Privacy Policy
Last updated 14 September 2026
Reposy edits photos. This page says exactly what happens to a photo you edit, what we keep, for how long, and how to make us delete it. It is written to be read, not to be survived.
We do not ask who you are
There is no sign-up. The app asks our server for an anonymous identity on first launch and keeps it in your keychain (which iCloud Keychain, if you use it, carries to your other iPhones, end-to-end encrypted). It is a random identifier and nothing else: we never ask for your name, email address, phone number or date of birth, and we have no way to work out who you are from it.
Photos you edit
When you ask for an edit, the app sends us the photo you chose, the area you painted, and which edit you picked. We need the photo to make the edit; there is no way to do it without sending it.
- We delete our copy within 24 hours. This is automatic and runs whether or not you open the app again.
- The edited result is stored the same way and deleted on the same schedule. If you want to keep it, save it to your own photo library — that copy is yours and we never touch it.
- Photos you only look at in the app, and never send for an edit, never leave your phone.
The AI provider
The edit itself is made by an AI provider we work with, currently Google, using its Gemini image models. The part of your photo being edited is sent to that provider so it can do the work.
The provider keeps its own records for a limited period under its own terms, over which we have no control. This is the one thing we cannot promise you: once an edit has been made, we cannot guarantee the photo exists nowhere. The app tells you this before the first photo is ever sent, and asks you to agree.
We do not sell your photos, we do not use them to train any model of our own, and we do not share them with anyone other than the provider making the edit you asked for.
Purchases
Payments are handled entirely by Apple. We never see your card, your Apple Account, or your billing address. What we receive from Apple is a signed receipt, from which we store the transaction identifier and the number of credits it is worth, so that the same purchase cannot be credited twice.
What we do not do
- No analytics services, no advertising identifiers, no tracking across apps or websites.
- No third-party software development kits in the app at all.
- No advertising, and nothing about you is sold or shared with data brokers.
Deleting everything
In the app, open Settings and choose Delete account. Your photos, edits, saved favorites and any problem reports are removed immediately and cannot be brought back. Anything still being generated is cancelled.
One thing survives: the record of purchases you made. It is an accounting record of real money, kept by law and for refunds, and after deletion it no longer points at anything about you.
Children
Reposy is for adults and is not directed at children.
Where the data is
Our server is in Germany. The AI provider may process the photo elsewhere under its own terms.
Changes
If this policy changes in a way that affects what happens to your photos, the app will ask you to agree again before the next edit. Changing the AI provider is such a change. The provider named above is the only one that edits your photos today; if we ever move to another, this page says so before it happens and the app asks you to agree again.
Contact
Questions, or a request about your data: support@reposy.app