Privacy
Last updated 22 October 2026
Who we are
fotoaman (fotoaman.manabisa.com and the fotoaman app) is operated by:
- Operator
- PT MANABISA HARAPAN TEKNOLOGI (MANABISA HARAPAN TEKNOLOGI)
- Business reg. (NIB)
- 0703260032641
- Registered address
- Batujajar Regency AH 16, RT 006 RW 015, Desa Laksanamekar, Kec. Padalarang, Kabupaten Bandung Barat, Jawa Barat 40553, Indonesia
- support@manabisa.com
This page adds to Manabisa's Privacy Policy, which covers every Manabisa product; it describes what fotoaman itself keeps and why.
What we keep, and why
- Your account: your email address, the name you give, and your password, which we store only as a hash. If you sign in with Google, we also keep your Google account ID and take your name and email address from Google, nothing else.
- Your files: the photos, videos and audio you back up or upload, exactly as they came, plus the smaller copies we make so you can browse them: a thumbnail and a compressed copy of each photo, and a still frame of each video.
- Details from your files: for a photo, the date it was taken, the location and the phone or camera model when the photo itself records them; the size of each photo or video; the length of each video or audio file; and a fingerprint of each file (a SHA-256 hash) so that a file you back up twice is stored once.
- What you add: albums, and the titles, notes and tags you give your files.
- Signing in: the sessions that keep you signed in. On the web these are two strictly necessary cookies, never used for tracking. Access tokens you create for scripts are stored only as a hash, with their name, permissions, expiry and when each was last used.
- Security: how many times in a row a sign-in has failed, to block guessing for 15 minutes, and the codes we email to verify your address or reset your password, which expire after 15 minutes.
- Your plan: how much storage you use and your plan's limits. When paid plans go on sale in the app, we will also keep the subscription's status, product and renewal date that the app store reports.
Your files are private to your account. We open them only to run the service, for example to make the copies above, or when the law requires it. We do not sell or share your data for marketing, and we never use your files to train AI.
The app on your phone
The app asks for access to your photo library so it can back up your photos and videos. It uploads them only to your own account, only from the albums you choose, and only while backup is on.
Who processes data for us
- Cloudflare runs the fotoaman website and stores your files (Cloudflare R2, encrypted at rest).
- Oracle Cloud runs our servers in Singapore, which hold your account, your files' details, and nightly database backups.
- Zoho (ZeptoMail) sends the verification and password reset emails.
- Google signs you in, if you choose Sign in with Google.
- Sentry receives reports of errors in our servers, so we can fix them. A report describes the failed request, which can include your IP address and your browser or device type, but never what you sent, your password, tokens or cookies.
- Google Play, the App Store and RevenueCat will handle paid plans once they go on sale in the app: the store takes the payment, and RevenueCat tells us which plan is active. We never receive your card details.
Keeping and deleting
- Your files stay until you delete them. Deleting a file moves it to the trash, where you can restore it for 30 days; files in the trash do not count toward your storage. After 30 days, or sooner if you delete it forever or empty the trash on the web, the file is deleted for good, with its copies and details.
- You can delete your account in the app, under Settings. That deletes all your files, their copies and details, your albums, sessions and tokens at once, permanently. Your account details can remain in our nightly database backups for up to 14 days, and are then gone.
- For anything else, including a copy of your data, email support@manabisa.com. We handle personal data under Indonesia's Personal Data Protection Law (UU PDP No. 27/2022).