Film to Photo

Legal

Privacy Policy

Effective September 23, 2026

This policy explains how Film to Photo handles information when you use the mobile app or contact support.

Photos and local editing

Film conversion, cropping, color adjustment, and ordinary export run on your device. The app keeps the original image and your local edits in its private app storage until you delete the scan or the app’s data. Saving or sharing a result copies it to the destination you choose. These local photo features do not send the photo to us.

Optional AI tools

AI Restore and Upscale are optional and require you to sign in to Film to Photo. After you choose a prepared positive photo and consent to the in-app notice, the app uploads that full-resolution photo and restoration settings to our service. Our service sends the photo and instructions through OpenRouter to the selected Google model so it can create a result. OpenRouter and Google therefore process the submitted photo.

Our service removes its source copy when processing reaches a terminal outcome. A successful result remains available from our service for up to seven days so you can recover it, then our scheduled cleanup removes it. You may delete an individual AI job earlier. The seven-day limit covers storage controlled by Film to Photo; OpenRouter and Google apply their own processing and retention practices. Network and service metadata, such as timestamps, request identifiers, model use, token use, IP address, and error information, may also be processed to operate, secure, and troubleshoot the service.

Account information and deletion

Film to Photo accounts use Supabase Authentication. For email sign-in, Supabase processes your email address and password to authenticate you. It also processes account identifiers, authentication tokens, and service metadata needed to operate and secure the account. On supported Apple devices, you may choose Sign in with Apple; Apple authenticates you and provides an identity token and an email address, which may be a private relay address. If you choose Google sign-in, Google authenticates you and provides an identity token and basic profile information such as your name, email address, and profile photo. Film to Photo does not receive your Apple or Google password. The app stores authentication state securely on your device.

Supabase hosts our account database, AI service, and private photo storage. You can use the in-app Delete Account action or follow the steps on our account deletion page. Account deletion deletes your Film to Photo account and sign-in access, stops active AI work, makes associated AI jobs unavailable, and removes private source and result photos stored by Film to Photo. Removal from our storage may take a short time. Local scans remain on your device until you delete them or clear the app’s data.

We retain only the limited purchase, credit, technical, and security records needed to make deletion permanent, prevent a store transaction or deleted job from being processed again, keep the credit balance accurate, handle fraud or disputes, and meet legal obligations. These records can include the store, transaction identifier, product, account identifier, credit entries, verification time, and limited technical job metadata. They are retained only for as long as those purposes require. Provider backups and records controlled by OpenRouter, Google, stores, and other processors follow their own retention practices.

Purchases and credits

Apple App Store or Google Play processes payments, depending on your device. RevenueCat processes purchase history, app-user identifiers, product and entitlement information, and related transaction metadata so the app can validate purchases, unlock local Pro, restore access, prevent fraud, and provide purchase analytics.

AI credit purchases are linked to your Film to Photo account so credits can be delivered across sessions. We retain a minimal transaction record, such as store, transaction identifier, product, account identifier, and verification time, to prevent the same purchase from being claimed more than once and to keep the credit ledger accurate. Purchased AI credits do not expire. One credit is charged only when an AI result succeeds; a failed or cancelled job returns its reserved credit. Expiration or deletion of a successful result does not return the spent credit.

Support

If you contact us, we receive your email address and anything you include in your message. We use it to answer the request and keep it only as long as reasonably needed for support, security, and legal records. Do not email photos or sensitive information unless it is necessary for your request.

If you report an AI result in the app, the report can include your account and existing AI-job identifiers, a reason selected from the app, optional text you enter, and technical metadata already associated with that job. Submitting a report does not upload the photo again. We use the report to investigate quality or safety issues and retain it only as long as reasonably needed for support, security, and service improvement.

Sharing and sale

We use Supabase, Apple, Google Play, RevenueCat, OpenRouter, and Google for the purposes described above. We do not sell your personal information or use it for third-party behavioral advertising.

Your choices

Security and international processing

We use technical and organizational safeguards designed to protect information, including encrypted network connections for online services. No method of storage or transmission is completely secure. Our providers may process information in countries other than yours under their own terms and legal obligations.

Children

Film to Photo is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information.

Changes and contact

We may update this policy as the app or its providers change. We will post the revised policy here with a new effective date. Questions or privacy requests can be sent to support@filmtophoto.app.