Privacy

Updated October 14, 2026

Grain is built to keep your library private. Your photo catalog, search index, and most processing happen locally on your Mac.

Grain Photo is operated by Bridge Street Technologies, Inc. We are responsible for the privacy, security, and integrity of information Grain accesses or collects. This policy explains what information we collect, why we collect it, and the choices you have.

Your library

Grain builds and searches its catalog locally on your Mac.

Basic account and product reporting does not include the contents of your library, including your photos, videos, filenames, folder paths, search text, or screenshots.

When you choose to connect Grain to another service or device, such as Dropbox or remote access, Grain communicates with that service or device as necessary to provide the feature.

Dropbox

When you connect Dropbox, Grain requests read-only access to basic account information, file and folder metadata, and file content. This lets Grain browse your existing library across Dropbox folders. Folders are included by default when you enable the Dropbox source; you can exclude folders in Sources settings.

Grain uses your Dropbox account identifier and file information such as names, paths, revisions, sizes, dates, and available media metadata to discover, catalog, and search your library. Your Mac requests thumbnails, previews, and original-file content when needed for supported viewing, playback, or export directly from Dropbox. Grain does not upload, edit, move, delete, or change sharing permissions on files in your Dropbox.

Grain does not store your Dropbox photos or videos on Grain-operated servers. Catalog records, thumbnails and previews, downloaded media, and visual-search indexes are stored or cached locally on your devices. Visual search uses models running on your Mac; Grain does not upload your Dropbox media to train models. Optional transfers to connected apps or devices are described below.

You authorize access on Dropbox's sign-in page. The authorization response passes through our website's return page to the Mac app, which exchanges it directly with Dropbox. Grain stores the refresh credential in your Mac's Keychain. We do not collect your Dropbox password. Dropbox's own handling of your account and files is covered by Dropbox's privacy policy.

Turning Dropbox off in Grain's Sources settings pauses access. It does not revoke Dropbox authorization or erase previously stored local catalog data, search indexes, previews, downloaded or exported files, or Keychain credentials. You can revoke Grain's authorization in Dropbox's connected-app settings. Revocation prevents future authorized API access but does not erase copies already on your devices. Contact info@grain.photo for help removing Grain's local data.

Connected apps and devices

When you configure another app or assistant to use Grain's local connector, it can request catalog information such as filenames, metadata, and search results within the access you allow. Catalog access is enabled by default; preview and original-file access are separate controls and are off by default. You can turn off connector access or adjust its permissions in Connectors settings.

Where mobile access is available, enabling it lets your Mac send library information and media to devices you pair. The relay forwards end-to-end encrypted data without storing your image or video content. It retains pairing, device, and transfer-usage information needed to operate the connection. Paired devices may cache catalog information and previews locally.

Content you export or make available to another app, assistant, or paired device may leave your Mac. The recipient's privacy practices apply to information it receives. You can pause or forget paired mobile devices in Connectors settings; disabling access does not remove copies already received by another app or device.

Account and product information

We collect information needed to operate Grain, including account and sign-in information, purchases, licensing and trial information, and limited information about use of the app. Basic app activity is associated with your Grain account and includes activation, days the app is active, and milestones such as the first source added, successful search, and opened result, without their content. This reporting is separate from optional diagnostics.

We use this information to provide and support Grain, manage accounts and licenses, understand product use, and improve the service.

Payment information is processed by our payment provider. Grain does not receive your full card number.

Browser checks

We use Cloudflare Turnstile to help prevent automated abuse of sign-in emails, waitlist submissions, and public downloads. Cloudflare processes browser information and your IP address to perform this check.

After a successful download check, Grain sets a security cookie that expires after one hour so your download can start or resume. It contains permission for the current installer, not an account or device identifier. We count installer transfers that start, including repeat downloads; this does not tell us who installed or opened Grain.

Website analytics

We use Google Analytics on the grain.photo homepage to understand visits, referral sources, and clicks on Download for Mac. Google Analytics uses first-party cookies and processes information such as a browser identifier, browser and device information, approximate location, and interactions with the page.

We disable Google advertising signals and ad personalization. We do not send Grain account identities, library contents, or sign-in tokens to Google Analytics, and we do not load it on account, admin, or sign-in callback pages.

We skip website analytics when your browser sends Global Privacy Control or Do Not Track. You can also block analytics through your browser or use Google's Analytics opt-out add-on. Learn more about how Google processes information from sites using its services.

Optional diagnostics

If you enable Share diagnostics, Grain may send technical information such as crash reports, app and macOS versions, performance information, and the outcomes of certain app operations.

Diagnostics use installation and session identifiers rather than your Grain account identity, but may allow reports from the same installation to be associated with one another.

You can turn Share diagnostics off at any time in General settings. Crash reporting is part of this optional setting.

Service providers

We use service providers to operate Grain, including Cloudflare, Postmark, Stripe, Google when you choose Google sign-in or visit our homepage with analytics enabled, and Sentry for optional diagnostics.

These providers may process information on our behalf as necessary to provide their services.

We do not sell your personal information or use your Grain activity for cross-site targeted advertising.

Retention

We keep information for as long as reasonably necessary to operate Grain, support customers, improve the service, meet legal obligations, prevent fraud, and resolve disputes.

Access to personal information is limited to people and service providers who need it for those purposes.

Your choices

You can control optional diagnostics in Grain's General settings.

You can contact info@grain.photo to ask about your personal information or request access, correction, or deletion. We will handle requests in accordance with applicable law and may retain information where legally or operationally required.

Browser Do Not Track signals do not change the account and app reporting described in this policy.

Changes and contact

We may update this policy from time to time. We’ll update the date above and provide appropriate notice if we make material changes.

Grain is not directed to children under 13.

For privacy questions, contact info@grain.photo.