Privacy Policy

Effective date: September 28, 2026  ·  Last updated: September 28, 2026

This Privacy Policy explains what data we collect when you use the Reviv mobile application (the "App"), why we collect it, who we share it with, and the choices and rights you have.

1. Who we are

The App is operated by Core App Labs, Room 5003, 5/F, Yau Lee Centre, 45 Hoi Yuen Road, Kwun Tong, Kowloon, Hong Kong ("Reviv", "we", "us", "our"). We are the controller of the personal data described in this Policy. You can contact us at any time at support@reviv.pro

2. Summary

• Your photos: processed only to deliver the feature you choose.
• Storage of photos: deleted from our servers within 48 hours; copies held by our AI providers are deleted within 14 days.
• AI model training: we never use your photos or outputs to train AI models.
• Face recognition or biometric IDs: not performed or created.
• Sale of personal data: we do not sell your personal data.
• Account required: no — the App works without registration.
• Advertising: no third-party ads in the App.

3. Data we collect

3.1 Photos you choose to process ("User Content"). When you select a photo and start a feature, we receive that photo and generate an output image or video. We access only the photos you pick; we do not scan your photo library. You can grant limited photo access in iOS Settings.

3.2 Outputs. The restored, colorized or animated results created from your photos.

3.3 Purchase data. Apple processes all payments. We receive transaction and subscription details (product ID, purchase date, renewal status, country, a transaction ID) to unlock features. We never receive your card number or Apple ID password.

3.4 Device and usage data. Device model, iOS version, App version, language, time zone, an app-generated identifier, features used, processing success or failure, and session timing.

3.5 Diagnostics. Crash reports and performance logs.

3.6 Support communications. Your email address and anything you send us when you contact support.

We do not collect your name, phone number, contacts, precise location, or health data. We do not access your camera unless you choose to take a photo inside the App.

4. How AI processing of your photos works

4.1 Features. Each feature uses your photo only for the task you choose:

• Repair Damage — removes scratches, stains, dust, tears, cracks, mold, creases and scan lines.
• Unblur — restores sharpness and fine detail, reduces noise, motion blur and low resolution.
• Fix Fading — corrects faded color, color casts, white balance, exposure, contrast and tonal range.
• Colorize — adds realistic color to black-and-white photos.
• Animate — generates a short video with motion from a still photo.
• Full Restore — Repair Damage, Unblur and Fix Fading combined.
• Restore & Colorize — full restoration of a black-and-white photo, then colorization.
• The Full Revival — Restore & Colorize, then Animate.

4.2 Third-party AI providers. Our AI features run on the cloud infrastructure of third-party AI processing providers, which may use different AI models depending on the feature. Before your first photo is sent, the App asks for your explicit permission and tells you who will process it. Our current AI providers are listed in Section 7. You can withdraw this permission at any time in the App under [Settings → Privacy → AI Processing]. Without it, AI features that require cloud processing will not work, but you can still browse the App.

4.3 No model training. We do not use your photos or outputs to train, fine-tune or improve any AI model. The AI model developers we currently use offer their models through paid API services whose terms do not allow them to use customer content for model training. Our AI platform provider processes content under its own terms, available at https://kie.ai/terms-of-use.

4.4 No biometric identification. Features such as Unblur, Colorize and Animate may enhance or move faces in your photo. This happens at the image level only. We do not extract facial geometry, create face templates or biometric identifiers, compare faces across photos, or determine who a person is.

4.5 Human access. Our staff do not view your photos, except where you send a photo to support and ask us to look at it, or where we must investigate a report of illegal content or respond to a lawful request.

4.6 AI-generated content labels. Outputs are created or modified by AI. We may add visible labels or machine-readable metadata (for example C2PA or IPTC fields) to outputs, especially Colorize and Animate results, to meet transparency laws such as Article 50 of the EU AI Act.

5. Why we use your data and our legal bases

If you are in the EEA, the UK or Switzerland, we rely on the following legal bases under the GDPR and UK GDPR.

• Processing your photo with the feature you choose, including through our AI providers (User Content, outputs) — performance of our contract with you (Art. 6(1)(b)).
• Unlocking and managing purchases and subscriptions (purchase data) — performance of contract (Art. 6(1)(b)).
• Keeping the App secure, preventing fraud and abuse (device, usage, purchase data) — legitimate interests (Art. 6(1)(f)).
• Fixing bugs and measuring App performance (diagnostics, usage data) — legitimate interests (Art. 6(1)(f)).
• Responding to support requests (support communications) — performance of contract or legitimate interests.
• Investigating illegal content and complying with law (relevant data) — legal obligation (Art. 6(1)(c)).

Separately from these legal bases, and as required by App Store rules, we ask your permission before your photos are first sent to a third-party AI provider (see Section 4.2).

Where we rely on legitimate interests, we have balanced them against your rights. You can object at any time (see Section 10).

6. Tracking and advertising

The App does not show third-party ads and does not track you across apps and websites owned by other companies. We do not access your device advertising identifier (IDFA). If this changes, we will ask for your permission through Apple's App Tracking Transparency prompt first and update this Policy.

7. Who we share data with

We share data only with the service providers below, which process it to provide the App to you, under our agreements with them or their applicable service terms.

• Kie.ai (NEXUSAI SERVICES LLC and INNOLEAP AI LLC, Denver, Colorado, USA) — AI platform that routes processing of your photos to the AI models below; User Content and outputs. Uploaded files are deleted within 3 days, generated files within 14 days, request logs within 2 months.
• Google LLC (USA) — Gemini image models, used for Repair Damage, Unblur, Fix Fading, Colorize, Full Restore and Restore & Colorize; User Content and outputs. Content sent through paid API services is not used for model training; abuse-monitoring logs are kept for up to 55 days.
• BytePlus (ByteDance) (Singapore, Malaysia) — Seedance video models, used for Animate and The Full Revival; User Content and outputs. Customer content is not used for model training without authorization.
• [CLOUD HOST, e.g. Google Cloud / AWS] — hosting and temporary storage; User Content, outputs and logs; located in [REGION].
• [ANALYTICS, e.g. Firebase / Amplitude] — product analytics; usage and device data; located in [USA].
• [CRASH REPORTING, e.g. Firebase Crashlytics / Sentry] — diagnostics; crash and performance data; located in [USA].
• [SUBSCRIPTIONS, e.g. RevenueCat / Adapty] — purchase validation; purchase data and app user ID; located in [USA].
• Apple Inc. — app distribution and payments; purchase data; global.

We will update this Policy before a new AI provider starts processing your photos.

We may also disclose data (a) if required by law, court order or a valid government request; (b) to report child sexual abuse material to the relevant authorities, such as NCMEC; (c) to protect the rights, safety or property of Reviv, our users or others; or (d) to a buyer or successor in a merger, acquisition or sale of assets, subject to this Policy.

We do not sell your personal data, and we do not share it for cross-context behavioral advertising.

8. How long we keep data

• Uploaded photos on our servers: deleted automatically within 48 hours after processing.
• Outputs on our servers: deleted automatically within 48 hours; your saved copy stays on your device.
• Copies held by our AI providers: photos you upload are deleted within 3 days and generated outputs within 14 days; technical request logs are kept for up to 2 months. AI model developers may keep limited logs for abuse monitoring for up to 55 days.
• Failed or cancelled uploads: deleted within 48 hours.
• Purchase data: kept for the life of the subscription and up to [7] years where tax or accounting law requires.
• Usage and diagnostics data: up to [14] months, then deleted or aggregated.
• Support communications: up to [2] years after the ticket is closed.
• Content reported as illegal: as long as needed to investigate or as required by law.

Outputs you save to your device or share elsewhere are under your control and are not affected by our deletion.

9. International transfers

We and our providers may process data outside your country, including in the United States and, depending on the AI model used, in Asia (for example Singapore or Malaysia). For transfers from the EEA, UK or Switzerland to countries without an adequacy decision, we rely on appropriate safeguards where they are available, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum or the EU-U.S. Data Privacy Framework. Where they are not available, we transfer data only as necessary to provide the service you request (GDPR Art. 49(1)(b)). You can request a copy of the relevant safeguards at support@reviv.pro.

10. Your rights

Everyone. You can at any time withdraw your AI processing permission in the App, delete photos from your device, and contact us to access or delete data linked to your app user ID.

EEA, UK and Switzerland. You have the right to access, rectify, erase, restrict and port your data; to object to processing based on legitimate interests; and to withdraw consent without affecting earlier processing. You may complain to your local data protection authority.

United States. Depending on your state (including California, Colorado, Connecticut, Virginia, Texas, Oregon and others), you may have the right to know what we collect, access, correct and delete it, obtain a portable copy, and opt out of sale, sharing, targeted advertising and profiling. We do not sell or share data or engage in targeted advertising, so there is nothing to opt out of today. We will not discriminate against you for exercising your rights. You may appeal a denied request by replying to our decision.

California notice at collection. We collect the following categories of personal information: identifiers (app user ID); commercial information (purchase records); internet or other electronic network activity (usage data); and visual information (photos you submit). We collect them for the purposes in Section 5, keep them for the periods in Section 8, and disclose them only to service providers for business purposes. We do not sell or share personal information, and we do not collect sensitive personal information as defined by the CCPA.

How to exercise rights. Email support@reviv.pro with your app user ID from [Settings → Support]. We may need to verify your request and will reply within one month (GDPR) or 45 days (US state laws), which may be extended where the law permits. An authorized agent may act for you with written permission.

11. Children

The App is not directed at children under 13, and we do not knowingly collect their data. Users under the age of digital consent in their country (up to 16 in the EEA and 13 in the UK) may use the App only with the agreement of a parent or guardian. If we learn that a child's data was collected without proper authorization, we will delete it. Parents may contact us at support@reviv.pro.

Old family photos often show children. You may process them, but only if you have the right to do so (see our Terms of Use).

12. Security

We encrypt data in transit with TLS and at rest on our servers, restrict access to staff who need it, and use providers that apply their own security measures, such as encryption in transit. No system is fully secure. If a breach affects your data, we will notify you and regulators as the law requires.

13. Changes to this Policy

We may update this Policy. We will change the "Last updated" date and, for material changes, notify you in the App before they apply. If a change requires your consent, such as a new purpose for your photos, we will ask for it.

14. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

Company: Core App Labs

Address: Room 5003, 5/F, Yau Lee Centre, 45 Hoi Yuen Road, Kwun Tong, Kowloon, Hong Kong

Email: support@reviv.pro