Filteroo is a local-first photo editor: your photos, edits, and project data live on your device and are never uploaded to any server we operate. This page describes the complete data picture, including the third-party services used for in-app purchases and the optional banner / interstitial ads.
Each project is stored inside Filteroo's app-private storage:
<Android app docs>/projects/<uuid>/
original.jpg ← the photo you imported or captured (untouched)
thumbnail.jpg ← a small preview for the library tile
edits.json ← your stack of edits (crop, tone, filter, beauty…)
meta.json ← project name, tags, timestamps
landmarks.json ← cached face landmarks (Beauty tool only)This folder is sandboxed by Android — only Filteroo can read it. Filteroo also explicitly opts out of Android's auto-backup system (allowBackup="false" + empty data_extraction_rules.xml), so this folder is not uploaded to your Google Drive backup either.
When you open the Beauty tool, Filteroo uses Google ML Kit Face Detection to find face landmarks (eye and mouth positions). This is on-device — no image data and no landmark coordinates are sent to Google. The landmarks are cached in the project folder and deleted when you delete the project.
Google's confirmation that the bundled ML Kit model runs on-device: developers.google.com/ml-kit/vision/face-detection
When you tap Save to Photos, Filteroo writes a copy of the rendered JPEG to your device's gallery using Android's MediaStore API. The copy lives in your regular photo library and is yours to manage. When you tap Share, Filteroo invokes the system share sheet — what the receiving app does is governed by its own privacy policy.
The free version of Filteroo displays a small banner ad in the Library screen and shows an interstitial ad after some exports. Ads are served by Google AdMob.
AdMob collects:
AdMob does not receive the photos you edit, your project library, or any content inside Filteroo.
Google's full AdMob privacy disclosure: policies.google.com/technologies/partner-sites
Buying Filteroo Plus removes the banner and disables interstitials. After Plus is owned, AdMob is not initialised and no ad requests are made.
The Plus purchase is handled by Google Play Billing. Google receives your purchase information for fraud prevention and refunds. We receive only a confirmation token that the purchase was made — we never see your payment method or Google account.
Google's billing privacy: policies.google.com/privacy
Disclosed above under "What stays on your device". On-device only.
None. Because we operate no servers, there is nothing on our end to collect, sell, or retain. AdMob data goes to Google directly under Google's privacy policy.
Filteroo is rated for general audiences. We don't knowingly collect data from anyone, including children under 13.
If Filteroo's privacy behaviour changes (for example, if we ever add analytics or change ad partners), we'll update this page and the "Last updated" date at the top.