Privacy Policy
Last updated: 27 July 2026
This policy explains what personal data the Renvyn app and website collect, why, and your rights over it.
1. Who we are
Renvyn is a product of Pwn & Pixel, the trading name of Ali Elasfoury, a sole trader registered in Belgium (enterprise/VAT no. BE 1030.378.045), Chemin des Bouleaux 171, 5377 Somme-Leuze, Belgium. For any privacy question, contact contact@renvyn.app.
2. What Renvyn does
Renvyn is an AI photo editor. You choose a photo, we process it with AI to produce an edited image (for example, Enhance, Restore, Colorize, Cartoon, Headshot), and return the result to you.
3. What we collect, why, and how long we keep it
| Data | Why (legal basis) | Retention |
|---|---|---|
| Photos you upload | To perform the edit you request (contract) | Deleted within 24 hours |
| Edited images | To deliver and let you access your result (contract) | 30 days, then deleted |
| Account info (id, and email/name from Apple or Google sign-in) | To create and secure your account (contract) | Until you delete your account |
| Device identifier (a salted, hashed id - never the raw id) | To prevent abuse and protect the service (legitimate interest) | While the device is active |
| Subscription status (via RevenueCat and the app stores) | To manage your subscription (contract) | Duration of the subscription |
| Usage analytics (pseudonymous, no name/email/photo content) | To understand and improve Renvyn (consent - only if you accept Analytics cookies) | Per our analytics providers |
| Advertising measurement (which ad brought you here) | To measure and improve our Google ads (consent - only if you accept Advertising cookies) | Per Google's retention settings |
| Crash diagnostics | To keep the app stable and secure (legitimate interest) | Per our diagnostics provider |
We never receive your payment card details - payments are handled by Apple and Google.
4. AI processing of your photos
To edit your photo, we send it to Google Cloud (Vertex AI and Cloud Storage) for processing. No human at Renvyn reviews your photos as part of normal processing. Your original upload is deleted within 24 hours and the edited result within 30 days. We do not use your photos to train AI models, and we do not sell your photos or personal data.
Edited images are AI-generated. Every result carries an industry-standard Content Credentials (C2PA) marker identifying it as AI-generated. See How Renvyn uses AI.
5. Face data
All of Renvyn's editing tools run on the photos you upload, and those photos may contain a person's face. Whichever tool you use, the image - including any face visible in it - is uploaded and processed only to produce the edit you requested. Renvyn does not use Face ID or the device's TrueDepth camera, does not scan for or detect faces to identify you, and does not create, store, or share a faceprint, face template, or any other biometric identifier. Faces are treated as ordinary image content. The photo is processed by Google Cloud (Vertex AI and Cloud Storage), is never used to train AI models and is never sold, and is deleted on the same schedule as all uploads: the original within 24 hours and the edited result within 30 days.
6. Who we share data with
We share data with service providers that help us run Renvyn, under contract and only as needed: Google Cloud (AI processing and storage), Cloudflare (hosting and page-speed measurement - it serves every request to our website and our app's API, so it sees your IP address and browser type), RevenueCat (subscriptions), PostHog - EU region (analytics, only if you opt in), Google Analytics and Google Ads (analytics and advertising measurement - cookies only if you accept the matching category; separately from cookies, Google's measurement tag loads on every page and sends cookie-free requests containing your IP address, browser type and the address of the page you are on, including any ad-click tag in it. This happens before you choose, and it continues for every page you view and every action you take even if you refuse - what refusing stops is the cookies, and with them any identifier that could single you out or follow you between visits), Sentry (crash diagnostics), and Apple & Google (sign-in, app distribution, and payments). We do not sell your data or use it to track you across other companies' apps for advertising.
Aside from these providers, our website also loads brand fonts from Fontshare (Indian Type Foundry, India). Requesting a font sends your IP address and browser type to Fontshare, and Fontshare sets a cookie of its own holding a random guest id. This happens on every page as the page renders, before you make a cookie choice.
7. Cookies and your choices
On the Renvyn website we use three groups of cookies. Necessary cookies keep you signed in, keep the service secure, and remember your cookie choice - these are always on. Analytics cookies (Google Analytics, PostHog) tell us how the site is used. Advertising cookies (Google) let us measure which ads bring people to Renvyn.
Analytics and Advertising cookies are off until you turn them on. You can change or withdraw your choice at any time using the Cookie settings link in the footer of every page. Withdrawing also deletes the analytics and advertising cookies already set.
Your choice is stored in your browser. If you are signed in, we also record it against your account: what you chose, when you first chose it, when you last changed it, and which version of the cookie banner you were shown. We keep this as our record that consent was given, as the GDPR requires, and it is included in the copy of your data you can export. It is deleted when you delete your account.
Beyond these three groups, the font provider on our website (Fontshare, see section 6) sets a cookie of its own. It is not controlled by this banner and you cannot currently refuse it. It expires when you close your browser, so it does not follow you between visits.
Separately, we measure page speed with Cloudflare Web Analytics. It sets no cookies, stores nothing in your browser, and does not fingerprint you, so it needs no consent.
8. International transfers
We use EU residency where we can (for example, analytics are processed in the EU). Where a provider processes data outside the European Economic Area, that transfer is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses.
9. Your rights
Under the GDPR you can access, correct, delete, restrict, object to, or receive a portable copy of your data, and withdraw consent at any time. You can delete your account in the app (Settings) or contact contact@renvyn.app. You may also complain to the Belgian Data Protection Authority (dataprotectionauthority.be).
10. Children
Renvyn is intended for users aged 16 and over. We rely on app-store age ratings and your acceptance of our Terms to confirm eligibility; we do not collect or store your date of birth. Because we do not verify age, we apply the same privacy-protective settings to all users. Renvyn is not directed to children.
11. Security
We protect your data with encryption in transit and at rest, hashed (not raw) device identifiers, keyless service authentication, and access controls.
12. Changes
We may update this policy. We will change the "Last updated" date above and, for material changes, notify you in the app.
13. Contact
Renvyn Team - contact@renvyn.app