Privacy Policy
Last updated: 2026-05-03
Cullstack is a desktop application made by Aviastone LLC ("we", "us"). We designed Cullstack around a simple principle: your photos and the metadata you create about them stay on your machine. This page explains exactly what data we do and don't collect.
What stays on your machine
- Your photo and video files — Cullstack reads them in place from wherever they live (local disk, NAS, cloud, phone) and never uploads them to any Aviastone server.
- Ratings, tags, comments, color labels, and collections — stored in a local SQLite sidecar database alongside your photos.
- Cloud-storage authentication tokens (Dropbox, OneDrive, Google Photos, etc.) — stored encrypted in your operating system's credential store, not in any Aviastone-controlled location.
- AI inference — every AI feature (CLIP semantic search, face detection, closed-eye flagging, NSFW flagging, AI auto-stacking, face-identity clustering) runs on your device using ONNX models stored locally. No image data is ever sent to Aviastone or any third-party AI service. Models are never trained on your photos.
What we collect
- License activation data. When you activate your license, we receive your license key, an instance identifier (e.g. "Scott's MacBook Pro"), and the activation timestamp via our payment provider, Lemon Squeezy. This is used solely to enforce activation limits and process refunds.
- Crash reports (opt-in only). If you opt in to crash reporting in Settings, anonymized stack traces and library size statistics are sent to our error-tracking service. No photos, no file paths outside the application, no personal information.
- Update checks. Cullstack checks for new versions by requesting a static JSON file on our server. The request includes your platform (e.g. "macOS 14.5") and current Cullstack version. You can disable update checks in Settings.
- License-verification IP address. When Cullstack verifies your license, our licensing server records the IP address the request comes from. This is used solely to detect license sharing — for example, the same key activating from many far-apart locations. It is never linked to your photos, file names, or in-app activity, never used for advertising or cross-site tracking, and is kept only as long as needed for license enforcement.
What we do not collect
- Photos, videos, or any image data of any kind.
- File paths, file names, or directory contents.
- In-app usage analytics, telemetry, behavioral data, or browsing history.
- Email address (unless you contact support or buy a license).
Third-party services
Cullstack interoperates with third-party storage services (Dropbox, OneDrive, Google Photos, iCloud, your SFTP/WebDAV servers) only when you explicitly connect them. These providers have their own privacy policies; Cullstack acts only as a client on your behalf and does not relay your data through Aviastone-controlled infrastructure.
For payment processing and license issuance, we use Lemon Squeezy (a Stripe-owned company), which acts as Merchant of Record. Their privacy policy is at lemonsqueezy.com/privacy.
Our website (cullstack.com) uses GoatCounter, a privacy-first, cookieless analytics service, to understand aggregate traffic — which pages are visited most and visitors' approximate country. It sets no cookies, stores no personal data, builds no cross-site profile, and needs no consent banner. GoatCounter's policy: goatcounter.com/help/privacy.
Your rights (GDPR / CCPA)
You can request access to, correction of, or deletion of any data we hold about you (essentially: your purchase record and any opt-in crash reports) by emailing privacy@aviastone.com. We respond within 30 days.
Contact
Aviastone LLC
Email: privacy@aviastone.com