PhotoFixr

Privacy Policy

Effective date: August 29, 2026 · PhotoFixr, by Lilin Systems

PhotoFixr helps you restore old, damaged, and blurry photos using AI. We built it to be private by default: you don't need an account, we don't sell your data, and the photos you restore are not used to train AI models or kept after processing. This policy explains, in plain language, what happens to your information when you use the app.

1. Information we process

Photos you choose

When you select a photo to restore, that image is processed to perform the restoration you requested (such as Restore, Colorize, Unblur, or Descratch). The restoration runs on a secure third-party AI service (see “Third-party processors” below). Your photo is used only to produce your restored result and is not used to train AI models. It is not retained after processing and is deleted once your restored image is returned to your device.

A non-identifying device identifier

To deliver the subscription you've purchased, measure how the app is used, and prevent abuse, the app uses a non-identifying, app-generated device or installation identifier. This identifier is not your name, email, phone number, or Apple Account.

Advertising identifier (only if you allow it)

If you grant permission through Apple's App Tracking Transparency prompt, the app may also use your device's advertising identifier (IDFA) to measure which advertisement led you to download PhotoFixr. This is described in section 5. If you decline, no advertising identifier is used and every feature of the app works exactly the same.

2. What we do not collect

  • We do not require you to create an account or provide a name, email address, or phone number.
  • We do not collect your contacts, location, browsing history, or photo library beyond the specific images you choose to restore.
  • We do not see or store your payment card details — purchases are handled entirely by Apple (see below).
  • We do not sell your personal information, and we do not use your photos for advertising or model training.

3. How your photos are restored (third-party AI processing)

What is sent. When you restore a photo, the app sends the single photo you selected — resized to at most 1280 pixels on its longest side and re-encoded as a JPEG — along with which restoration you requested (Restore, Descratch, Unblur, or Colorize) and the non-identifying device identifier described above. Nothing else from your photo library is sent.

Who receives it. The photo is transmitted to PhotoFixr's own server, which passes it through without storing it, and then to Replicate, Inc., a cloud platform that runs AI models. The restoration itself is performed by the FLUX.1 Kontext [pro] model from Black Forest Labs, hosted on Replicate.

How it is used. Your photo is used solely to generate the restored result you asked for. Per our use of that service, your photos are not used to train models and are not retained after the restoration completes.

Your permission. Before the app sends any photo for the first time, it shows a disclosure naming exactly what is sent and who receives it, and asks you to agree. If you decline, no photo is transmitted. You can re-read that disclosure and withdraw your agreement at any time under Settings → Privacy in the app; withdrawing stops any further photos being sent. The bundled sample photo (“Try a sample photo”) is processed entirely on your device and is never uploaded.

We confirm that each third party named in this policy is bound by contractual terms requiring data protection at least equivalent to that described here, and may process your information only to deliver its part of the service.

4. Purchases

PhotoFixr is a subscription app. Restoration features require an active subscription; weekly, monthly, and yearly plans are available and all provide the same unlimited access. All purchases are processed by Apple through the App Store. Apple handles billing and payment information; we never receive or store your credit card or payment details. We receive only the information Apple provides to confirm an active subscription or completed purchase so we can unlock the corresponding features.

5. Analytics and advertising measurement

Product analytics

We record how the app itself is used — for example which onboarding step you reached, whether a restoration succeeded or failed, and whether a purchase completed. These events are sent to our own server and stored in PostHog, our analytics provider. They are keyed only to the non-identifying device identifier described in section 1, and never include your photos or any personal details. We use them to find where the app is confusing or broken and to fix it.

Advertising measurement

We advertise PhotoFixr, and we measure which advertisements actually lead to installations and subscriptions so we do not waste money on ones that don't. To do this we use AppsFlyer, a mobile measurement provider, which receives your device identifier, the fact that the app was installed, and the fact that a subscription was purchased or renewed (including its value). Apple's App Tracking Transparency prompt controls whether your device's advertising identifier is included:

  • If you allow tracking, your advertising identifier may be shared with AppsFlyer and the advertising network that showed you the ad, so that installation can be matched to that advertisement. This constitutes tracking as Apple defines it, and is reflected on our App Store privacy label.
  • If you decline, no advertising identifier is shared and measurement falls back to Apple's own privacy-preserving, aggregated attribution.

Either way, your photos are never used for advertising, are never sent to any advertising network, and are never used to build a profile about you. Declining tracking does not limit any feature of the app.

6. Data retention

  • Photos: not retained after processing — deleted once your restored image is returned.
  • Device identifier & purchase status: retained only as long as needed to operate your subscription, measure the app, and prevent abuse.
  • Analytics & advertising-measurement events: retained by our analytics and measurement providers under their standard retention periods, keyed to a device identifier and never to your identity.
  • Restored results: saved by you to your own device; we do not keep a copy.

7. Children's privacy

PhotoFixr is a general-audience app and is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take appropriate steps to address it.

8. Your rights

Because we don't maintain accounts or store the photos you restore, there is very little personal data to access or delete. You can remove the app and its locally stored data at any time by deleting PhotoFixr from your device. Depending on where you live, you may have rights to access, correct, or delete personal information, or to object to certain processing. To exercise any of these rights, or to ask a question, email us at support@lilinsystems.xyz.

9. Third-party processors

We rely on a small number of trusted providers to operate PhotoFixr:

  • Apple — distributes the app and processes all purchases and subscriptions.
  • Replicate, Inc. — runs the AI restoration on the photo you submit, using the FLUX.1 Kontext [pro] model from Black Forest Labs; does not use your photos to train models and does not retain them after processing.
  • PostHog — stores the product-analytics events described in section 5. Receives no photos.
  • AppsFlyer — measures which advertisements lead to installations and subscriptions, as described in section 5. Receives no photos.
  • Vercel — hosts this website, the App Store redirect, and the server that passes your photo through to Replicate without storing it.

Each provider processes information only as needed to deliver its part of the service, and each is bound by contractual terms requiring data protection at least equivalent to that described in this policy. We do not sell your personal information to anyone.

10. Security

Photos are transmitted over encrypted connections during restoration. While no method of transmission or processing is completely secure, we use reasonable technical and organizational measures to protect your information and limit it to what's strictly needed.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll revise the “Effective date” above and, for significant changes, provide a more prominent notice. Continued use of PhotoFixr after an update means you accept the revised policy.

12. Contact

Questions about your privacy or this policy? Email support@lilinsystems.xyz and we'll be glad to help. PhotoFixr is operated by Lilin Systems.