Privacy Policy · Phix
Last Updated: 2026/10/15
1. Introduction
Phix is an app provided by Tunahan Aktay (“we”, “us”, or “our”), who is committed to protecting your privacy. This Privacy Policy applies to Phix and its various versions and is part of our Terms of Use. This policy explains what data the app processes, why, and your choices. Before your first photo is sent for AI processing, the app asks for your permission and names the AI providers involved; if you decline, no photo is sent. Phix shows no ads and does not track you across other companies’ apps or websites.
None of the data collected by this app is linked to your identity: the app has no accounts and never asks for your name or email address. If you contact support, we receive only what you choose to send.
2. Who We Are
Phix is developed and operated by Tunahan Aktay, who is responsible for the processing described in this policy. Contact: tunahanaktay.apps@gmail.com.
3. Data We Collect
We collect the following categories of data, none of which is linked to your identity:
User Content
Photos or Videos: Used for App Functionality
You may upload or capture photos solely to repair, colorize, or sharpen old and damaged photos. Photos are sent to our AI providers for processing; their handling and retention are described in section 4. Your original photos and results are saved only on your device, in the app’s History, until you delete them there or delete the app. We do not store, extract, or analyze facial features for identification or profiling purposes.
Identifiers
Device ID: Used for App Functionality, and Analytics
A device identifier is collected to keep AI requests secure and to prevent abuse. Firebase and Mixpanel also assign a random identifier for analytics. These identifiers are random and not linked to your name, email address or account.
Location
Coarse Location: Used for Analytics
Firebase Analytics and Mixpanel estimate your approximate country and city from your IP address. We do not request or collect your precise location.
Purchases
Purchase History: Used for App Functionality, and Analytics
If you make in-app purchases, transaction data is processed by Apple and RevenueCat to manage your subscription. This data is used to provide access to premium features and to analyze purchasing trends in aggregate. RevenueCat also receives Apple’s install attribution token, which tells us whether the app was found through an Apple Search Ads campaign; Apple provides it without identifying you. RevenueCat also sends subscription events, such as renewals and cancellations, to Mixpanel under the same random identifier.
Usage Data
Product Interaction: Used for Analytics
We collect data about how you interact with the app (e.g., screens viewed, features used) through Firebase Analytics and Mixpanel. This helps us understand how the app is used and identify areas for improvement.
Diagnostics
Crash Data: Used for App Functionality
Crash reports are collected through Firebase Crashlytics to help us identify and fix issues that affect app stability.
Other Diagnostic Data: Used for App Functionality, and Analytics
Additional diagnostic information (e.g., error logs) may be collected to monitor app health and improve reliability.
Other Data
Other Data Types: Used for App Functionality, and Analytics
Your IP address is used to keep AI requests secure, to prevent abuse, and by AIProxy to measure usage limits.
4. Face Data Collection, Use, and Retention
This section describes in detail how Phix handles face data in compliance with Apple’s App Store Review Guidelines (5.1.1).
What face data does the app collect?
Phix does not collect, store, or share face data. The app sends the photo you select as a whole image to repair, colorize, or sharpen it; it does not extract separate facial measurements.
How is face data used?
Photos containing faces are used solely to repair damage, add color, or sharpen detail. The processing is entirely automated by AI models that apply visual transformations to the image. The app does not perform facial recognition, identity analysis, or any form of biometric identification. No face data is used for advertising, profiling, or any purpose beyond delivering the requested transformation.
Is face data shared with third parties?
Photos you choose to transform are sent through AIProxy, a secure relay that forwards the request without storing it, to one of two AI providers, depending on the option you pick. Fix & Colorize sends the photo to Replicate, LLC, which may use Black Forest Labs to generate the result; the app then downloads the result directly from Replicate. Sharpen sends the photo, together with the instructions for sharpening it, to OpenRouter, Inc., which routes the request to Google with zero data retention. No face data, biometric identifiers, or facial features are extracted or retained.
No other third party receives your photos.
How long is face data retained?
Face data is not retained by us or by any third party, because none is extracted. Sharpen requests to OpenRouter run with zero data retention: the photo is not stored or used to train models, and it is discarded once the result is returned. For Fix & Colorize, Replicate’s documentation says that the inputs, outputs and logs of requests made through its API are removed after one hour. We do not maintain any copies, backups, or derivatives of your photos on our servers. See Replicate’s Privacy Policy, Replicate’s data retention documentation, and AIProxy’s Privacy Policy. Contact us at tunahanaktay.apps@gmail.com for help with a data request.
Summary
| Question | Answer |
|---|---|
| Face data collected? | No. Photos processed as whole images; no face data extracted. |
| Face data stored? | No. Not retained by us or any third party. |
| Biometric analysis performed? | No. No facial recognition or identity analysis. |
| Face data shared? | Photos are relayed by AIProxy and processed by Replicate for Fix & Colorize, or by OpenRouter and Google for Sharpen. |
| Providers store face data? | No face data is extracted. Sharpen runs with zero data retention, and Replicate removes Fix & Colorize requests after one hour. |
| Face data used for profiling? | No. Used solely for visual transformation. |
5. How We Process Your Photos
- AI processing: Uploaded photos are sent through AIProxy to Replicate, LLC for Fix & Colorize, or to OpenRouter, Inc. and Google’s AI model for Sharpen, to repair, colorize, or sharpen them.
- Storage: The result is returned to your device and saved with the original in History. We do not store photos on our own servers. Provider retention is described in section 4.
- No biometric analysis: The app does not extract or analyze facial features for identification or profiling purposes. No biometric identifiers are created, inferred, or retained.
- No human review: All processing is handled by automated AI models. No person views your photos, unless you choose to send one to us when asking for support.
- Legal bases: We process photos with your consent, given in the app before your first transformation; analytics and crash data on our legitimate interest in keeping the app working and improving it; security data, such as your IP address, on our legitimate interest in preventing abuse; and purchase data to provide your subscription.
6. Third-Party Services
We use the following third-party services:
- Replicate, LLC: Creates the result for Fix & Colorize, which may involve Black Forest Labs, and returns it for the app to download. Removes inputs, outputs and logs after one hour.
- OpenRouter, Inc.: Routes photos and sharpening instructions to Google for Sharpen and returns results. Does not store, retain, or reuse uploaded images.
- Google: Runs the AI model that sharpens your photo. Requests are processed with zero data retention and are not used for training.
- RevenueCat: Subscription and purchase management. Collects device identifiers and purchase history to manage entitlements, and Apple’s install attribution token for Apple Search Ads.
- Firebase Analytics: Usage analytics. Collects device identifiers, product interaction data, and approximate location derived from your IP address.
- Mixpanel, Inc.: Product analytics. Collects app interactions, a random identifier, and approximate location derived from your IP address.
- Firebase Crashlytics: Crash reporting and diagnostics. Collects crash data and diagnostic information.
- Firebase Remote Config: Delivers app settings; receives a Firebase installation ID and IP address to do so.
- AIProxy: Secure AI service routing. Uses a random, stable device identifier and your IP address for security and to measure usage limits. It does not store the content of requests; it keeps the IP address, request metadata and error responses for 30 days.
- Apple In-App Purchases: Secure transaction handling.
These services process data only to the extent required for their core functions. None of the data collected is linked to your personal identity.
7. Data Retention
- Photos: Never stored on our own servers. Your original photos and results are saved only on your device, in the app’s History, until you delete them there or delete the app. AI providers handle the photos they receive as described in section 4.
- Face data: Not retained. No face data is extracted, stored, or retained at any point.
- Analytics and diagnostics: Analytics events and diagnostics are kept by Firebase, Mixpanel and Crashlytics under random identifiers for as long as their retention settings allow, and are then deleted.
- Purchase information: Managed by Apple and RevenueCat under their respective privacy and retention policies.
- No user data is linked to personal identity.
8. Data Security
All data transmission between your device, our services and third-party providers is encrypted. We never receive your photos, unless you send one to us for support; they go only to the AI providers named above, and stay on your device in History. We do not store or share biometric or facial data, and we never analyze it to identify you. We apply appropriate technical and organizational measures to protect your data. While no system can guarantee complete security, we continuously work to safeguard your information.
9. Children’s Privacy
Phix is not intended for children under 13, or under the minimum age of digital consent in your country if higher. We do not knowingly collect personal data from children. If you believe a child has shared personal data with us, contact us at tunahanaktay.apps@gmail.com and we will help delete it.
10. International Transfers
Our providers process data in the United States and other countries. Where EU or UK law requires it, these transfers rely on the providers’ data protection terms, such as the EU Standard Contractual Clauses.
11. Your Rights
Depending on where you live, including Turkey, the EU, the UK and California, you can ask to access, correct, delete or receive a portable copy of your personal data, object to or restrict its processing, withdraw consent at any time, and complain to your local data protection authority. Because we do not link analytics identifiers to your name or email address, we may be unable to find records that belong to you; email us and we will help as far as we can. You can delete all stored photos from History or by deleting the app. We do not sell your personal information.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted here with a revised “Last Updated” date. If a change is significant, we will announce it in the app or on this page before it takes effect, and ask for consent again where the law requires it.
13. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: tunahanaktay.apps@gmail.com