This Privacy Policy explains how the Enhavo mobile app and its related services (together, the "Application") handle your information. The Application is operated by Dale Wilson (the "Service Provider", "we", "us").
Enhavo is a photo app. You can retouch portraits, repair old or blurry photos (unblur, restore, colorize), and edit photos with a text prompt. We built it to need as little of your data as possible.
The short version
- We do not store your photos. Each photo is processed on the fly and the result is sent straight back to your device. Neither your photo nor the result is kept on our servers.
- No third-party AI or cloud. Your photos and prompts are processed only on our own AI models, running on hardware we own and operate. We never send image data to OpenAI, Google, or any other third-party AI, cloud or hosting provider.
- No server logs. We do not persist logs of your requests.
- We do not store faces or biometric data. Portrait retouching works on the pixels of the photo you send. We do not recognize or identify people, and we do not create, store, or share face templates or other biometric identifiers.
- Your photos are not used to train AI models.
- No accounts, no ads, no tracking. The Application contains no advertising, analytics, or tracking SDKs, and we do not sell or share your personal information.
- Your history stays on your device. Recent results are saved only on your iPhone or iPad, and you can delete them at any time.
1. Photos you process
Choosing a photo
You pick photos with Apple's system photo picker. The Application only receives the photos you select. It does not ask for and does not have access to the rest of your photo library.
Before a photo leaves your device, the Application downscales it (to at most 1080 × 1920 pixels) and re-encodes it as a new JPEG. This step strips the photo's embedded metadata, such as location (GPS), camera details and capture time, so none of it is sent to us.
Processing on our servers
To produce a result, the Application sends the photo, and any settings you chose (such as retouch strength, or the restore, unblur and colorize options), over an encrypted HTTPS connection to our own servers at api.enhavo.app. For prompt-based edits, it also sends the text prompt you typed and any reference photos you added.
- Photos are processed in memory, on the fly, only to create the result you asked for.
- The processed result is sent straight back to the Application. We do not store originals or results, and we do not build a gallery or profile from them.
- Processing runs on our own AI models, on hardware we own and operate. No third-party cloud, VPS or AI provider is involved, and your photos and prompts never leave our infrastructure.
- We do not look at your photos, and we do not use them or your prompts to train or improve AI models.
- We do not use photos to identify you or anyone in them. No face recognition is performed, and no facial geometry, face embeddings or other biometric data are created or stored.
Content safety
To prevent misuse, prompts are checked on your device against a list of blocked terms before they are sent, and our servers apply their own automated content filter to prompts and images. If a request is refused, the Application shows a message and nothing is saved. This check is fully automated and does not involve anyone viewing your content.
Saving and sharing results
If you choose to save a result to your photo library, iOS asks for "add only" permission. This lets the Application add new photos but not read your library. If you share a result, it goes through the standard iOS share sheet to the destination you choose, and that destination's own privacy policy applies.
2. Information stored on your device
- Recent results. Your last 20 results, and the originals you started from, are saved only in the Application's private storage on your device, so you can reopen them from the Home screen. They are never uploaded to us for storage. You can delete any of them in the Application, and deleting the Application removes them all.
- App preferences. A few simple settings are kept on your device, such as whether you have already answered the "How did it turn out?" feedback prompt.
3. Technical information
As with any internet service, when the Application connects to our servers, our servers receive basic technical information needed to deliver the response and keep the service secure. This includes your device's IP address, the Application's version number, and a random one-time request identifier used to verify that the request came from the genuine Application.
We use this information only to run and secure the service (for example, to block abuse or tell you when an app update is required). It is used only while your request is being handled and is not written to logs or stored afterwards. We do not use it to build a profile about you.
The Application has no user accounts and does not collect your name, email address, phone number, contacts, location, or advertising identifier.
4. Feedback and support
If you choose to send feedback from within the Application, it opens your own email app with a pre-filled message to info@enhavo.app. The message includes the topics you selected, anything you typed, and the Application and iOS version numbers. Nothing is sent unless you send the email yourself. We use your email address and message only to reply to you and improve the Application, and we keep them only as long as needed for that.
If you use the contact form on our support page at enhavo.app/support, the form does not send anything to us by itself. It opens your own email app with a pre-filled message to info@enhavo.app, containing what you typed: your email address, the topic, your message, and, if you filled them in, your name, device and app version. Nothing is sent unless you send the email yourself, and we handle it like any other support email.
If you choose to rate the Application, you are taken to the App Store, where Apple's privacy policy applies.
5. Third parties and sharing
We do not sell, rent or share your personal information, and we do not share your photos with anyone. The Application contains no third-party advertising, analytics, attribution or tracking SDKs, and it does not track you across other companies' apps or websites.
Our servers and AI models run on hardware we own and operate. No third-party hosting, VPS, cloud or AI provider processes or receives your photos or prompts.
Our website. This website (enhavo.app) is a static site hosted by GitHub Pages, a service of GitHub, Inc. When you visit it, GitHub receives your IP address and basic request information, such as your browser type, as part of delivering the page and keeping its service secure. GitHub handles this under the GitHub General Privacy Statement. We do not receive or use this information. The website does not process your photos; only the Application does, on our own servers as described above.
We may disclose information only if required by law, such as to comply with a valid legal process, or when necessary to protect the rights, property or safety of our users, the public or the Service Provider. Because we do not keep your photos, we have none to disclose.
6. Cookies and tracking
The Application does not use cookies, advertising identifiers, tracking pixels, or similar technologies.
Our website does not set cookies and contains no analytics, advertising or tracking scripts. It loads no third-party fonts or scripts.
7. Legal bases (EEA, UK and Switzerland)
Where the GDPR or similar laws apply, we process your information on these bases:
| Purpose | Legal basis |
|---|---|
| Processing the photos and prompts you submit to produce your result | Performance of the service you requested (contract) |
| Technical information to run, secure and prevent abuse of the service | Our legitimate interest in providing a safe, working service |
| Answering feedback and support emails you send us | Our legitimate interest in replying to you, or your consent |
| Complying with legal obligations | Legal obligation |
8. Data retention
| Data | How long we keep it |
|---|---|
| Photos and prompts you submit | Not stored. Processed on the fly and discarded once processing is done. |
| Processed results | Not stored on our servers. Sent straight back to your device. |
| Faces or biometric data | Never created or stored |
| Recent results on your device | Up to your last 20 results, until you delete them or the Application |
| Technical information (IP address, app version) | Not stored. Used only while handling the request; no logs are kept. |
| Feedback and support emails | As long as needed to handle your request |
9. International processing
Our servers may be located in a country other than the one you live in, so your photo may be processed outside your country, including outside the European Economic Area, for the moment it takes to produce your result. Nothing is stored there afterwards. Where the law requires it, we apply appropriate safeguards to such transfers.
10. Security
All communication between the Application and our servers is encrypted with HTTPS, and requests are signed so that our servers accept only requests from the genuine Application. Not storing your photos is our strongest safeguard: what we do not keep cannot be leaked. No method of transmission is perfectly secure, but we take reasonable technical and organizational measures to protect your information. If a data breach affects your personal data, we will notify you and the relevant authorities as required by applicable law.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict its processing, to withdraw consent, and to complain to your local data protection authority. Because we do not store your photos and do not have user accounts, we usually hold no personal data that can be linked to you. The main exception is any email you have sent us.
To exercise any of these rights, contact us at info@enhavo.app. You can delete everything the Application keeps on your device by removing your recent results in the Application or by deleting the Application.
California residents (CCPA/CPRA)
We do not sell or share personal information, as those terms are defined under California law, and we do not use or disclose sensitive personal information for purposes that would require a right to limit. You have the right to know what personal information we collect, to request its deletion or correction, and not to be discriminated against for exercising your rights. To make a request, email info@enhavo.app.
12. Children
The Application is not directed to children under 13 (or a higher age where required by local law), and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, for example by email, contact us at info@enhavo.app and we will delete it.
13. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will post the updated version with a new effective date. If the changes are material, we will give notice in the Application or on this page, and ask for your consent where the law requires it. Earlier versions are available on request.
14. Contact
If you have questions about this Privacy Policy or how the Application handles your data, email us at info@enhavo.app.