Privacy Policy

Last updated October 14, 2026

This policy explains what Artlog collects, how it’s used and shared, and the choices you have. Artlog is made by Daniel Jiang (“we”, “us”).

Artlog doesn’t show ads, sell your information or track you across other companies’ apps and websites.

On your iPhone

Your collection lives on your iPhone first: visits, saved artworks, notes and photos. Original photos stay on your iPhone. If you don’t sign in, the name and photo you choose during setup stay on your iPhone too.

Identifying art

Identification sends a numeric fingerprint of your photo, never the photo itself, with the museum, the visit and the time you took it. We keep scan results to improve recognition and delete scan fingerprints after 180 days, unless they’ve been added to the shared index.

Label reading happens on your iPhone and sends only the label’s text, plus the web address of a QR code on the label if there is one. To check the label and write artwork guides, we send that text, and searches for the artwork’s title and artist, to our AI and search providers.

Your collection backup

Artlog backs up your collection so it can sync and be restored, whether or not you sign in. The backup holds your visits, saved artworks, notes, a numeric fingerprint of each saved artwork and private, resized copies of the photos you keep. Camera and location metadata are removed from those copies.

Without an account, the backup is tied to an anonymous identity for this iPhone.

Helping other visitors

Saving an artwork confirmed from its wall label contributes the label’s details, the artwork’s numeric fingerprint and a small crop of your photo, at most 256 pixels wide, to a shared index. The crop may be shown to other visitors as the artwork’s thumbnail. Contributions don’t show who made them. When you delete your data, the crop is deleted; the label’s details and the fingerprint stay in the index, no longer linked to you.

Your location

Artlog uses your location only while you’re using the app, to find nearby museums on your iPhone. Apple Maps searches may send a search area centered on your location to Apple. Artlog’s servers receive the selected museum, but not your GPS coordinates. Confirming a new place also sends that place’s name, coordinates and website to Artlog.

When you import a photo, Artlog may read the photo’s location on your iPhone to suggest the museum.

Your account

You can use Artlog without an account. On first launch, Artlog creates an anonymous identity for your iPhone and uses Apple’s App Attest to confirm that requests come from the genuine app.

If you sign in with Apple or Google, we receive an account identifier and your email address if it’s provided. With Apple, this may be a private relay address. Google may also include your name and profile picture in the sign-in information sent to our servers. We store the account identifier and email address, but not the name or profile picture from sign-in. Your name from Apple or Google fills in the profile form on your iPhone; we store the name you choose when you save your profile.

Profiles and sharing

After signing in, you can create a profile with a username, a name and an optional bio and photo. Profiles are public: anyone can find them, including people without an account.

A posted visit shows your profile, the museum, the date, your visit note, the artworks and the photos you select, to the audience you choose: only you, friends or everyone. You can post a visit without its note, and notes on visits you don’t post aren’t shared. Anyone can see public visits and your public wall. Opening an artwork you’ve shared shows its title, artist, date, medium and museum.

We store friends, likes, comments and in-app notifications to show them to the people involved. Notifications are deleted after 30 days. Friend suggestions come from mutual friends, likes, and the artworks and museums you have in common with what other people have shared.

If you turn on safety checks, our moderation provider, OpenAI, checks the comments, visit notes and profile bios you post for harmful content before others can see them. OpenAI receives only the text, not your name or account. Without safety checks, you can’t post comments, visit notes or a bio. Artlog asks when you first open it; to change your answer, open Settings, tap your name, then Safety checks.

Exhibitions and museums you save to Want to see are stored on Artlog’s servers, with your account once you sign in. If you have a profile, your friends see the exhibitions you want to see.

Leaderboards show your profile and your number of saved artworks and visits. New profiles appear on the global leaderboard; you can change this in Settings → Leaderboards.

Reports and feedback

When you report a person, a post or AI-generated content, we keep the report and a copy of what was reported so we can review it. Feedback you send from Settings is stored with your app and iOS versions.

Crash reports

When the app or our servers hit an error, a report goes to Sentry with technical details such as the error, your device model and your iOS and app versions. Reports leave out photos, notes, location and the content of your requests. The app also records how long screens and requests take.

Service providers

These providers run parts of Artlog for us. They use your information only to provide their service and must give it the same or equal protection as this policy does:

Convex hosts Artlog’s servers and database. Cloudflare stores backed-up photos, profile photos, shared index crops, fingerprints and audio. Pinecone searches artwork fingerprints. Nebius runs the AI models that read label text and write guides. Tavily searches the web for artwork information. OpenAI turns guides into narration and, if you turn on safety checks, checks comments, visit notes and profile bios for harmful content. Sentry receives crash reports. Expo delivers push notifications. Apple provides Sign in with Apple, App Attest and Maps search. Google provides Google sign-in.

To look up artworks, our servers also send label details such as the title and artist, but nothing about you, to Wikidata, Wikipedia, Wikimedia Commons, the Art Institute of Chicago and museum websites. The app also loads artwork images and information directly from museums, Wikimedia and other public sources, which see your iPhone’s IP address as any website would.

We may disclose information when the law requires it or to protect Artlog and its users. If Artlog changes ownership, this policy continues to apply to your information.

How long we keep information

We keep your collection backup until you delete your data. Records of deleted artworks remain in the backup, including their artwork details and visit information, and continue to sync across your devices. Deleting your account also removes your profile and posts.

Scan fingerprints are deleted after 180 days unless they’ve been added to the shared index, and notifications after 30 days. We keep scan results, reports, feedback and shared index contributions to run and improve Artlog. Sentry keeps crash reports for a limited time.

Deleting your information

Deleting an artwork or photo removes the affected backed-up photo files. The artwork records described above remain. To delete your account, open Settings, tap your name, then Delete account. This deletes your profile, friends, posts, wall, likes, comments, notifications, Want to see list and the collection backed up with your account, and signs out your other devices. Without an account, open Settings → Your collection → Delete my data to delete this iPhone’s backup and Want to see list.

Either way, Artlog also erases its data on this iPhone and deletes the photo crops you added to the shared index. Their label details and fingerprints, and your scan results, remain without any link to you, and reports and feedback you sent are kept without your name. Artlog data on your other devices stays until you delete the app there.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your information, or to object to how we use it. Contact us to make a request, and we’ll respond within the time the law requires.

Because Artlog doesn’t track you across other companies’ apps and websites, it doesn’t respond differently to browser Do Not Track signals.

Children

Artlog isn’t intended for children under 13, and we don’t knowingly collect their information. If you believe a child has given us information, contact us and we’ll delete it.

Where information is processed

Our providers process information in the United States and other countries, whose data protection laws may differ from yours.

Changes

We’ll update this policy as Artlog changes and revise the date above. For significant changes, we’ll let you know in the app.

Contact

Questions or requests: email danieljiang1999@gmail.com, or open Settings → Send feedback in Artlog.