Privacy Policy
Last updated: August 17, 2026
Photospital ("Photospital", "we", "us") is an app that restores and enhances your photos using AI, with an optional service to order physical prints. This policy explains what we collect, how we use it, and who we share it with. We built Photospital to collect as little as possible.
Information we collect
- Photos you submit. When you restore a photo, the image is sent to our servers and to our AI processing provider to produce the result. Photos are processed on demand and are not stored on our servers after processing, except where you place a print order (see below).
- Purchases & subscriptions. If you subscribe to Photospital Pro, the purchase is handled by Apple. We receive a confirmation that a valid subscription exists; we never receive your card number.
- Print orders. If you order prints, we collect your name, email address, shipping address, the photo to be printed, and order details so we can produce and deliver your order.
- On-device data. Your restoration history is stored only on your device and is not uploaded to us.
What we do not do
- No user accounts or logins.
- No advertising, and no tracking of you across apps or websites.
- No sale of your personal information.
- No third-party analytics or ad SDKs. (Our payment provider's SDK collects limited data needed to process payments and prevent fraud.)
How photos are processed
To restore a photo, we send it to Replicate, our AI model host, which runs the restoration and returns the result. Photos are used only to produce your result and are not used to train models by us. We do not retain your photos after processing, other than the specific image attached to a print order.
Face data
Photospital detects faces so that face-aware features can work: choosing which person to retouch, keeping a restored face faithful to the original, standing a sideways print upright, and keeping the tear-repair brush away from eyes.
- What is collected: face detection and face landmark geometry (the position of a face box, and points such as eyes, brows, nose and mouth) computed from the photo you are editing.
- Where it is computed: entirely on your device, using Apple's Vision framework. This geometry is never uploaded, never sent to any third party, and never leaves your device.
- How long it is kept: it is not kept. Face geometry exists only in memory while the app is working on that photo and is discarded when the operation ends. It is never written to disk and never included in a backup.
- Face recognition: none. Photospital does not identify or recognise anyone, does not build a faceprint or face template, does not match faces between photos, and does not maintain any database of faces.
- Sharing: face data is not shared with anyone, including Replicate. When you choose an AI tool, the photograph you selected is sent to Replicate for processing (see “How photos are processed” above) — that photograph may of course contain faces, but no face geometry, faceprint or identification data accompanies it, and the photo is not retained after processing.
Who we share information with
We share information only with the service providers needed to run the app, and only for that purpose:
| Provider | What it receives | Why |
|---|---|---|
| Replicate | The photo you're restoring | AI photo processing |
| Apple | Subscription transaction | Billing & subscription management |
| Stripe | Payment details for print orders | Payment processing |
| Prodigi | Name, shipping address, order photo | Printing & shipping your order |
We may also disclose information if required by law.
Data retention
- Restoration photos: not retained after processing.
- Photos you report: if you choose to report a poor result, the photo you reported — both the original and the result — is uploaded and kept for up to 90 days so we can investigate what went wrong, then deleted. This only happens when you tap Report and confirm; we never upload a photo for review otherwise. Email support@photospital.com to have a reported photo deleted sooner.
- Print orders: the photo you order is uploaded to our storage so the printer can fetch it, and is deleted after 90 days — long enough to reprint an order that arrives damaged. Order records (name, address, and what was ordered) are retained as needed to fulfill the order and for our business and tax records.
Your choices & rights
Because we don't have accounts, most data isn't tied to a profile. For print orders, you may request access to or deletion of your order information (subject to records we must keep for legal/accounting reasons) by emailing support@photospital.com. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA; contact us to exercise them.
Security
Data is transmitted over encrypted connections (HTTPS). No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.
Children
Photospital is not directed to children under 13, and we do not knowingly collect personal information from them.
Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the date above.
Contact
Questions about privacy? Email support@photospital.com.