Privacy policy

Attic · last updated 13 October 2026

Attic restores old printed photographs. There are no accounts, no advertising, and no third-party analytics or tracking SDKs in the app. We never ask for your name, email address or date of birth.

Your photos and AI processing

Restorations are stored on your device, inside the app, and are included in your phone’s own iCloud or computer backup, like other app data. Unless you turn it off in Settings, Attic also saves each restoration and video to your Photos app as it’s made, so you keep them even if you delete Attic. Our servers keep a copy only for the short time described below, or for as long as you let us feature it.
Attic asks your permission first. Before any photo is sent anywhere, the app shows you what will be sent, who it goes to and what happens to it, and sends nothing unless you agree. You can withdraw that permission at any time in Settings → Photo processing.
What is sent: only the photo you choose to restore, which includes any faces that appear in it. Nothing else from your phone.
Who it goes to: our server (hosted by Microsoft Azure in Sydney, Australia) passes the photo to Replicate, Inc. (United States), which runs the AI models that restore it. If you choose “Remove glare” on a photo, that photo is also processed by Google’s image model, reached through Replicate, for that one job only. If you choose “Bring to life”, that photo is sent through Replicate to Google’s Gemini, which describes what is in it so the video stays faithful to it, and to Kling, a video model made by Kuaishou (China), for that one job only.
What it is used for: restoring that photo and returning the result to you. Nothing else. We never use your photos to train AI models, never sell them, and never use them for advertising.
How long it is kept: while a photo is being restored it is held in private cloud storage (Cloudflare R2). The copy you uploaded is deleted as soon as the restoration finishes, whether it succeeded or failed. The restored result is kept in the same private storage for up to one day, so your device can download it, and is then deleted automatically. Replicate automatically deletes the photo, the result and its logs within one hour. If you choose “Remove glare” or “Bring to life”, Google’s own terms govern how long it keeps that photo, and for “Bring to life” Kuaishou’s do too. Gemini’s short description of the photo (for example “a man and three children in front of a birthday card”) goes only to Kling with the photo; we don’t keep it or log it, and it never names or identifies anyone. A “Bring to life” video takes a few minutes to make, so it is kept in the same private storage until Attic has downloaded it to your device — even if you left the app or closed it in the meantime — and deleted as soon as it has. A video that is never collected (for example, because the app was removed) is deleted after 30 days.
If you turn on “Save photos I take to my library”, the photo you photograph is also saved to your own Photos library on your device. That copy is yours; we cannot see it.

Faces in your photos

Old photographs are mostly pictures of people, so the photos you restore will usually contain faces. This is how Attic treats them.

We do not collect face data. Attic does not create face templates, faceprints or any other biometric identifier, does not recognise or identify who anyone is, and does not store anything about the faces in your photos.
How faces are processed: as part of restoring the photo, one of the AI models run by Replicate restores detail in faces. Our server also runs a face detector that finds where faces are in the picture, as rectangles, so it can tell when a face is too small to be restored faithfully and keep the original’s own pixels for it instead of an invented face.
Retention and sharing: those face positions exist only in memory while that one restoration runs and are then discarded. Our server’s logs record only how many faces it found, so we can check that safeguard works: never where a face is, what it looks like or who it is, and nothing about faces is shared or used for anything else. Faces leave our server only as part of the photo itself, sent to Replicate (and to Google if you choose Remove glare or Bring to life, and to Kuaishou for Bring to life) under the terms and retention described above.

Featured photos (only if you ask)

You may choose, per photo, to let us feature a restoration in our own marketing. This is off by default. If you agree:

The original and restored images are copied to a private storage bucket, along with a record of the exact wording you agreed to and when. They are kept until you withdraw.
You can withdraw at any time from that photo's screen in the app, or by emailing [email protected]. The images are deleted when you do, and deleting the photo from Attic withdraws consent too. Deleting the app does not, so withdraw first or email us.

What we do store

Data	Why
A device key from Apple's App Attest	Confirms requests come from a real copy of the app, so nobody can run our AI processing at our expense
Two DeviceCheck bits held by Apple	Records that this hardware has used its free restorations, so they can't be reclaimed by reinstalling
A random identifier stored on your device	Lets your credits and referral code survive reinstalling the app. It is not derived from anything about you or your device
Your credit balance and its history	So the restorations you have paid for are honoured
Restoration records: which model ran, whether it succeeded, image dimensions, estimated cost	Running the service and preventing abuse. These records do not include your photos
Apple transaction identifiers for purchases	Granting credits, honouring refunds, and answering support requests
Daily totals of how many times each step is reached on the way to restoring a photo or buying a pack: the Restore button tapped, the permission screen answered, the camera or your photo library chosen, a suggestion after a restoration used, a reminder opened, the screen offering packs shown, a pack tapped, and a purchase cancelled or failed (with the kind of error)	Finding where people get stuck, and knowing whether our prices work. These are counts for the whole app: nothing in them identifies you or your device

Who else is involved

Replicate, Inc. (United States) — runs the AI models that restore your photo. It deletes photos, results and logs from our requests within one hour, and states that it does not sell or share personal information. Replicate’s privacy policy.
Google — provides two of those models: one used only if you choose “Remove glare” on a photo, and Gemini, used only if you choose “Bring to life”, to describe the photo first. That photo is sent to it through Replicate for that one job, and only then.
Kuaishou (China) — makes Kling, the video model used only if you choose “Bring to life” on a photo. That photo is sent to it through Replicate for that one job, and only then.
Cloudflare — temporary storage during processing, storage of consented featured photos, and routing for our website and service.
Microsoft Azure — hosts our server and database, in Sydney, Australia.
Apple — handles all payments and device verification. We never see your payment details.

Children

Attic is not directed at children under 13 and we do not knowingly collect information from them.

Your choices

Delete any restoration in the app to remove it from your device, and to withdraw any featuring consent for it.
Deleting the app deletes the restorations inside it. The copies Attic saved to your Photos app stay there, and a backup of your phone made before you deleted it still includes them. Deleting the app does not remove featured photos (withdraw those first, or email us), or the identifier that lets your credits survive a reinstall.
If you ask Attic to remind you to restore more photos, the reminder is set on your phone only; nothing about it is sent to us. You can turn Attic’s notifications off at any time in the Settings app.
To ask what we hold about your device, or to have it deleted, email us. Please include your Apple transaction ID if you have made a purchase, as it is the only way we can identify your records.

Contact

[email protected]

← Attic