Privacy Policy

1. Information we process

We process information you provide, such as your name, email address, support messages, and photos you intentionally submit. We also process account identifiers, device or browser information, service diagnostics, purchase entitlements, credit activity, feature interactions, and campaign attribution indicators.

We do not require precise location. Approximate country or source information may be inferred from network or campaign data.

2. Photos and AI requests

Your selected photo and editing choices are sent through ReFilter’s processing pipeline only to perform the edit you requested. Internal processing configuration is protected by the server.

Generated media and operational records may be retained for history, delivery, abuse prevention, troubleshooting, or the retention period described in the product. You can remove supported history items and request account deletion.

3. Why we use information

• Provide accounts, editing, exports, history, credits, and purchase restoration.
• Secure the service, prevent abuse, enforce limits, and investigate failures.
• Measure reliability, feature adoption, campaign performance, and conversions.
• Respond to questions, operational alerts, and legal requests.
• Improve ReFilter and comply with applicable obligations.

4. Authentication

Firebase Authentication supports email/password, Google, and Apple sign-in. A provider may supply your name. If it does not, ReFilter asks you to provide one. Authentication tokens are used to establish your session and synchronize the account across supported clients.

5. Analytics and campaign measurement

ReFilter records minimal pseudonymous events such as site opens, store-badge clicks, browser-studio clicks, successful waitlist joins, and app activity. Where you consent, Firebase Analytics receives richer usage events and campaign parameters.

UTM parameters and the presence of Google or Meta click identifiers may be used to attribute visits. Detailed campaign values are retained only according to your analytics choice. We do not store full Google or Meta click IDs in the acquisition report.

6. Cookies and local storage

We use local or session storage for authentication, preferences, consent, pseudonymous visitor/session identifiers, and guest history. You can clear browser storage or change analytics consent. Essential storage may be required for sign-in and core operation.

7. Service providers

We use specialized service providers only as needed for authentication, infrastructure, temporary media handling, analytics, AI processing, purchase entitlements, app distribution, payment processing, and operational delivery. ReFilter does not expose internal processing or payment configuration to customers.

Those services process information under their own terms and data-protection commitments. Current details are available through a verified privacy request when required by applicable law.

8. Retention and security

Retention depends on the type of data, account state, user controls, operational need, fraud prevention, and legal requirements. We use access controls, encrypted transport, restricted credentials, logging, backups, and monitoring designed to protect the service.

No online system is completely risk-free. If a qualifying breach occurs, we will respond and notify affected people as required by applicable law.

9. Your choices and rights

Depending on your location, you may request access, correction, deletion, restriction, portability, or objection to certain processing. You can opt out of analytics through the consent control, unsubscribe from email updates, revoke provider access, or delete your account through supported controls.

We may need to verify your identity before completing a privacy request.

10. Children and international processing

ReFilter is not intended for children below the minimum digital-consent age that applies in their country, and we do not knowingly collect their personal information.

Information may be processed in countries where ReFilter or its providers operate. We use available contractual and technical safeguards where required.

11. Updates and contact

We may update this policy to reflect product, provider, or legal changes. The effective date identifies the current version.

Privacy requests: hello@refilterphoto.com.