Privacy Policy

Effective September 22, 2026

This policy explains what 4K Photo Studio (“we”, “us”) collects when you use 4kphoto.app, why, and who else handles it. The short version: we use your photos to restore them, we don't sell your data, and we don't use your photos to train AI models.

What we collect

• Photos you upload and the restored results. Your photo is sent to our server, then to our AI processing provider to produce the restoration. We keep a record of each restoration job, including links to the original and restored images, so the app can show you the result. Both the original and the restored photo are automatically deleted from our AI provider's storage within 30 days of upload.
• Your email address, if you sign in. Sign-in uses one-time email links; we don't use passwords.
• Browser identifiers. The app stores a random device ID and a guest token in your browser so your free credits and results stay with you before you sign in.
• A keyed hash of your IP address, used to limit abuse (for example, to stop the same network claiming unlimited free credits). We don't store your raw IP address in our database, though our hosting providers may log IP addresses as part of normal operation.
• Purchase records. When you buy credits, Stripe processes the payment. We receive the order details (pack, amount, status), not your full card number.
• Usage analytics. We use Google Analytics and Vercel Web Analytics to understand which pages people visit and where they drop off. These collect information such as pages viewed, browser and device type, approximate location and in-app events like “photo uploaded”. Google Analytics uses cookies.
• Messages you send us through the Contact Us form: your email address and message.

How we use it

• To restore and colorize your photos and show you the results.
• To keep track of your credits and purchases.
• To prevent fraud and abuse of free credits.
• To answer your messages and handle refunds.
• To improve the product using aggregated analytics.

We don't sell your personal information, we don't use your photos to train AI models, and we don't use your photos in our marketing without your permission.

Services that handle your data

We rely on these providers to run 4K Photo Studio. Each processes data only as needed for its part of the service, under its own terms and privacy policy.

• fal.ai: runs the AI restoration models and hosts the uploaded and restored image files. Some models it runs are provided by OpenAI, which receives the photo to process it.
• Supabase: our database and email sign-in.
• Fly.io: hosts our API server.
• Vercel: hosts this website and provides Vercel Web Analytics.
• Stripe: processes payments.
• Google Analytics: usage analytics.
• Resend: delivers Contact Us messages to us by email.

Image links

Uploaded and restored images are stored at long, random web addresses. Anyone who has the exact link can open the image, so only share result links with people you want to see them.

How long we keep data

We keep your account, credits, and restoration records while your account is active. Both your uploaded original and the restored result are automatically deleted from our AI provider's storage within 30 days of upload — whether or not you delete your account. Photos uploaded before September 22, 2026 may remain with our AI provider; contact us to request their removal.

If you delete your account (see Your choices, below), there's a 30-day grace period before anything happens — you can still restore and browse during it, and cancelling is one tap or a link in the confirmation email. Once the grace period ends: your sign-in, credits, and restoration records are deleted. Your purchase history is kept — Stripe requires this for accounting — but is no longer linked to your account or identity in any way.

This applies to accounts and photos from September 22, 2026 onward. Guest sessions (use without signing in) expire after 90 days, as before. Abuse-prevention records are deleted automatically once no longer needed.

Your choices

• Deletion: delete your account any time from the account menu in the app. There's a 30-day grace period, cancellable from the app or your confirmation email, before it's final. Restoration photos and your sign-in are deleted; purchase history is kept for accounting, with the link to you removed. For anything not covered by self-serve deletion, contact us (see below).
• Analytics: you can block Google Analytics with your browser's privacy settings, a content blocker, or Google's opt-out browser add-on.
• Browser storage: clearing your browser data removes the device ID and guest token. Credits held without an account are lost if you do this, so sign in first.

Children

4K Photo Studio isn't directed at children under 13, and we don't knowingly collect personal information from them.

Changes

If we change this policy, we'll update the date at the top. For significant changes we'll also post a notice in the app.

Contact

Use the Contact Us form at the bottom of the app, or message us on Facebook.