Privacy Policy for Lesiya

Effective date: October 7, 2026

Lesiya is a gallery for user-managed sources such as Immich, SMB and WebDAV. Lesiya does not operate a photo cloud, advertising platform or analytics backend.

Data processed on your device

The app processes connection details you enter, media and file metadata, previews, offline files, search-index data, favorites, local notes, backup history and local crash diagnostics. Credentials are stored locally using Android Keystore protection. Runtime credentials are not written into media, album, trash or startup-cache payloads.

To keep device-specific backup folders stable, Lesiya locally derives a short SHA-256 hash from Android's app- and signing-scoped device identifier. The raw identifier is neither stored nor sent to Lesiya, advertising, analytics or crash services. The hash only appears as part of the folder name on storage connected by the user.

Network connections

The app connects to sources you configure. HTTPS connections are encrypted. Cleartext HTTP is limited technically to private local-network, link-local and loopback addresses; SMB connections may also lack transport encryption. Whether a user-managed connection is encrypted depends in part on the source configuration. Immich search may send a query to your own Immich server.

For SMB, WebDAV and local device media, Lesiya automatically analyzes some already available thumbnails on the device during normal use. You can also start and stop a full-library analysis in settings. Image labels, visible text and detected face counts are stored only in the local search index; faces are not linked to identities. You may explicitly allow missing gallery thumbnails to be fetched over Wi-Fi; originals are never downloaded solely for analysis. Images and analysis results are not sent to Lesiya. Immich intelligent search remains on the Immich server configured by the user.

Lesiya uses Google ML Kit for this on-device analysis. Images, videos, recognized text and analysis results are processed on the device and, according to Google, are not sent to Google servers. ML Kit may nevertheless send encrypted technical device and app information, installation identifiers, performance metrics, API usage events and error codes to Google to diagnose, maintain and analyze use of the SDK. Full-library analysis is optional and can be stopped in settings; this does not disable the automatic analysis of some already available thumbnails.

For the Places map and matching GPS coordinates to countries and cities, Lesiya uses bundled Natural Earth and GeoNames data locally. No map tiles or coordinates are sent to map services or other third parties for this purpose. On SMB/WebDAV, the additional EXIF scan starts only when requested; its GPS results remain in local app storage. Media from your configured source still loads over that source's connection.

Backup and offline storage

If you enable backup, Lesiya transfers selected phone media to your selected Immich, SMB or WebDAV destination. Backup status and verification data remain on the device. Local originals are only eligible for optional storage optimization after a verified upload and Android system approval. Offline originals are downloaded only through an explicit offline action or rule.

Trial and purchase

Lesiya stores locally when the 14-day trial starts after the first personal media source is set up and when it ends. After the trial expires, the complete app is locked until the one-time purchase; local data and settings remain preserved. Lifetime access uses Google Play Billing, and Google Play processes the payment. Lesiya does not receive card or bank details; it receives only the information required to unlock the purchase, such as product ID, purchase status and purchase token. The local entitlement is stored on the device and checked with Google Play at startup or when you manually restore it.

App updates through Google Play

For versions installed through Google Play, Lesiya can check for updates after startup and offer a voluntary background download. Installation and restart require your confirmation. A failed update check does not lock the app; the existing trial and purchase checks remain independent.

According to Google, the update service processes encrypted device metadata, the app version and installed modules or asset packs to determine availability and download size. Lesiya does not send your media, locations or source credentials for this check. The last offered version and reminder time are stored only on your device. Further information is available in Google's SDK disclosure.

Sharing and diagnostics

Lesiya does not sell personal data. Android sharing sends only selected files to the app you choose. Crash and ANR diagnostics remain local and are not uploaded automatically. On Immich, an explicit sharing action can create links on the user's own server with an optional password, expiry date and guest-upload permission.

Deletion

You can remove saved connections, offline media, previews, backup history and local diagnostics. App data can be deleted through Android. Trash items can be restored or permanently deleted.

Hosting of the public website

Lesiya's public privacy, support and legal-notice website is hosted on Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When the website is accessed, Cloudflare processes technically necessary connection and log data, in particular the IP address, time, requested address, browser and system information. This processing serves the secure, reliable and efficient delivery of the website and is based on our legitimate interest under Article 6(1)(f) GDPR. Lesiya does not use its own analytics or advertising services on this website.

Cloudflare may process data outside the European Economic Area, including in the United States. According to Cloudflare, such transfers rely, among other safeguards, on the EU-US Data Privacy Framework and, where required, Standard Contractual Clauses. Further information is available in Cloudflare's Privacy Policy.

Controller and contact

Lesiya
Ibrahim Ayaz
Tannenweg 13
63741 Aschaffenburg
Deutschland

Privacy: lesiya.support@gmail.com
Support: lesiya.support@gmail.com