Trust & safety
Family photos should be handled like family photos.
You're handing us photographs that may exist nowhere else on earth. Here is exactly how we treat them: not as legal boilerplate, but as the engineering rules the system actually runs on.
Your photos are private family records. We do not train on them, sell them, publish them, or keep them longer than needed to restore and let you download them.
What happens to a photo
A short, deliberate journey
The safest photo is one we do not keep. The system is designed around getting the restoration done, giving you time to download it, and then letting the files expire.
- UploadThe original arrives through HTTPS and is stored outside the public web.
- ScrubThe file is re-encoded so GPS and camera metadata are stripped first.
- RestoreOnly the image needed for restoration is sent to the model you choose.
- PreviewYou judge your selected restoration option before spending credits on its full restore.
- DownloadThe restored image stays briefly so you can recover it from history.
- ExpireOriginals delete within 1 hour. Restored photos delete within 24 hours.
The deletion clock
Every photo starts on a timer
Every photo you touch is on a timer from the moment it arrives.
These timers are enforced twice: by the application every few minutes, and independently by the server's operating system, so even if the app itself failed, your photos still expire.
Never training data
Your photos are not fuel for a model
Your photos are never used to train AI, not by us, full stop. To restore an image we send it to the AI model you chose (Google, OpenAI, Black Forest Labs, ByteDance, or Sourceful, routed via OpenRouter), it returns the repaired version, and that's the entire journey. Restored images from some models carry an invisible provenance mark (like Google's SynthID) identifying them as AI-edited, an honesty feature, not a tracker.
What leaves our servers
The image, not your identity
Only the image needed for restoration is sent to the selected AI model provider. Your account details, email, payment information, and restoration history are not sent with it.
Visible to exactly one person: you
No public photo URLs
Location data is scrubbed
The place it was taken should stay yours
Every upload is re-encoded the moment it arrives, which strips GPS coordinates and camera metadata before anything else happens, including before the photo is sent to any AI model.
Restoration rule
We repair damage. We don't change people.
Every restoration runs under one strict instruction: fix the scratches, tears, and fading, never alter a face, never invent detail, and where the original is uncertain, leave it soft rather than guess. Models that can't reliably follow that rule are labeled with a caution or removed from the menu entirely. And the thumbs-up/down on every result feeds a running quality score per model, so the menu earns its rankings.
What we will not do
The line stays simple
Money, honestly
You should see the result first
Sensitive photos
Use judgment with any online AI service
If a photo is extremely sensitive, private, legal, medical, or unsafe for anyone else to process, do not upload it. We built this system to be careful, but no online AI service should ask you to ignore your judgment.
Who's behind this
This is not a faceless policy page
One person, restoring his own family's three-generation archive, built this. Read the story. Questions go to [email protected] and land with that person, usually same-day. The formal versions of everything on this page live in the privacy policy and terms.