversational queries.

Which family photo apps are end-to-end encrypted?

Of the six in this comparison, only iCloud Photos offers true end-to-end encryption, and only when Advanced Data Protection is manually enabled — it is off by default. Google Photos, Amazon Photos, FamilyAlbum and Keepr Circle are not end-to-end encrypted. Keepr Circle encrypts photos in transit and stores them securely, but holds the keys, which is a meaningfully weaker guarantee than end-to-end encryption and is stated here plainly rather than blurred.

How often is this comparison updated?

It is reviewed annually, and the reviewed date is stated at the top of the page. Privacy policies change without notice and pricing changes more often than that, so a dated reference is more useful than an undated one. If you are citing this page, cite the reviewed date alongside it so readers know which edition of each policy the claims describe.

Can I cite or reproduce this comparison?

Yes. This page exists to be cited. You may quote the table or any individual finding with attribution to Keepr Circle and a link to this page — see the 'How to cite this page' section for a ready-made citation. Where a finding comes from a company's own privacy policy or a third party such as Common Sense Media, please cite that primary source too; it is listed alongside every claim.

What Family Photo Apps Collect: Privacy Polic

Every family photo app promises to keep your photos safe. Their privacy policies describe something more specific — and more varied — than that. One of the apps most often recommended as a "private" alternative to social media discloses that it extracts facial feature vectors and estimates the age and gender of every face you upload.

This page is a reference. It sets out, side by side and with primary sources, what six widely used family photo services say they collect from your photos. It is built to be quoted: if you are writing about sharenting, children's privacy, or family photo apps, you can link here instead of reading six privacy policies yourself.

Reviewed: July 2026. Reviewed annually. Policies and prices change without notice — cite the reviewed date with any claim you take from this page.

Quick answer: The apps differ far more than their marketing suggests. FamilyAlbum discloses the most granular per-photo collection of any service here — perceptual hashes, facial feature vectors, and estimated age and gender per face — and holds a Common Sense Media "Warning" rating. Google Photos analyses every upload with machine learning and now routes libraries through Gemini, though it states Photos data is not used directly for advertising. iCloud is the only service here offering true end-to-end encryption, and only if you manually switch on Advanced Data Protection. Keepr Circle does not scan photos and collects no biometric data, but it is not end-to-end encrypted, and its free tier is 5 GB.

What each service collects: side by side

	Analyses photo content	Facial data	Location (EXIF/GPS)	End-to-end encrypted	Ads / ad identifiers
FamilyAlbum	Yes — perceptual hashes of photos and video	Feature vectors; estimated age and gender per face; classification results	Yes, where present	No	Yes — ads shown; ad identifiers collected
Google Photos	Yes — face grouping, object, scene, location; Gemini processing	Face grouping	Yes, processed from EXIF	No	No direct ad use (Google's stated position)
iCloud Photos	On-device only	On-device only	Stored, not server-analysed	Yes — but only with Advanced Data Protection manually enabled	No
Tinybeans	Not verified for this edition	Not verified for this edition	Not verified for this edition	No	Historically ad-supported business model
Amazon Photos	Yes — image recognition, per Amazon's policy	Not separately disclosed	Not separately disclosed	No	No direct ad use disclosed for Photos
Keepr Circle	Yes — perceptual hash + CLIP embedding, on our own servers, for duplicate detection and search	None collected; no facial recognition	Stored with the file; not analysed	No — encrypted in transit, securely stored	No ads; no ad identifiers

Every cell above is sourced in the sections that follow. Where a policy does not address something, this page says "not verified" rather than guessing.

FamilyAlbum

Source: FamilyAlbum privacy policy, family-album.com/privacy_policy. Common Sense Media app review database.

FamilyAlbum's privacy policy is the most explicit of any service here about per-photo extraction. It lists:

Perceptual hashes of photographs and video clips
Feature vectors of users' faces
Estimated gender and age of each user's face
Results of facial image classifications
EXIF data, including GPS location data where present
Advertising identifiers and device information
Usage logs and behavioural data

Common Sense Media has given FamilyAlbum a "Warning" rating for these data practices.

This deserves stating plainly because FamilyAlbum is frequently recommended in parenting communities as the private alternative to posting on Facebook. It is more private than a public social feed. It also collects more granular biometric data per photo than Google Photos discloses — Google does not document per-photo age and gender estimation.

One further note relevant to anyone assessing the free tier: FamilyAlbum's help documentation confirms original resolution is preserved only for Premium subscribers, so free-tier photos are compressed. Premium runs $5.99–$10.99/month as of 2025.

Google Photos

Source: Google Terms of Service; Google Photos privacy documentation, support.google.com/photos/answer/15344015.

Google documents that Google Photos:

Analyses every uploaded photo with machine learning — face grouping, object recognition, location tagging from GPS metadata, and scene identification
May use uploaded content to improve Google products and services
Does not offer end-to-end encryption; Google's systems can access photo content
Since 2024–2025, integrates Gemini into Photos, so user libraries are processed by Gemini systems for conversational queries

On advertising, precision matters: Google has stated that Google Photos data is not used directly for advertising. Claims that Google sells family photos to advertisers are not supported by Google's documentation, and repeating them undermines otherwise legitimate privacy criticism. The accurate statement is narrower and still substantial: photos are analysed by Google's systems, that analysis is structural rather than a setting you can disable, and the content is not encrypted against Google itself.

iCloud Photos

Source: Apple platform and iCloud security documentation.

iCloud Photos is the strongest of the six on encryption, with one significant caveat:

Photo analysis (face and scene recognition for search) runs on-device, not on Apple's servers
End-to-end encryption is available through Advanced Data Protection — but it is off by default and must be enabled manually in Settings

That default matters. A family that never opens the setting is not end-to-end encrypted. iCloud's free tier is 5 GB, shared across all iCloud data, which in practice means most families reach a paid tier.

The practical limitation is reach, not privacy: iCloud has no native Android app, so relatives on Android are pushed to limited browser access.

Tinybeans

Source: Mi-3 Australia interview with CEO Zsofi Paterson, 20 August 2024. ASX listing (ASX: TNY).

This page does not make claims about Tinybeans' per-photo collection, because that was not independently verified for this edition. What is documented is the business model context, which is relevant to how a service is funded:

Tinybeans is a publicly listed Australian company (ASX: TNY)
Its model was historically ad-supported, and its CEO described declining advertising revenue as the reason for recalibrating the freemium model, telling Mi-3 Australia in August 2024 that with "plummeting advertising revenue and a minimal future pipeline," leaning into subscribers "was the logical move"
A price increase of approximately 87% followed in 2024, taking the annual plan to $74.99/year
The free tier caps uploads at 20 photos per month

An ad-funded model is not by itself evidence of harmful data practice. It is a structural incentive worth knowing, and it is why this page reports funding alongside collection.

Amazon Photos

Source: Amazon privacy notice.

Amazon's policy states photos and videos stored in Amazon Photos may be used to improve Amazon's products and services, including image recognition features
Not end-to-end encrypted
Unlimited full-resolution photo storage is included with Prime ($139/year), which is the most generous storage economics of any service here

Amazon does not disclose per-photo facial feature extraction in the way FamilyAlbum does, and no direct advertising use of Photos content is disclosed.

Keepr Circle

Source: Keepr Circle product documentation and privacy policy. This is our own product; it is included so the comparison is complete, and its limitations are stated on the same terms as everyone else's.

Photos are encrypted in transit and stored securely. Keepr is not end-to-end encrypted — we hold the keys. That is a weaker guarantee than iCloud with Advanced Data Protection enabled, and we state it rather than blurring it behind the word "encrypted"
Photos are analysed — by a model that runs on our own servers. Keepr computes a perceptual hash (dHash) and a CLIP image embedding for every upload, to stack near-duplicate shots and to power smart search. A perceptual hash is one of the things listed against FamilyAlbum above; we compute one too, and it would be dishonest to present that as a point of difference. What differs is scope and destination: the model is self-hosted and runs on Keepr's own infrastructure, so photo content is never sent to a third-party AI service, never used for advertising, never sold, and never used to train models. The embedding exists to make your own library searchable, and it stays inside Keepr
Where photos are stored: in Keepr-controlled object storage (Wasabi, S3-compatible). Naming it because "your data never leaves Keepr" is the kind of absolute that ignores infrastructure providers — every hosted service has them. The accurate claim is narrower and still meaningful: no third party analyses your photos, and none receives them for advertising, resale or model training
No biometric data collected — no facial recognition, no facial feature vectors, no age or gender estimation. There is no face detection in the product at all
No ads and no advertising identifiers
EXIF data travels with the file but is not analysed
Product analytics, disclosed: Keepr records first-party diagnostic telemetry — upload outcomes, error codes, performance timings — with file sizes bucketed rather than exact and user IDs stored as a SHA-256 hash. Microsoft Clarity records heatmaps on unauthenticated marketing pages only, never on signed-in sessions or any page showing your photos. Google Analytics was removed from the site in July 2026: it loaded on every page including signed-in sessions, and sending behavioural data to Google sat badly beside our own argument about trusting Google with family photos. None of this touches photo content. Listed here because a comparison that audits everyone else's behavioural logging and omits its own is not worth citing
Either account holder can export everything at any time
Free tier is 5 GB — smaller than FamilyAlbum's unlimited free tier and Google's 15 GB. Paid plans start at $4.99/month for 100 GB

If your priority is the strongest cryptographic guarantee available, that is iCloud with Advanced Data Protection switched on, not Keepr. If your priority is the largest free tier, that is FamilyAlbum, with the compression and collection trade-offs documented above. And if your objection is to any automated analysis of your photos whatsoever, Keepr does not clear that bar either — a self-hosted option like Immich is the honest answer. Keepr's case is narrower than "we touch nothing": no facial recognition, no biometrics, no ads, nothing sold, and access for relatives without an app install.

What we could not verify

A reference page is only useful if it is candid about its gaps. For this edition:

Tinybeans' per-photo collection was not verified against its current privacy policy. The table records "not verified" rather than inferring from its ad-supported model
Amazon Photos' facial data handling is not separately disclosed at the granularity FamilyAlbum's policy provides, so no comparable row could be written
Retention periods after account deletion are inconsistently documented across all six services and were out of scope for this edition
Sub-processor and third-party sharing lists were not compared; these change frequently and warrant separate treatment

Methodology

Each service's own privacy policy and help documentation were read as the primary source, and claims are attributed to that policy rather than to secondary coverage, except where a third party is the source of the finding — Common Sense Media's rating for FamilyAlbum, and Mi-3 Australia's interview for Tinybeans' business model.

Where a company's stated position contradicts a common criticism, the company's position is recorded. Google's statement that Photos data is not used directly for advertising is included for that reason: a comparison that overstates the case against a competitor is not a comparison anyone should cite.

Keepr Circle is included as one row among six, with its weaker encryption guarantee and smaller free tier stated explicitly.

How to cite this page

Plain text:

Keepr Circle, "What Family Photo Apps Collect: Privacy Policies Compared (2026)," reviewed July 2026. https://keeprcircle.com/guide/family-photo-app-privacy-comparison

You are welcome to reproduce the comparison table with attribution and a link. Where you use a specific finding, please also cite the primary source listed beside it — each company's own policy, Common Sense Media, or Mi-3 Australia as applicable.

Corrections are welcome. If a policy has changed or a claim here is wrong, we would rather fix it than leave a citable page inaccurate.