Photos RevivedBack to website 1. Who we are and what this policy covers
Photos Revived is operated by FluentFlow LLC, based in Bingham Farms, Michigan, United States ("we," "us," or "our"). This policy covers photosrevived.com, www.photosrevived.com, the Photos Revived iOS app, accounts, photos and galleries stored through the service, and support requests. Contact hello@photosrevived.com.
The iOS app and website use the same account and cloud service. Web purchases and subscriptions are processed by Stripe.
2. Information we process
- Account information: your email address, authentication identifiers and security records. We also store whether you allowed OpenAI photo restoration and when you granted that permission, so the choice can apply to future restorations and be withdrawn. If you choose Sign in with Apple in the iOS app, Apple supplies an app-specific account identifier and your chosen email address, which may be a private relay address. We verify the Apple credential through Supabase Auth and do not receive your Apple password. Password verification is handled by Supabase Auth; we do not store your account password in readable form in our application database.
- Photos and details: original uploads, prepared crops, restorations, filenames, image dimensions and file sizes, dates, people, locations, notes, gallery assignments and upload times. Original files may contain embedded camera or location metadata. Only include information you have the right to provide.
- Sharing: gallery access tokens, a password-verification hash and an encrypted copy of the gallery password so its owner can view or change it. Gallery passwords are separate from account passwords.
- Usage and security: credit grants and restoration jobs, storage use, failed access attempts, network information, requested URLs, browser/device information, timestamps and diagnostic records.
- Support: correspondence, your contact information and anything you choose to attach. Do not email passwords, payment-card information or unnecessary private photos.
We receive account details when you register or sign in, your AI restoration choice when you make or withdraw it, selected photos and details when you import, scan, edit or upload them, purchase records from Apple or Stripe after a transaction, support content when you contact us, and usage/security records automatically when you use the app or website. Choosing a photo or granting camera access lets you submit selected content; it does not give us unrestricted access to your photo library. We do not buy data-broker profiles, intentionally collect biometric identifiers, or infer sensitive traits from your photos.
Billing: Stripe customer and transaction identifiers, subscription status, payment amounts, refunds and credit adjustments are used for payment fulfillment, customer support, fraud prevention and legally required financial records. Stripe collects payment-card and billing details directly; we do not receive full card numbers.
3. How and why we use information
We process account and photo information to provide the service you request: authenticate you, store and organize your photos, prepare crops, restore selected images, save details, and provide the sharing access you enable. We also respond to support requests, manage credits and storage, prevent fraud and abuse, diagnose problems and comply with applicable law.
Where applicable law requires a legal basis, we rely on performing our agreement with you for requested services; legitimate interests for proportionate security, service operation and support; legal obligations where required; and consent for optional processing that requires it. Reading this policy is not consent to unrelated processing. If necessary information is not supplied, we may be unable to provide the requested feature.
4. Service providers and disclosures
- Vercel: website hosting, server requests and operational/security infrastructure. Privacy notice.
- Supabase: account authentication, database and private photo storage. The configured project is in the United States (North Virginia). Provider support and infrastructure may involve other locations. Privacy policy.
- Resend: confirmation, password recovery and other transactional account emails. Email addresses, delivery information and message content are processed to deliver these messages. Privacy policy.
- OpenAI: for restoration, receives each photo or prepared crop that you explicitly approve, including people and other details visible in the image and any embedded image information, plus our restoration instructions. For optional gallery safety review, receives the gallery name, filenames, photo titles, notes, people, location and dates entered for shared photos, and resized copies of their originals, prepared crops and restorations. Your account email, account password and gallery password are not part of these AI requests. OpenAI processes this information to generate a restoration or check shared content; we do not send it for advertising or opt it into model training. API data controls and retention.
- Zoho Mail: correspondence sent to our support mailbox. Privacy policy.
- Google Fonts: supplies the website typeface, receiving network information needed to serve it. Font service information.
We use service providers for the stated purposes only and require them to protect the user data they receive to the same or an equivalent level as we describe in this policy. We remain responsible for our privacy commitments when providers process data for us. OpenAI publishes security measures including encryption in transit and at rest, access controls, and API retention rules; see its security and privacy information. We limit OpenAI requests to the selected images and instructions or the gallery material disclosed above.
Domain/DNS providers route connections. We may disclose necessary information to professional advisers, to comply with law or valid legal process, to address fraud or security incidents, or in a business transfer subject to applicable protections. We do not sell personal information or share it for targeted advertising, and do not use your photos in marketing without separate permission. Web payments are handled by Stripe.
Stripe: processes payments, subscriptions, billing details, receipts and invoices. See Stripe’s privacy policy.
Apple: processes iOS App Store purchases and subscriptions. We receive signed transaction identifiers, product identifiers, purchase and expiry dates, purchase status, and an account token linking the purchase to your Photos Revived account. We use these to verify purchases, grant credits, process renewals and refunds, and prevent fraud. Apple handles payment details under its privacy policy; we do not receive full payment-card numbers. We retain purchase identifiers and the associated internal account identifier after account deletion where necessary for financial records, refunds and prevention of duplicate credit claims.
6. AI processing and gallery sharing
When you select Restore with AI, we send your prepared crop, or the original if there is no crop, and restoration instructions to OpenAI. Photo notes and gallery passwords are not included in restoration requests. Separately, before enabling or updating a gallery link, we ask your permission to send the gallery’s photos and shared text (including its name, titles, notes and other photo details) to OpenAI for automated safety review. Gallery passwords are not sent. Reports and flagged content are held for review by Photos Revived support; do not submit known or suspected illegal child-abuse material. AI processing takes place on external servers, not exclusively on your device. In the iOS app and website, a separate permission step describes the OpenAI transfer before your first AI restoration. If you allow it, your account remembers that choice and later photos you select for restoration are sent to OpenAI without another prompt. Choosing Not now or Cancel does not send a restoration request or spend a credit. You can withdraw permission in Profile (iOS) or Data & privacy (website); after withdrawal, we ask again before a future restoration. Gallery safety review has its own separate opt-in before sharing.
OpenAI states that API data is not used for model training by default unless a customer opts in. We do not opt your photos into model training. Standard API abuse-monitoring records may be retained for up to 30 days, with legal and safety exceptions. We have not enabled or promised Zero Data Retention. Deleting a photo here does not instantly delete independently retained provider security records. If you want to withdraw future AI restoration permission, turn it off in Profile (iOS) or Data & privacy (website). Gallery safety review has a separate choice before sharing. You can delete photos or your account in the app and contact hello@photosrevived.com about prior transfers; a completed OpenAI request cannot be recalled, and provider security records may remain for their stated retention period. See the provider’s linked data controls for its current rules.
Your photo workspace is private to your account. Creating galleries and sharing gallery links requires an active paid membership. Enabling a shared gallery creates an unguessable link and requires a password you choose. Anyone with both can access it without a Photos Revived account, view restored photos with their originals and details, and download copies. Recipients can forward both the link and password. Shared galleries support up to 50 restored photos and are checked before publication. Changes pause sharing until a new review. Recipients can report content and block an owner’s gallery links in their browser; blocking is stored in a secure cookie and can be undone or removed by clearing cookies. Reports pause sharing pending review, and we aim to review reports within 24 hours. We retain report reasons and relevant account/gallery references for safety and dispute handling; contact support for questions or appeals. Owners can view/change the password, replace or revoke the link; links expire after 30 days. Previously issued image URLs can remain usable for five minutes after a change or revocation. Downloaded copies cannot be recalled.
7. Retention, export and deletion
For users without an active subscription, uploaded photos are held only as temporary processing files and removed by scheduled maintenance after 24 hours, normally within 48 hours of upload. These are not a cloud library. Cloud originals, crops, restorations and details for subscribers remain during an active subscription. After the paid period ends, you may download them for 60 days before cloud photos and galleries are deleted by scheduled maintenance. Device copies are separate and remain until you remove them, clear browser data or uninstall the app. Save independent copies of important photos. You can download originals/restorations from the photo view and export gallery and photo details as JSON from Your account.
Deleting a photo hides it from your workspace and removes its current files. Cleanup retains a temporary record and space reservation until any issued upload link has expired. Abandoned uploads and edits are cleaned after at least three hours, normally on the next daily maintenance run.
Account deletion requires explicit confirmation and either your account password or fresh Sign in with Apple authentication. Apple authorization is revoked as part of the queued deletion process; temporary provider failures are retried. It disables account access and gallery sharing immediately, then schedules removal of active stored photos, details and the authentication account, normally within 48 hours. Running restoration jobs must finish before an account can be closed. Security incidents or technical failures can delay processing; contact hello@photosrevived.com if you need help. Deleted data can remain in provider backups or security records until their retention cycles end.
We retain a protected, keyed hash of an email address used to claim the free-photo offer to prevent repeated claims after account deletion. We also retain correspondence and records needed for proportionate security, legal obligations or disputes for as long as those purposes reasonably require. We restrict such retained records to those purposes. Contact hello@photosrevived.com to request access, correction or deletion of information not covered by the account controls.
8. Security and international processing
We use HTTPS, server-verified accounts, owner-based database access controls, private photo storage, short-lived file links and restricted administrative access. Gallery passwords are protected by slow hashing and authenticated encryption; owners can retrieve their own gallery passwords. These measures do not guarantee absolute security. Keep account credentials and sharing passwords private.
We operate from Bingham Farms, Michigan, United States. Our providers may process information in the United States and other countries with different privacy laws. Where legally required, relevant contractual safeguards and provider arrangements govern transfers. Contact us about safeguards applicable to your data. We do not claim a data-transfer certification.
9. Your privacy rights and requests
Depending on where you live and which laws apply, you may have rights to obtain access to personal information, correct inaccurate information, request deletion, receive a portable copy, restrict processing, withdraw consent, or object to certain uses. Some laws also provide an appeal right or permit an authorized agent to act for you. These rights have legal conditions and exceptions and do not all apply to every visitor or business.
Right to object: where applicable, you may object to processing based on legitimate interests, including by explaining your particular circumstances. We do not send direct marketing through the service. Withdrawing consent, where consent is the basis for processing, does not affect processing already lawfully carried out.
Email hello@photosrevived.com with the subject “Privacy request,” describe the request, and provide enough information for us to locate the relevant record. We will take proportionate steps to verify your identity or an agent’s authority, ask only for information reasonably needed for that purpose, and respond within the time required by applicable law. Do not send identity documents unless a necessary verification method has been agreed. If we cannot fulfill a request, we will explain the reason and any applicable appeal route. To appeal, reply with “Privacy appeal.” We will not unlawfully discriminate against you for exercising a privacy right.
California and other U.S. state residents may have additional rights where the relevant law applies, including rights concerning sale, advertising sharing, or sensitive information. We do not currently engage in sale or targeted-advertising sharing and do not use the service to infer sensitive traits.
Where European or UK data protection law applies, you may complain to the supervisory authority where you live, work, or believe a violation occurred. UK visitors can contact the Information Commissioner’s Office; EEA visitors can find their authority through the European Data Protection Board. You may also contact your relevant state or national regulator. Contacting us first is optional.
10. Children’s privacy
The service is intended for people aged 13 or older and is not directed to children under 13. We do not knowingly allow children under 13 to create accounts. If you believe a child under 13 has provided personal information directly, contact us so we can investigate and take appropriate action. Users uploading family photos that depict children are responsible for the rights and permissions needed to process and share them.
11. Updates and contact
We will update the effective date when this policy changes. For a material change, we will provide a prominent website notice and any additional notice or consent required by law before applying a materially different use of previously collected information. This policy is a description of information handling, not a request for blanket consent.
Operator: FluentFlow LLC
Location: Bingham Farms, Michigan, United States
Privacy and support: hello@photosrevived.com