Last updated 25 August 2026
This policy explains exactly what RevivePix does with your data. It is written to match, word for word, what the app tells you before your first upload. If the two ever disagree, treat that as a bug and tell us.
What the app says before your first upload: "Your photo will be sent to our server and to Replicate (AI processor) to restore it. It is automatically deleted within 24 hours and never used to train AI models."
RevivePix is an iOS application. For any privacy question, write to support@digitalnafta.com. We answer within 5 working days.
| Data | Why | How long we keep it |
|---|---|---|
| The photo you choose | To produce your restoration or animation. Nothing else. | Deleted within 24 hours |
| An anonymous device identifier | To count your credits and stop abuse of our AI budget. You can read it yourself in Settings, and it is the only thing that ties you to your credits | Until you delete your data from Settings, or ask us to erase it |
| An app instance identifier created by Firebase | To group analytics events coming from the same install without knowing who you are. It is a different identifier from the one above and it is not linked to it | Until you reinstall the app or turn analytics off |
| Usage events (screens opened, which model was used, errors), sent to Google Analytics for Firebase | To understand what works and fix what does not | 24 months, aggregated |
| Purchase status | To know whether your subscription is active | While the subscription lasts |
| The same usage events, also stored on our own server in Germany | To be able to fix a problem without depending on a third party dashboard | Deleted when you delete your data from Settings |
| A one way marker saying that this device already received its 3 free credits | So that deleting your data does not hand out the free credits again. It is a keyed hash: it cannot be turned back into your identifier, it is not linked to your photos, your purchases or your usage, and the only question it can answer is whether the free credits were already given | Kept after you delete your data, because that is the only thing it is for |
One thing worth saying plainly about the result: the restored image or video is produced by our processing partner and is served from their network, on a long random address, for as long as they keep it. The copy you uploaded is deleted within 24 hours as promised above, and the result never carries your name, but its address is not something we can revoke once you have shared it.
Two processors, listed in full below. We do not sell data, we do not share it with advertisers, and nothing goes anywhere that is not on this list.
| Processor | What it receives | What it is for |
|---|---|---|
| Replicate, Inc. United States |
The photo you picked. Nothing that identifies you travels with it. The app never talks to Replicate directly: every image goes out through our own server. | Running the AI models that do the restoration, colorization, sharpening, upscaling or animation. The uploaded copy is deleted within 24 hours. Privacy policy |
| Google LLC United States Firebase, Google Analytics for Firebase |
An app instance identifier and product interaction events: which screen you opened, which mode you used, whether a job failed. No photo, no name, no email, no advertising identifier. | Telling us which features get used and where the app breaks. This data is not linked to your identity, is never used for advertising, and is not combined with data from other apps or websites. Privacy policy |
Your photos never reach Google. Analytics records that a restoration happened, never what was in the picture.
Payments are handled by Apple. We never see your card or your Apple ID, only whether a subscription is currently active.
Your photos are used to produce your result and for nothing else. They are not added to any training set, ours or anyone else's.
Our server is in Germany (European Union). Replicate and Google both process in the United States under Standard Contractual Clauses. If you are in the EEA or the UK, that is the legal basis for the transfer.
You can erase everything we hold about you from inside the app, in Settings, without writing to anyone and without waiting for us. It removes your credits, your history of movements and any copy still on our server.
You can also ask us to access, correct, export or erase your data, or object to processing. Because we hold no name or email, tell us your anonymous device identifier, which Settings shows you in full, and we will act within 30 days. Under the GDPR you may also complain to your local supervisory authority.
We do not sell or share personal information as those terms are defined by California law, and we never have. California residents have the same access and deletion rights described above and will never be treated differently for exercising them.
RevivePix is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has sent us data, write to us and we will erase it.
Everything travels over TLS. The uploaded copy is stored only as long as the job needs it and in any case is deleted within 24 hours by an automated task. Nothing is kept in plain text longer than that.
If this policy changes in a way that affects you, the app will show you the new text before your next upload. The date at the top always reflects the current version.