Privacy policy

Effective October 25, 2026. This policy covers Studio, the app Aperhouse makes for photographers, and the small online services Aperhouse runs for it.

The short version

• Studio runs on the photographer's own computer, or on a server in their own account. Their clients, bookings, photos and messages are stored there, not with Aperhouse.
• Aperhouse runs two small services for the app: free studio web addresses, and the hand-off for "Sign in with Google". They store as little as they can, described below.
• We don't sell data, show ads, or use anyone's data to train AI models.

Information about photographers' clients

When a photographer uses Studio, their clients' details (names, email addresses, bookings, contracts, payments and photos) are stored by the photographer's own copy of the app, on their computer or server, and with services the photographer chooses to connect (for example their email provider, Stripe for payments, their own cloud storage, or the AI provider they pick for the app's optional assistant). Aperhouse doesn't receive or have access to this information. The photographer is responsible for it; questions about it should go to the photographer.

Free studio addresses

A studio that runs on its own computer can get a free web address such as yourstudio.aperhouse.app. Visitors reach the studio through Cloudflare's network; their visits go to the studio's computer and don't pass through or get recorded by Aperhouse. To provide the address, our service stores the address name, an identifier for the studio's connection or server, a one-way scrambled form of a random code that identifies that copy of the app, and the date the address was made. To prevent abuse it counts how many addresses each internet connection creates per day; those counts are deleted after two days.

Sign in with Google (email)

A photographer can connect their Gmail or Google Workspace account so the studio sends its emails (proposals, reminders, receipts) from their address. When they choose Sign in with Google:

• Studio asks Google for permission to send email on the photographer's behalf (the gmail.send scope), plus their email address and name so the app can show which account is connected. It does not ask to read, change or delete email, and it cannot.
• Google sends the resulting access tokens to Aperhouse's service, which holds them for at most five minutes until the photographer's own copy of Studio collects them, and then deletes them.
• From then on, the tokens are stored encrypted by the photographer's own copy of Studio. When it needs a fresh access token, it asks Aperhouse's service, which passes the request to Google and returns the answer without storing it.
• Emails are sent directly from the photographer's copy of Studio to Gmail. Aperhouse never sees their content.
• The photographer can disconnect any time in Studio (Settings → Email → Disconnect) or in their Google account's security settings.

Aperhouse's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information from Google is used only to send the photographer's own studio email, is not transferred to others, is not used for advertising, and is not read by people.

Support and updates

If a photographer contacts us from the app's Help page, we receive their message, the email address they give for the answer, and, only if they choose to include it, a diagnostic report of settings and counts that leaves out their clients' details. We use these only to help them. Once a day the app checks a public file on GitHub to see whether a new version is available; it sends no personal information, though GitHub, like any website, sees the computer's internet address.

Changes and contact

If this policy changes, we'll update the date above and mention it in the app's release notes. Questions: hello@aperhouse.com.