Privacy Policy · Remorph

Remorph is a picture‑making island. You bring a photograph, pick a place on the Wander Isle, and the app returns a scene you can pin into your journal. Everything in this document describes how that loop treats information — what the app takes in, why it needs it, who helps us handle it, and when it goes away.

The words "we" and "our" mean the team that publishes the Remorph iOS app; "the app" covers the app itself and the services behind it. Keep travelling with Remorph and this is the arrangement you are travelling under. If any part of it does not sit right with you, the honest answer is to stop using the app and to write to us.

1The short version

You choose each photo. Remorph never browses your library; it receives only the individual pictures you hand it.
Faces are material, not identity. A face in your photo is drawn from, never matched, enrolled, or turned into a template.
Source photos are short‑lived. Originals leave our working systems within a day of the job ending.
No card numbers reach us. Purchases are handled end to end by Apple.
Nothing is sold. We do not trade personal information for money, ever.

2What arrives at Remorph

Handed over by you

Pictures. The photograph you attach to an event or a video template so the requested scene can be produced.
Written prompts and notes. Any text you add to steer a generation.
Correspondence. If you file feedback or a support ticket, we hold the message and the minimum needed to reply on the right thread.
Purchase records. Crystal top‑ups are transacted by Apple. What comes back to us is the product identifier, order state, amount, and currency — no card, bank, or full billing details.

Produced as you travel

Account handles. A device‑scoped identifier and session token keep your balance and your journal attached to you, and help us spot abuse. Signing in with Apple adds whatever name or relay address you elect to share.
Journey records. Task identifiers, the location and event you joined, chosen templates, job status, crystal balance, journal and history rows, and timestamps.
Marketing measurement. Our attribution partner Adjust reports installs, campaign source, and purchase events. Depending on your device settings and local law this can include device, network, and advertising signals.
Technical breadcrumbs. App build, iOS version, connectivity, crash and error traces, and similar operational logs.

3What it is used for

Each category above earns its place by doing one of these jobs:

producing your images and videos and returning the finished result to your journal;
maintaining your account, crystal balance, collected memories, and history;
settling purchases and crediting what you bought;
keeping the island standing — defending against fraud and abuse, and diagnosing faults;
understanding which campaigns work and where the app should improve; and
answering legal obligations and enforcing our terms.

4Photographs, faces, and the scenes we build

This is the part of Remorph that touches the most sensitive material, so it gets its own account.

How a picture reaches us

Selection runs through Apple's system photo picker. The app sees the single image you pick and nothing else — no album scanning, no background reads. Before that image leaves the device, Remorph shows you a notice naming what will be transmitted, which providers will receive or host it, why it is being processed, and how long it is kept. Nothing is uploaded until you agree to that notice. The picture may be resized before transfer, and it always travels over an encrypted connection.

Please upload only images you have the right to use, and leave out sensitive detail that the scene you want does not actually need.

When a face is in the frame

Many Remorph events work best with a portrait, so the picture you choose will often contain a face. The visible facial and visual characteristics in that picture are read for exactly one purpose: rendering the image or video you asked for and delivering it back to you.

What Remorph does not do with a face: identify or authenticate a person, recognise or track them, compare them against any database, or derive a faceprint, facial embedding, feature template, biometric profile, or any other facial‑recognition identifier. None of that data is created, so none of it is stored.

Where the processing happens

Uploaded pictures land in our cloud processing environment on Google Cloud Platform, where our self‑hosted AI models generate the requested result. Google Cloud Platform and Amazon Web Services act purely as infrastructure and processing providers for us: they may handle the picture only to supply hosting and compute, never for purposes of their own and never to train their models.

Your photographs are not used for advertising, tracking, identity checks, facial recognition, or the training of AI models — ours or anyone else's — and we do not sell them or anything derived from them.

5How long things stay

Retention follows the kind of information rather than one blanket rule:

Information	Kept for
Uploaded source photos (faces included) and temporary processing files	Erased from active systems within 24 hours of the job finishing or failing. Any incidental backup copy is purged within 7 days.
Biometric face data	Never held, because it is never collected or generated.
Generated results and journal entries	Server‑side history is shown for a limited window; memories saved into your journal live on your device until you delete them or remove the app.
Account, purchase, and security records	As long as reasonably required to operate the service, keep it secure, resolve disputes, and satisfy legal and tax duties.

Copies inside routine backups may persist a little beyond these windows before their scheduled deletion catches up.

6Who else sees it

Disclosure is limited to what a step genuinely requires, and only to:

Cloud and AI infrastructure providers — Google Cloud Platform and/or Amazon Web Services — who host, store, compute, and deliver generation results on our instruction. When you submit a photo, these are the only third parties it reaches.
Adjust, for install attribution, campaign analytics, and purchase‑event measurement.
Apple, for App Store distribution, in‑app purchases, Sign in with Apple, and other platform functions.
Professional advisers, regulators, or law enforcement, where reasonably necessary to comply with law, investigate abuse, or protect rights and safety.
A successor, in a merger, financing, reorganisation, or sale of assets, with equivalent protections carried across.

Because we neither collect nor create biometric facial data, none is ever passed on. And to say it once more plainly: we do not sell personal information.

7How it is protected

Transfers are encrypted in transit, access to processing systems is restricted to those who need it, and source material is expired on a schedule rather than left lying around. Administrative, technical, and organisational safeguards are reviewed as the app changes. All the same, no internet transmission or storage method is flawless, so we cannot guarantee absolute security.

8What you can decide

Depending on where you live, you may be entitled to access, correct, port, or delete your personal information, to withdraw consent, or to object to or restrict particular processing.

Consent for a photo upload is asked for each time, and declining simply stops the upload.
Remorph's own screens let you delete supported generation records and saved memories; removing the app clears what is stored locally.
iOS privacy settings govern tracking permission and photo access at the system level.
You can email us a request directly. We may need to verify who you are before acting, and we will respond within the period the applicable law allows.

9Crossing borders

Our providers may store or process information in countries other than the one you are in, under privacy regimes that differ from your own. Where the law requires it, such transfers are covered by appropriate safeguards, such as standard contractual clauses.

10Younger travellers

Remorph is built for adults and is not directed at children under 13 — or under a higher minimum age where local law sets one. We do not knowingly gather personal information from anyone below that threshold. Tell us if you believe a child has provided information and we will look into it and delete what we should.

11Changes to this document

This policy will be revised as the app develops. Updates are published on this page with a new effective date, and where a change is material we will give the additional notice the law requires. It is worth a fresh look now and then.

12Talk to us

Questions, privacy requests, or complaints about anything above go to [email protected]. Please state what you would like done so we can route it to the right person quickly.