Privacy Policy

Heirloom is a photo restoration app. We designed it so the photos you restore stay private and the data we keep is minimal.

What we collect

• Photos you choose to restore. When you tap "Restore a photo," the image is sent through our processing backend to AI providers that produce the restored version. We do not keep a copy on our servers.
• Subscription state. Managed by RevenueCat using an anonymous identifier we generate on first launch. We do not collect your real name, email, or payment details.
• Anonymous usage events. A small set of product events (app opened, photo restored, paywall viewed, subscription purchased) tied to the same anonymous identifier. No photos are ever sent to analytics.
• Crash reports. When the app crashes, we collect technical details (device model, OS version, stack trace) to fix bugs. Photo data is excluded.

What we never collect

• Your name, email, phone number, or contacts.
• Your location.
• The photos themselves — they are never stored on our servers or used to train any model.

How your photo is handled

When you start a restoration, the image is streamed through our Cloudflare Worker to the AI providers we use (Fal.ai and Replicate). They process the image and return the restored version, which is sent back to your device. Our worker does not write the original or restored image to disk. The AI providers temporarily retain the image to fulfill the request, governed by their own retention policies (typically 24 hours).

Third parties we rely on

• Fal.ai — runs the face restoration and upscale steps. See fal.ai/privacy.
• Replicate — runs the damage repair and colorization steps. See replicate.com/privacy.
• RevenueCat — handles subscription state. See revenuecat.com/privacy.
• PostHog — anonymous product analytics. See posthog.com/privacy.
• Sentry — crash reporting. See sentry.io/privacy.
• Google Play — distribution and billing. See policies.google.com/privacy.

Data retention

Anonymous analytics events are retained for 12 months and then deleted. Crash reports are retained for 90 days. The anonymous identifier on your device is deleted when you uninstall the app.

Your rights

Because we do not collect personal identifiers, the data tied to your anonymous ID is not associated with you by name. If you would like the events linked to your anonymous ID deleted, contact hello@nexutility.dev with the ID shown on the app's Settings screen and we will remove it within 30 days.

Children

Heirloom is not directed to children under 13 and we do not knowingly collect information from them. If you believe a child has used the app, contact us and we will delete any associated data.

Changes to this policy

If we make material changes, we will update this page and the "Last updated" date above. Continued use after the change means you accept the updated policy.

Contact

Questions? Email hello@nexutility.dev.