Privacy Policy
Last updated 30 August 2026.
The short version
Your photos are edited on your phone. There is one exception, and it is worth reading rather than skipping: the AI tools send the photo you have open to our service so a model can do the work, because those particular edits cannot run on a phone. Nothing you do not tap is ever sent, and nothing is stored.
What never leaves your device
- Every photo you open, unless you tap one of the AI tools listed below.
- Face detection. It runs entirely on your phone; no image is sent for analysis, and the points it finds are discarded when you close the photo.
- Smoothing, healing, whitening, lighting and grades. All of it happens on the device, and none of it involves a server.
- Your editing history and any per-photo retouching you do.
- The full-resolution original. Even when an AI tool runs, what is sent is the smaller version you are looking at on screen.
The AI tools, in detail
Makeup, hair colour, haircuts, hairstyles, beards, eyebrows, object removal, clothing, headshots and backdrops each need a generative model far too large to run on a phone. Tapping one of them, and only tapping one of them, sends that photo to our service.
- Where it goes. To our service, which passes it to Google’s Gemini and returns the result. Google handles it under their own terms.
- How long we keep it. We do not. It exists in memory for the length of the request. Our service has no image storage of any kind — no bucket, no database, no cache — so there is nowhere for a copy to be written even by mistake.
- What we log. That an edit happened, which tool, your account identifier, and the size in bytes. Never the image, never a filename.
- How to avoid it entirely. Do not use those ten tools. Everything else in the app works with no network connection at all.
What we store, and where
If you create an account, we store two things on Google Firebase servers:
- Your account identity — the email address or the identifier supplied by Apple or Google when you sign in. This is handled by Firebase Authentication.
- Your Look settings — the numeric parameters of the edits you save, so they can appear on your other devices. A Look is a small set of numbers, typically a few hundred bytes. It contains no image data.
- When your trial started — a single timestamp, so the trial length is the same for everyone.
An account is required to use the app, because it is what your saved Looks and your subscription are attached to.
How we can be specific about this
The app includes a tool that records every network request it makes, with the size of each. Over a complete session — launching, signing in, choosing a photo, detecting a face, editing and exporting — it recorded five requests, all to Google Firebase, and the largest single upload was 1,551 bytes. For scale, a photograph at the size this app exports is several hundred thousand bytes. No image data left the device.
Purchases
Subscriptions are handled by RevenueCat and by Apple. We never see your payment details. RevenueCat receives a purchase receipt and an identifier for your account so your subscription follows you between devices.
Analytics and tracking
There are none. PhotoTune contains no analytics SDK, no advertising SDK, and no third-party tracker. We do not build a profile of you and there is nothing to sell.
Location and photo metadata
Exported photos have location data removed. If the photo you opened contained GPS coordinates, the copy PhotoTune saves will not.
Deleting your data
Email support@phototune.app and we will delete your account and everything attached to it. Photos are not included, because we never had them.
Children
PhotoTune is rated 12+ and is intended for adults. It is not directed at children and we do not knowingly collect data from them.
Changes
If this policy changes materially, the date at the top changes and the app will tell you before the change takes effect.