Privacy Policy

The short version

Your photos are processed, then deleted. Originals and results are automatically deleted from our own storage within 24 hours of processing. To generate a retake, your photo is sent to a third-party AI provider — kie.ai, operated by NEXUSAI SERVICES LLC (United States) — which keeps its own copies for longer under its own policy. The exact numbers are below, stated as they are. We never use your photos to train AI models, we never train on your face, and we never sell your data.

What we collect, and why

1. Account information — your email address and how you sign in (Sign in with Apple, Google, or email). Used to run your account and keep your purchases and retakes together.
2. Photos you choose to retake — uploaded solely to perform the retake you asked for. Stored temporarily in our infrastructure (Cloudflare R2), deleted automatically within 24 hours of processing, and sent to our AI provider to generate the retake (see below).
3. Retake jobs — the instruction you give ("fix my blink", "fix the lighting"), the job status, and the generated result. The result lives in the same 24-hour window as the originals: both are erased automatically. This is how our promise "photos are deleted after processing" actually works — it is a scheduled deletion, not a slogan.
4. Face references (optional) — 3–5 front-facing photos you can add to improve likeness. Kept until you delete them in Settings → Face profile, and used only as input for your own retakes. We never train on your face.
5. Purchase records — all purchases are made in the app as App Store in-app purchases and are processed by RevenueCat on our behalf. We receive an entitlement record (what you bought and when it renews). We never see or store your card number — payment details stay with Apple.
6. Usage data — which features you use and how often, used to keep the service reliable. No advertising SDKs, no cross-app tracking.

Third-party AI processing

Retakes are generated by a third-party AI service: kie.ai, operated by NEXUSAI SERVICES LLC (Colorado, United States).

• What is sent: the photos you upload for a retake (and your optional face references), together with your instruction.
• Why: solely to generate the retaken image you requested. Nothing else.
• Your explicit permission first: before your first upload, the app shows a consent screen naming this provider and asks you to agree. No consent, no upload — the photo stays on your device. The disclosure is always readable in Settings → Privacy, and the consent screen appears again on any new device or reinstall.
• Where: kie.ai processes data in the United States. Its privacy policy is at kie.ai/privacy-policy.

One thing we want to say plainly, because you deserve to know: kie.ai's own privacy policy states that it only collects users' email addresses — it makes no commitments about uploaded images. Its technical documentation states that generated media files are retained for 14 days and processing logs for 2 months before deletion. We disclose this exactly as it is, and we don't make promises on kie.ai's behalf.

Our AI provider may occasionally decline a photo (for example when its safety filters suspect a public figure). When that happens the retake fails — and a failed retake never costs you anything.

What we never do with your photos

• We never use your photos to train AI models — and we never train on your face.
• We never sell, rent, or share your photos with advertisers or data brokers.
• We never keep your photos on our own servers beyond the 24-hour processing window.

How long we keep things

• Photos on our servers (Cloudflare R2): originals and results alike, deleted within 24 hours of processing.
• At our AI provider (kie.ai): generated media retained up to 14 days, processing logs up to 2 months, per kie.ai's own documentation.
• Face references: kept until you delete them in Settings, or until you delete your account.
• Account data: kept while your account is active; deleted on request.
• Purchase records: entitlement records kept as long as needed for accounting and legal obligations.
• Feedback (👍/👎 signals): kept in anonymized form to improve retake quality — never linked to your photos, which are already gone.

Sub-processors and service providers

The third parties that process data on our behalf:

| Provider | Role | Location | | --------------------------------- | ------------------------------------------------ | --------------------------- | | kie.ai — NEXUSAI SERVICES LLC | AI processing that generates your retakes | United States | | Cloudflare, Inc. | Hosting and temporary photo storage (R2) | United States / global edge | | RevenueCat, Inc. | Subscription and purchase entitlement management | United States | | Apple Inc. (App Store) | Payment processing for in-app purchases | United States | | Resend | Transactional email (sign-in and account emails) | United States |

Each provider processes data only to deliver its part of the service and is bound by its own data-protection commitments. If this list changes, we update this page before the change takes effect.

Cross-border transfers

Refire is operated from servers and providers located in the United States. If you use the app from outside the US, your information — including the photos you upload — is transferred to and processed in the United States. We rely on contractual safeguards with the providers listed above for these transfers. By using Refire you understand that your data will be handled as described here, wherever you are.

AI-generated content

• Images generated by Gemini-class models carry an invisible SynthID watermark. You can't see it, it doesn't change how the photo looks, and it allows the image to be identified as AI-generated.
• Where the law requires it (for example under the EU AI Act), retaken images may be marked or disclosed as AI-generated when you export or share them.

Your rights and choices

• Delete your photos: automatic — there is nothing to do. Everything you upload is gone from our servers within 24 hours.
• Delete face references: anytime in Settings → Face profile.
• Export or delete your account: email us at hi@refirecam.com. Deleting your account removes your profile, face references, remaining credits, and purchase history.
• Withdraw AI-processing consent: decline the consent screen (or reinstall the app to be asked again). Without consent, no photo ever leaves your device.
• Depending on where you live (for example the EEA, UK, or California), you may also have legal rights to access, correct, or port your data. Email us and we will honor them.

Refire is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

If we change this policy, we update this page and change the date above. Material changes are announced in the app before they take effect.

Contact

Questions, deletion requests, or anything else about this policy: hi@refirecam.com.