Privacy Policy

1. Who is responsible for your data

Really is published by Logan Victorien, an individual entrepreneur trading as LV STUDIO, SIREN 833936263, at 2 rue d’Angleterre, 93600 Aulnay-sous-Bois, France. Logan Victorien is the controller for personal data used to operate Really and this website.

For support or to exercise your privacy rights, contact support@tryreally.app or write to the address above. This policy covers local photo editing, optional AI creation, purchases and this website.

2. Photos and editing on your device

The photo library opens only when you choose to add a photo. Really’s filters, image adjustments, face landmarks and face reshaping run on your device. Using those local tools does not upload your photo or facial landmarks to our servers or to Google.

Facial geometry helps place an edit; Really does not use it to identify you. Your in-app gallery is stored locally. Photos you save to Apple Photos are controlled through your device. Uninstalling the app or clearing its data may remove your in-app gallery, so export photos you want to keep.

3. Optional AI processing

After you accept the AI processing notice and start a creation, your selected photo and effect instructions pass through our backend to Google Gemini to create the requested image. You can use local editing without AI. Declining consent makes AI creation unavailable.

We do not persist input photos or prompts in our account database. We use the paid Gemini service: under its terms, Google does not use submitted content to improve its general products. Google separately retains prompts, context and outputs for 55 days for abuse monitoring and required legal disclosures. Authorized personnel may review flagged content. This is separate from our one-hour output storage.

See the Gemini API terms, abuse monitoring policy and Google Privacy Policy. We do not sell photos or use them for advertising. Only submit images you are authorized to use, without highly sensitive information.

4. Temporary AI results

A generated result is stored privately on our server for one hour so an interrupted creation can be recovered without generating or charging for it again. Retrieval is restricted to the verified identity that created it. Results are not published in a public gallery.

Access expires one hour after the result is stored. Automated cleanup is scheduled every minute; physical deletion can be delayed by an outage. This limit applies to our temporary output storage, not to your local gallery, purchase records or Google’s separate processing.

5. Identifiers, purchases and service data

You do not need to create an email/password account. Firebase assigns an anonymous identity to protect your server-side data. We process this identifier, subscription status, credit balances, purchase references, consent version, generation status and timestamps to provide the service, prevent duplicate charges and recover interrupted requests.

Apple handles App Store payments. RevenueCat helps us verify purchases, subscriptions and refunds. We do not receive your full card number or bank details. If you contact support, we process your email address, message and the information you provide to resolve your request. Do not send passwords, full payment details or unnecessary private photos.

Technical providers may process IP addresses, device or app information, integrity attestations and request logs for security and operation.

We do not currently add advertising SDKs, marketing analytics or crash reporting to the app. This does not mean that operating systems, payment providers or infrastructure providers process no technical data.

6. Providers and international processing

Authorized access is limited to the publisher and providers needed for the service: Google Firebase and Google Cloud for authentication, database, security and private temporary storage; Google Gemini for AI; RevenueCat for purchase validation; Apple for iOS distribution, integrity and billing; OpenAI Sites and its infrastructure for this website; and Infomaniak for support email.

Our currently deployed API and private output storage are in Singapore (asia-southeast1). Provider services can process data in other countries, including the United States. Really does not promise EU-only storage. Applicable processing terms provide international transfer safeguards, including European Commission standard contractual clauses where required.

See the Firebase processing terms, Google processor terms and RevenueCat processing addendum. Contact support@tryreally.app for information about the safeguards relevant to your data. Independent provider processing is also explained in their privacy policies: Apple, RevenueCat and Firebase.

7. Purposes and legal bases

• Contract: providing requested local tools, your anonymous session, subscriptions, credits, recovery and support.
• Consent: sending your selected photo for optional AI processing after your agreement. Withdrawal stops future submissions, without undoing processing already completed.
• Legitimate interests: preventing abuse, purchase replay, duplicate grants and unauthorized access.
• Legal obligations: retaining or disclosing information where required by applicable law.

Service and purchase information is necessary to operate online and paid features; without it those features cannot work. AI submission and support correspondence are optional. We do not use data for advertising profiles or decisions with legal or similarly significant effects.

8. Retention and deleting your data

Local photos, edits and face geometry stay on your device until removed with the relevant app data. Input photos pass through AI processing without being persisted in our account database. Private server results have a one-hour recovery window followed by scheduled cleanup. Google has its separate retention described above.

Anonymous service and purchase records support the identity, subscription, non-expiring balance, recovery and refunds while those obligations remain relevant. Support correspondence is kept to resolve the request and any related dispute or legal obligation. You can ask for deletion of information that is no longer necessary.

Choose Delete my data in Settings to remove your local collection and settings and request cleanup of server images, the RevenueCat customer and the anonymous Firebase user. Cleanup may wait for an in-flight request or retry if a provider is unavailable.

Limited transaction fingerprints, hashed erasure identifiers and deletion status remain to reject purchase replay and late billing events. These contain no photos. The current backend does not automatically expire these minimal anti-replay records. They remain restricted to that security purpose; contact us for review, erasure or restriction where applicable. This retention limitation must be addressed before public app launch.

Deleting Really data does not remove exported photos or cancel an Apple subscription. Manage your subscription separately. Independent providers may retain records under their own legal obligations.

9. Your choices and privacy rights

You can change photo permissions in device settings, use local editing without AI, withdraw AI consent and delete your Really data. Under the GDPR, where applicable, you may request access, correction, erasure, restriction and portability and object to processing based on legitimate interests. Legal limits can apply, for example to a payment dispute.

Contact support@tryreally.app or write to the address above. Include your support identifier if available; we may request proportionate verification that you control the anonymous identity. We normally respond within one month and explain any lawful extension. You may complain directly to the CNIL or another competent data protection authority.

10. Website, age and updates

This website does not add advertising cookies, analytics trackers or a mailing-list form. Our hosting provider may process request logs and use necessary security or session technologies. The before/after controls run in your browser and do not upload images.

Really’s AI features are intended for adults aged 18 and over. Do not submit photos of children for AI processing. If you believe a child’s information has been submitted, contact support@tryreally.app or use the in-app deletion option.

We will update this policy when the service or its processing changes. The revision date appears at the top; material changes requiring new consent will be presented in the app.