Privacy policy
Renovatio: Face Surgery & Aesthetics is operated by Creativ Digital Limited. This policy explains what happens to your account, photos and AI previews. Contact us at office@creativdigital.ro.
What we collect and why
- Account information: Google sign-in identifier, email, display name and profile picture; Firebase account identifier; age confirmation and processing-consent date and policy version. We use these to provide and protect your account.
- Photos and previews: photos you choose, chosen procedures, editing instructions, AI photo-check results (such as face visibility, apparent age and angle), generated photos, thumbnails and videos, gallery descriptions and generation status. We use these to check eligibility, generate previews and make your private gallery available across sessions.
- Magic Mirror Live (optional): the front camera image is processed on your phone only, to show the live effect. It is not sent to us or stored. If you choose “See the realistic result”, that single frame is used like any photo you choose for a preview. We record only that a paid session was started.
- My Journey (optional): the areas you would like to improve, your preferences (whether you are open to surgery, the recovery time you accept and how visible a change you want), up to three photos (from the front, in profile and smiling), the AI photo check, the procedures the AI chose and the resulting illustration. We use them only to create the personal report shown in your profile. You can delete the report, its answers and photos there at any time, and they are removed with your account.
- Payments: product and purchase identifiers, purchase tokens, an account identifier used to associate the purchase, credit balance and delivery history. Google Play processes payment; we do not receive your card number.
- Device and service information: notification tokens, language and notification preferences, generation usage/cost records, and operational or security logs. Firebase, Google Cloud and other service providers may process IP addresses, app/device information and request timestamps to deliver and secure their services.
- Support and reports: your email, messages, report reason and details, and links to relevant previews when you report AI content. We use these to respond, investigate and improve reliability and safety.
We process only the photos you choose; camera and photo-library access is used when you select that action. Saving or sharing an export happens at your request. App preferences may also be stored on your device. AI request logging remains enabled.
Usage statistics
We use Google Analytics for Firebase to understand how the app is used and to improve it, at two levels:
- Basic statistics (always on): the app sends usage events, such as which main screen was opened, that a preview, video, report or live session was started, refusal or error reasons, and purchases, without any device or user identifier. They cannot be linked to you or your phone. Google derives an approximate region (country or city) from the IP address to build its reports and does not keep the IP address in them.
- Detailed statistics (optional, off unless you turn them on): with your consent, given at sign-up or in Settings, an analytics ID stored on this phone lets us see usage over time (for example returning visits and which features lead to which), and events also include which procedures you preview or try live. Because procedure choices can reveal interests related to health or appearance, we ask for your explicit consent. You can turn detailed statistics off at any time in Settings; this also resets the analytics ID on your phone.
At both levels we never send your name, email, photos, journey answers or account ID to Analytics, and advertising features (advertising ID, ad personalisation and ad measurement) are off. Analytics data is kept for the retention period set in Google Analytics, at most 14 months, and is used only in aggregated reports.
Face photos, consent and age
The app is for adults aged 18 or over. Upload only your own photo or a photo of an adult who has authorised this processing. Do not upload children's photos. The automated age check can make mistakes; an unsuitable or apparently underage photo may be refused after it has already been processed and logged by the AI provider.
Face photos and procedure choices can reveal sensitive information about appearance or health interests. We use affirmative processing consent for the photo-based AI features and related request logging, including explicit consent where special-category data is involved. We do not create biometric templates to identify you. The app produces illustrative cosmetic previews, not diagnoses, medical advice or a prediction of treatment results.
We rely on providing the service you request for account and purchase administration, legitimate interests for proportionate security, fraud prevention and support and for identifier-free basic usage statistics, your consent for detailed usage statistics, and legal obligations where records must be kept. You may withdraw photo-processing consent by stopping use and contacting us or requesting deletion; this does not undo processing already carried out lawfully.
Who receives data
- Google Firebase / Google Cloud: authentication, database, media storage, server processing, push notifications, app integrity checks and usage statistics (Google Analytics for Firebase).
- Google Gemini / Google AI Studio: photo checking and image/video generation, including retained AI requests used to investigate errors and review service quality. Input images and procedure instructions are sent to these services.
- Google Play: purchasing and purchase verification.
- Email services, including Resend: delivering content-report emails to our support inbox; our mailbox provider processes incoming support/deletion messages.
Access is limited to operators who need it to run the service, support you or handle reports and deletion requests. We do not sell your data or use it for advertising. The app does not save requests into permanent AI Studio datasets or voluntarily share datasets with Google for model improvement. Google's own processing is governed by its service terms, including the Gemini API paid-services terms and Google Privacy Policy.
Retention and deletion
- Your app account and gallery: kept while your account/gallery exists. Deleting a gallery item queues removal of its stored photos and associated videos. Account deletion removes the Firebase sign-in account, profile, device tokens, gallery/media, My Journey report and photos, generation jobs and user-linked generation cost and report records. Temporary failures or a running generation can delay cleanup; the request stays pending and is retried.
- AI provider copies: AI Studio request logs have a configured retention window of up to 55 days, after which Google marks them for deletion. On account deletion, the service attempts to delete known video interactions and files through the provider API and queues known image/photo-check log identifiers for an operator to handle in AI Studio or through Google support. Contact us if you need provider erasure confirmation. Google's security/abuse-monitoring retention can be separate from this logging window and is subject to its terms. We cannot promise immediate deletion from every provider system.
- Cleanup identifiers: AI log reference records are kept for up to 55 days; provider erasure request references for up to 55 days after a request. A completed account-deletion status is kept for 30 days to prevent stale sessions from recreating a deleted profile.
- Purchases, security and support: limited purchase records are retained separately for reconciliation, fraud prevention, disputes and applicable legal/accounting obligations. Support messages and content-report emails may remain in the support mailbox where needed to resolve the matter or meet legal obligations. These are restricted and retained only as long as necessary for those purposes; request details from our privacy contact.
- Copies outside the service: downloads, shared copies and copies held by recipients are outside app storage. Delete those separately. Uninstalling the app does not delete your account.
You can delete your account in Settings, or use our account deletion page without installing or signing in to the app. You may also contact us to request erasure of particular data while keeping your account; some features depend on the data you ask us to remove.
Security and international processing
Connections use HTTPS, client database access is restricted by authentication and ownership rules, and payment credits are verified on the server. Media download links contain access tokens; anyone with such a link may be able to open it, so treat links and exports as private. No system is completely secure.
The project's primary database and media bucket are in the EU. Some server functions run in the United States and Google and email providers may process data in other countries. Appropriate provider contractual safeguards apply where required; contact us for information about relevant transfers and safeguards. EU storage alone does not mean all processing stays in the EU.
Your choices and rights
You can choose whether to upload, delete gallery items, disable reminder notifications in Settings/device controls, and request account deletion. Depending on your location, you may request access, correction, erasure, a portable copy, restriction, or object to relevant processing. Contact office@creativdigital.ro from the email used for your account. We may ask for proportionate identity verification; never send a password or full payment details. We respond within applicable legal time limits and explain any lawful exception. You may complain to your local data-protection authority, including the ICO in the UK or the relevant EEA supervisory authority.
Changes and contact
We publish updates on this page and seek renewed consent in the app when the processing disclosure changes materially. Privacy, support and deletion contact: Creativ Digital Limited, office@creativdigital.ro.