Privacy Policy

Last updated: 2026-10-05

1. Information We Collect

To improve app performance, we may collect device information, app version details, and crash logs. Your photos are processed temporarily to provide the service, as described below.

2. Face Data

Many of Sharpen's editing tools work with photos of people, so some processing involves face data. We handle this differently depending on the tool:

On-device retouch tools (Blemish Correction, Teeth Whitening, Eye Enhancement, Under-Eye Correction, Shine Reduction, Complexion, and Skin Smoothing) detect the geometric position of facial features — points marking the eyes, eyebrows, nose, lips, and face outline — directly on your device, using Apple's Vision framework and an on-device face-landmark model. This geometry is used only to build a mask for that single edit. It is never transmitted off your device, never uploaded to us or anyone else, and is discarded once you close or move on from the photo. Sharpen does not perform facial recognition and does not create any identity profile or biometric template from this data.

Cloud AI tools (Face Retouch, Restore Old Photo, and the face-enhancement option within our Quality/Selfie upscaling tools) send the photo you choose to edit — which may contain a face — to our image-processing partners so they can generate the enhanced or restored image you requested. See "Third-Party Services" below for who these partners are and how long they keep your photo. We do not extract or retain a separate biometric template, face embedding, or facial recognition identifier from these photos, and we do not use them to train any AI model ourselves.

3. How We Use Data

Collected data is used only to provide the specific edit you requested, improve service quality, resolve technical issues, and enhance user experience.

4. Third-Party Services

When you use a cloud AI tool, your photo is shared with one of the following processors, solely to generate your requested output:

Topaz Labs (topazlabs.com) processes photos submitted to our upscaling and quality tools, including the optional face-enhancement setting. Their handling of submitted images is governed by Topaz Labs' own privacy policy.

fal.ai (fal.ai) processes photos submitted to Face Retouch and Restore Old Photo. For these tools, fal.ai routes the request to OpenAI's image-editing model to generate the result. We configure fal.ai to automatically delete the uploaded photo and the generated result within 1 hour of upload, and we disable fal.ai's request-history logging for these requests.

We also use third-party providers for analytics, crash reporting, subscription management, and backend infrastructure. These providers can access data only as needed to deliver their service and do not receive your photos unless named above.

5. Retention and Security

Data is protected with industry-standard security measures. Our own servers do not store the photos you submit to cloud AI tools — we keep only a one-way cryptographic hash of the submitted photo (which cannot be used to reconstruct it), together with non-identifying technical metadata such as image dimensions, which tool was used, and timestamps. This record is used for fraud prevention and service reliability and is automatically deleted after 90 days. Retention of your photo on our processing partners' own systems is described in the "Third-Party Services" section above.

6. Contact

For privacy-related questions: hello@keremcebi.co

Optional analytics and session replay — October 5, 2026 update

We use PostHog EU Cloud to understand usage and diagnose problems. Analytics may include your app account UUID, app/device and version information, screen navigation, editing and export outcomes, subscription events, and sanitized error reports. The UUID is a pseudonymous identifier; this data is linked to your account and is not fully anonymous. We do not use it for advertising targeting, tracking across other companies’ apps, or sale to data brokers.

In releases containing the new privacy controls, analytics and replay default to off. You can separately allow or withdraw them in Settings. Declining does not affect editing, saving, or purchases. Earlier versions may have sent analytics without a separate analytics consent. Session replay is currently disabled for the project and will stay disabled until the privacy controls are released and verified.

IP address storage is disabled in PostHog. We disabled IP-based location enrichment for the project on October 5, 2026. Earlier analytics records may include approximate location derived from IP; this change does not automatically erase earlier records.

If you allow replay and recording becomes available again, it may capture masked images of the app interface. Photos, filenames, text, and native screens are masked or excluded; selected safe controls may remain visible. New releases exclude touch coordinates, raw error messages, photo URLs, file paths, and request bodies. A visible replay indicator includes a Stop button. Authorized team members may use these recordings, including PostHog’s automated/AI analysis features, to investigate problems.

Replay retention is configured for 30 days. This does not apply to analytics events: our current paid PostHog plan provides seven years of historical analytics access, which is not an automatic deletion guarantee. You can request earlier deletion of analytics records, your analytics profile, recordings, and associated AI analysis outputs at hello@keremcebi.co. Withdrawing consent does not automatically erase earlier records. Offline withdrawal stops collection on your device; the server preference is retried when you next reopen or return to the app after connectivity returns.

Records needed for security, abuse prevention, quotas, and purchase verification are separate from optional analytics. PostHog acts as a processor; EU hosting does not guarantee that every support or subprocessor activity stays in the EU. See PostHog’s privacy policy, data processing agreement, and subprocessor list for processor and international transfer information. Contact us to exercise applicable rights of access, correction, deletion, objection, and complaint.