Privacy Policy
Exactly how your uploaded photos and account data are handled
Last updated: July 18, 2026
Summary
Anonymous AI edits: processed securely, never stored by us. Browser tools: never leave your device. Albums: stored in your private account until you delete them. We never train on your photos.
AI tools used without an account
When you use an AI tool (restore, enhance, colorize, upscale, or background removal) without signing in:
- The selected image is sent over an encrypted (HTTPS) connection to our processing endpoint, which forwards it to the AI model provider (Replicate) solely to perform the requested edit.
- We do not save anonymous uploads to any database or file storage we operate.
- The result is returned as a temporary link on the processing provider's CDN, which expires automatically (Replicate deletes prediction outputs shortly after processing).
- While you compare before/after in the tool, the images exist only in your browser's memory — closing or refreshing the tab discards them.
Browser-based free tools
The free tools on /free-tools (crop, resize, convert, filters, and similar) process images entirely in your browser. Your images never leave your device and are never uploaded anywhere.
Albums (signed-in users)
If you create an album, the original and restored images you save are stored in Firebase (Google Cloud) Storage, with metadata in Firestore, so you can access them later and across devices.
- Albums are private by default. You can explicitly make an album public to share it.
- You can delete individual photos or entire albums at any time — deletion removes the files from storage.
- We may retain encrypted backups for a limited period per our infrastructure providers' backup cycles.
No training use, no sale
- We do not use your photos to train AI models.
- We do not sell your photos or personal data.
- We do not share them with third parties except the service providers needed to operate the service: Replicate (AI processing), Google Firebase (storage and authentication), and Upstash Redis (rate limiting — IP address only).
Analytics & advertising
- Google Analytics and Vercel Analytics collect usage statistics — never image content, filenames, or facial data.
- Sentry provides error monitoring.
- Google AdSense shows ads and may use cookies per Google's policy.
- Quality-issue reports from the tool send only a predefined category — never image content or free text.
Your controls
- Delete photos or entire albums at any time.
- Use the service anonymously, without an account.
- Contact us to request account or data deletion (see below).
Service providers
We rely on the following vendors to operate the service. Their own privacy policies apply to their processing:
- Replicate — AI image processing (restore, enhance, colorize, upscale, background removal)
- Google Firebase — Account authentication, photo storage, and album metadata
- Upstash — Rate limiting (stores IP address only)
- Google Analytics & Google AdSense — Usage statistics and advertising
- Vercel — Hosting and Vercel Analytics
- Sentry — Error monitoring
Changes to this policy
We may update this policy as the service evolves. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be reflected here before they take effect.
Contact
For privacy questions or to request account or data deletion, reach us via the feedback options in the site footer.