Your photos, privately.

AIPhotoRetouch processes photos you choose to upload so that it can return edited results. Upload only photos you own or have permission to process, including permission from identifiable people where required.

Who operates the service

AIPhotoRetouch is operated by Marwan Akhandaf. For product support or a privacy request, email info@aipgen.com.

Information we use

Google sign-in provides your verified Google account identifier, email address and basic profile name. We do not request access to Google Photos, Drive, Gmail or contacts. We store server-side session records, photo ownership, editing settings, the look and look settings you choose (including any text you type for it and which of your uploaded photos a look uses as extra photos), any written instruction you add to an edit, job status and credit usage. Security controls use limited network information and expiring rate-limit records. We do not place photos or signed photo links in product analytics.

Photo processing and storage

Cloudflare hosts the application, database and private photo storage. Input photos are decoded and re-encoded for processing, with metadata such as EXIF and GPS removed from the normalized copy. Depending on the selected task and service availability, Replicate or fal.ai receives the photo and an editing instruction, which includes any request you write yourself. Do not include personal information in an instruction. Those services may use their upstream model providers, including Google or Bria, to fulfill the request. Automatic fallback can send the photo to the second provider when permitted by the job's failure policy.

We do not publish your photos as examples or use them to train models. Separate provider policies and retention terms apply to processing copies. We do not promise universal zero retention or immediate deletion from every processor.

Retention and deletion

Guest photos and results expire after 24 hours. Signed-in photos and results expire after 30 days. Deletion revokes access to this application's copies and schedules their removal from private storage. In-flight processing may need time to finish or cancel. Replicate API processing copies normally follow its provider-managed retention, currently one hour. This application does not issue Replicate deletion requests. fal request-history payload storage is disabled for our requests, with a one-hour lifecycle requested for supported output files; other processor retention can still apply.

Use the editor to delete a photo and its edits. Use your account to request account deletion. Account deletion first handles future subscription renewals, then removes this application's photos and sign-in access. Pseudonymous usage and billing records may be retained where needed for security, disputes and financial recordkeeping.

Payments

Stripe processes payments and stores payment-method details. We store the Stripe resource identifiers required to associate your subscription and paid allowance with your account. We do not store card numbers.

Cookies and security

Essential, HttpOnly cookies maintain your guest workspace, Google sign-in state and account session. If you switch between the dark and light theme, a first-party preference cookie remembers that choice for a year; it is set only when you use the switch and is not used for tracking. Cloudflare Turnstile may verify requests to prevent automated abuse. Photos remain private and are served through ownership checks; processing providers receive time-limited access to the specific input needed for the job. We use origin and CSRF checks for account actions.

If you choose a language, region, display currency or measurement preference, a first-party preference cookie remembers your explicit choices for one year. We use Cloudflare’s coarse country information and browser language to suggest defaults at the neutral entry page and to format local price estimates. We do not request browser location permission or send your IP address to a new location service. These defaults do not change your billing country, taxes, subscriptions or invoices.

Optional analytics

Optional analytics stay off until you allow them. They count page visits and tool use with approximate country, language and device; no photos, prompts, form text or raw IP addresses.

Privacy choices and browser IDs last up to 180 days. Detailed events and sessions last 90 days. Choose Analytics choices in the footer to stop collection and erase this browser’s optional history. Required account and billing records remain.

Your choices

You can choose not to upload a photo, compare and reject an edit, delete this application's stored photo copies and stop future billing renewals. AI can alter details, so review results before sharing them. Account privacy controls are available through your account.