Legal
Privacy Policy
The short version. You choose the photos. We use them only to make your portraits. Uploads are deleted after 30 days, and portraits stay until you delete them. We never use your photos to train AI models, never sell your data and never show you ads. You don’t need an account, and you can delete everything from the app in one step.
1. Who we are
Reunily (the iOS and Android app “Reunily: Add Person to Photo” and the website at reunily-web.devturhan.workers.dev) is made by Teddy App Labs, LLC (“we”, “us”). We decide how your data is used and are responsible for it. You can reach us at turhan@teddyapplabs.com.
This policy covers the app and this website. It does not cover Apple’s App Store, Google Play or other services you reach through links, which have their own policies.
2. What we collect and why
Photos you choose
When you create a portrait, you choose a main photo and one to four photos of your loved one (or a pet). The app shrinks them on your device and removes location and camera metadata before uploading them. We use them only to create your portrait, to let you retry or create another portrait with the same photos, and to investigate a problem if you contact us. The app uses the system photo picker, so it sees only the photos you pick, not your library.
Portraits we create for you
We store the finished portraits so the app can show and download them on your devices.
What you type
A name for your loved one (for example “Grandpa Robert”), the “In memory” switch, and notes you add when asking for a retry. Names organize your Memories in the app; they are not sent to the image models. Retry notes may be used to improve the retry.
An app identifier
The app creates a random ID the first time it opens and keeps it on your device. It lets our servers keep your portraits and balance apart from everyone else’s. We don’t ask for your name, e-mail address or phone number to use Reunily.
Sign in with Apple (optional)
If you choose to sign in, Apple gives us a stable user identifier and, if you allow it, your name and an e-mail address, which can be a private relay address. We use this only to keep your unused credits available when you sign in on another device; Memories stay on the device where you made them.
Sign in with Google on Android (optional)
If you choose Google sign-in, Google gives the app an identity token. Our server verifies it and stores your stable Google user identifier to recover your unused credit balance on another Android device. We do not store your Google password or request access to Gmail, Drive, contacts or calendars. Your local Memories remain on your device.
Purchases
Payments are handled by Apple on iOS and Google Play on Android. We never see your card or payment details. Your app store and RevenueCat tell us what you bought, when, and whether your monthly plan is active, so we can add credits to your balance. We keep a history of credits bought, used and refunded, which you can see in the app.
Support messages
If you contact us, we receive your message, the e-mail address you give us, your app identifier and the IDs of your recent portraits, so we can see what happened.
Notifications
If you allow notifications, we store a push token so we can tell you when a portrait is ready.
Product analytics
The app sends usage events, such as “portrait created” or “store opened”, along with the app version, device model, operating system version and approximate country, linked to your app identifier. We use them to understand what works and what breaks. There is no session recording and no screen capture, and events never contain photos or the names you type.
Crash reports
If the app crashes, it sends a technical report: what went wrong in the code, the device model, operating system version and app version. Crash reports contain no photos and no personal details you entered.
What we don’t do
- We don’t show ads, and we don’t track you across other companies’ apps or websites.
- We don’t sell your personal information or share it for advertising.
- We don’t use face recognition to identify anyone, and we don’t build profiles of the people in your photos.
3. Your photos and AI
To make a portrait, your photos are processed by AI models run by the companies listed in section 4. Before your first upload, the app asks for your permission and names these companies. Nothing is uploaded until you agree.
- No training. We don’t use your photos or portraits to train or improve AI models. Our providers process them only to return your result, under their terms for business API customers.
- Temporary copies. Temporary copies sent to our image-generation provider are deleted within 1 hour. This includes the provider’s copies of your finished portraits, once we have saved them to our own storage.
- Safety checks. The models apply their own safety filters, and we may check requests against our content rules. If a request is refused, no credit is charged.
- Results are AI-generated. A portrait is a new image, not a photograph of a real moment.
4. Companies that process your data
We use these service providers. Each receives only what it needs to do its job for us.
| Company | What it does for us | What it receives |
|---|---|---|
| Cloudflare, Inc. | Hosts our servers, database and file storage, and this website | Uploaded photos, portraits, app identifier, portrait and purchase history, IP address (for security and rate limiting) |
| Features & Labels, Inc. (fal.ai) | Runs image generation | Temporary copies of your photos and the editing instructions; returns the portrait. Temporary copies are deleted within 1 hour |
| Google, through fal.ai and OpenRouter | Provides the Gemini image models that create most portraits, and a Gemini model that analyzes your photo | Your photos and the editing instructions |
| OpenAI, through fal.ai | Provides the GPT Image models used for painted looks, Heavenly Light, and as a fallback | The portrait being styled, or your photos when used as a fallback |
| OpenRouter, Inc. | Sends your photos to a Google Gemini model that describes the scene: who is in it, where there is room, and the light. Also a backup route to the Gemini image model | Your photos and the instructions |
| RevenueCat, Inc. | Manages purchases, the monthly plan and your credit balance | App identifier, purchase records from Apple or Google Play |
| Google LLC (Android services) | Google Play payments and subscriptions, Google sign-in, Firebase Cloud Messaging notifications | Purchase information, Google sign-in identity and device push tokens, under Google’s privacy policy |
| Apple Inc. | Payments, subscriptions and refunds; Sign in with Apple; delivering notifications | What Apple needs for these services, under Apple’s own privacy policy |
| PostHog, Inc. | Product analytics (no session recording) | Usage events, app and device details, app identifier |
| Functional Software, Inc. (Sentry) | Crash reports | Technical crash data, app and device details |
| 650 Industries, Inc. (Expo) | Push notification service | Push token and the notification text, such as “Your portrait is ready” |
We may also disclose information if the law requires it, to protect people’s safety, or as part of a sale or reorganization of our business, in which case this policy continues to apply to your data.
5. How long we keep it
| Data | Kept for |
|---|---|
| Uploaded photos | 30 days after upload, or earlier if you delete the portrait or all your data |
| Portraits | Until you delete them or all your data |
| Temporary copies at our image-generation provider (your photos and results) | Deleted within 1 hour |
| App identifier, Apple or Google sign-in link, portrait and credit history | Until you delete all your data |
| Purchase and transaction records | As long as tax and accounting law requires |
| Support conversations | Up to 2 years after the conversation ends |
| Product analytics | Up to 12 months |
| Crash reports | Up to 90 days |
| Push token | Until you turn off notifications, delete your data, or the token expires |
| Database backups | Deleted data can remain in encrypted backups for up to 30 days |
6. Your choices and rights
- Delete. Delete one portrait in Memories, or everything with Settings › Delete All My Data. You can also ask by e-mail. See Delete my data.
- Access and copy. Your portraits are in the app, and you can save them at any time. For a copy of other data, e-mail us.
- Correct information that is wrong, object to or restrict processing, and withdraw consent at any time (for example, turn off notifications in iOS Settings). Withdrawing consent doesn’t affect processing that already happened.
- EEA and UK: you have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR and UK GDPR, and you can complain to your local data protection authority.
- California and other US states: you can ask what personal information we collect, use and disclose, and ask us to delete or correct it. We don’t sell or share personal information for cross-context behavioral advertising, and we don’t use sensitive personal information to infer characteristics about you. We will not treat you differently for using these rights.
To use any of these rights, write to turhan@teddyapplabs.com. We reply within one month, and we may ask you to confirm the request comes from you.
7. Legal bases (EEA and UK)
- Contract: creating portraits, storing them, handling purchases and support.
- Consent: sending your photos to the AI providers named in the app before your first upload, and notifications. You can withdraw consent at any time.
- Legitimate interests: keeping the service secure and preventing abuse, crash reports and product analytics to fix and improve the app. We keep these minimal and don’t use them for advertising.
- Legal obligation: keeping transaction records for tax and accounting.
8. International transfers
We are based in the United States, and our providers process data in the United States and other countries. When personal data from the EEA, UK or Switzerland is transferred, we rely on the EU–US Data Privacy Framework where the provider takes part in it, or on the European Commission’s Standard Contractual Clauses and the UK addendum.
9. Photos of other people and children
Family photos show other people, often including children. Please only upload photos you have the right to use, and think about whether the people in them would be comfortable. We use the people in your photos only to create your portrait. We don’t identify them, and we don’t use their images for anything else.
Reunily is not directed to children under 13, and we don’t knowingly collect personal information from them. If you think a child has used Reunily, contact us and we will delete the data.
10. Security
Data is encrypted in transit (HTTPS) and at rest. Temporary copies sent to our image-generation provider are deleted within 1 hour. Access to production systems is limited to the people who run Reunily. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
11. This website
This website does not use cookies, analytics or advertising scripts. Our hosting provider, Cloudflare, processes your IP address and basic request data to deliver the pages and protect the site from abuse. If you e-mail us from the site, see “Support messages” above.
12. Changes and contact
If we change this policy, we will update the date at the top. For important changes, we will also tell you in the app before they take effect.
Questions or requests: turhan@teddyapplabs.com.