Your photos are yours. Here is exactly what happens when you use AI Photo Redesign.
Your photo is prepared on-device (downscaled, with EXIF and location data stripped). When you generate a result, it is sent securely over HTTPS to our proxy, which forwards it to the AI model only to create your image. It is not used to train models and not stored beyond your device and your in-app history.
Most photos people redesign are photos of themselves, so the images you send commonly contain your face. We want to be precise about what that means, because face data is sensitive.
Creating a look is not possible on-device, so your photo is processed by a third-party AI provider. Before your first photo is ever sent, the app shows you this in a full-screen disclosure and asks you to agree; you can re-read it any time under Profile › How Your Photos Are Processed. The providers that may receive your photo are:
They receive the image and the text description of the look you selected. They do not receive your name, email, contacts, location, or any account identifier, because the app never collects those. We use each provider under its API terms, which commit the provider to process the input only to return a result and not to use it to train their models; we require protections equivalent to those described in this policy. Each provider's own privacy terms also apply to the processing it performs.
Your creations and favorites live only on your device (SwiftData plus local image files). Deleting a creation deletes its files.
We record anonymous product-interaction events (for example, "generate_success") to improve the app. We never send your photos, your prompt text, or any personally identifying information.
Purchases are handled by Apple and our subscription provider. We store only your entitlement status to unlock features.
So we can tell which ad brought you here, the app asks once - through Apple's App Tracking Transparency prompt - for permission to use your device's advertising identifier (IDFA). If you decline, no advertising identifier is used at all, and the app works exactly the same. When you allow it, the identifier is shared with our analytics provider (Google Firebase / app-measurement.com) purely to attribute installs and measure ad performance. Your photos and prompts are never part of this. You can change your choice any time in iOS Settings › Privacy & Security › Tracking.
This is declared as tracking in the app's privacy manifest (NSPrivacyTracking = true, PrivacyInfo.xcprivacy) and in the App Store privacy labels. We never sell your data.
Questions about privacy? Email [email protected].