Privacy Policy
Last updated: 14 November 2026
The short version
- You don't need to create an account. The app gives you an anonymous ID so we can track your credits.
- When you create a photo, your selfie is sent to Google's Gemini AI to make the new image. We don't store your photos on our servers. Your results are saved only on your phone.
- We don't use your face to identify you, and we don't build face templates or other biometric data.
- We don't sell your data and we don't show ads.
- You can delete all your data at any time in the app: Settings → Delete all my data.
Contents
- Who we are
- What we collect
- How your photos are handled
- How we use information
- Legal bases (EU/UK)
- Who we share it with
- International transfers
- How long we keep it
- Your rights and choices
- Children
- Security
- Changes to this policy
- Contact us
1. Who we are
Portrella is a mobile app operated by Suraj Adhikary, an individual developer based in India ("Portrella", "we", "us"). We are the data controller for the personal information described in this policy.
Location: Hyderabad, Telangana, India
Privacy contact: privacy@portrella.app
2. What we collect
| Information | What it is | Where it comes from |
|---|---|---|
| Photos you choose | The selfie or photo you take or pick in the app to restyle. | You |
| Anonymous account ID | A random identifier created when you first open the app. It isn't linked to your name, email or phone number. | Created automatically |
| Credits and purchase records | Your credit balance, a record of each credit added or used, your subscription status, and purchase and transaction IDs. We never receive your card or bank details. | The app, Google Play or the App Store, and RevenueCat |
| Photo request records | For each photo you create: which look you chose, the time, whether it succeeded, how long it took, and any error message. This doesn't include the photo itself. | Created automatically |
| Device identifier (hashed) | A one-way, salted hash of your device's app identifier, used only to give the free starter credits once per device. We don't store the identifier itself. | Your device |
| Technical data | IP address, device and operating-system type, app version, and request logs that our hosting providers record when the app talks to our servers. | Your device and our providers |
| Messages to support | Your email address and anything you write when you contact us or report a photo. | You |
We don't collect your name, contacts, precise location, or browsing history, and the app doesn't access your photo library except for the photos you choose.
3. How your photos are handled
- Before your first photo, the app asks for your consent to send it to our AI provider.
- The app shrinks and re-encodes your photo on your phone. This also removes embedded metadata such as GPS location.
- The photo is sent over an encrypted connection to our server, which passes it to Google's Gemini API together with the instructions for the look you chose. Google returns the edited image.
- Your photo and the result are processed in memory and are not saved on our servers. The result is sent back to your phone and stored only in the app's private storage on your device.
- We use Google's paid Gemini API service. Under Google's terms for that service, Google does not use your photos to train its models. Google may keep requests for a limited time to detect abuse, as described in its own terms.
- Edited images carry an invisible digital watermark (Google SynthID) that marks them as AI-generated, and the app labels them "AI-edited".
- We don't use photos to identify anyone, and we don't create facial recognition data, face templates or other biometric identifiers.
4. How we use information
- To provide the service: create your photos, keep track of your credits, and deliver what you buy.
- To process purchases and subscriptions: together with Google Play, the App Store and RevenueCat.
- To prevent abuse and keep the service secure: for example, giving free credits only once per device, limiting the number of requests, and investigating reports.
- To support you: answer your questions and handle reports about photos.
- To meet legal obligations: such as keeping tax and accounting records.
We don't sell personal information, use it for advertising, or share it with data brokers.
5. Legal bases (EU, EEA and UK users)
- Contract: processing your photos, credits and purchases is necessary to provide the service you asked for.
- Consent: we ask before sending your first photo to our AI provider. You can withdraw consent by not creating further photos and deleting your data in the app.
- Legitimate interests: preventing fraud and abuse, and keeping the service secure.
- Legal obligation: keeping records required by tax and accounting laws.
6. Who we share it with
We use a small number of service providers who process data on our behalf, under contracts that limit how they can use it:
| Provider | What they do |
|---|---|
| Google (Gemini API) | Creates the edited image from your photo. |
| Supabase | Hosts our database and server functions (anonymous ID, credits, request records). |
| RevenueCat | Manages in-app purchases and subscriptions. |
| Google Play and Apple App Store | Process payments. Their own privacy policies apply to payment details. |
| Zoho Mail | Hosts our support email. |
We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a sale or transfer of the app, in which case this policy will continue to apply.
7. International transfers
Our providers process data in several countries, including the United States, Australia and India. When data from the EU, EEA or UK is transferred to countries without an adequacy decision, we rely on the Standard Contractual Clauses or equivalent safeguards offered by our providers.
8. How long we keep it
- Photos and results: not stored on our servers. Results stay on your phone until you delete them or uninstall the app.
- Anonymous ID, credits and request records: kept while your account exists, and deleted when you use "Delete all my data".
- Hashed device identifier: kept to prevent repeated free-credit claims, but no longer linked to you after you delete your data.
- Purchase records: Google, Apple and RevenueCat keep their own records as required for payments and tax.
- Support emails: kept for up to 2 years after the conversation ends, unless you ask us to delete them sooner.
- Server logs: kept by our hosting providers for a short period, typically days to weeks.
9. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or download your personal information, to object to or restrict certain processing, and to withdraw consent.
- Delete your data: open the app and go to Settings → Delete all my data. This deletes your account, credits and photo records from our servers immediately and removes saved results from the app. See Delete your data for other options.
- Other requests: email privacy@portrella.app. We'll reply within 30 days. Because accounts are anonymous, we may ask you for your in-app user ID or purchase details to find your data.
- Subscriptions: deleting your data doesn't cancel a subscription. Cancel it in Google Play or your Apple ID settings.
- EU, EEA and UK: you can complain to your local data protection authority.
- California and other US states: we don't sell or "share" personal information for cross-context behavioural advertising, and we don't use sensitive personal information to infer characteristics about you. We won't discriminate against you for exercising your rights.
- India: under the Digital Personal Data Protection Act, 2023, you can contact our grievance contact at privacy@portrella.app, and you may escalate to the Data Protection Board of India.
10. Children
Portrella is intended for adults aged 18 and over. Don't use the app if you are under 18, and don't upload photos of children. If you believe a child has used the app or a photo of a child was uploaded, contact us and we'll delete any related data.
11. Security
We use encrypted connections (HTTPS), keep secret keys only on our servers, restrict database access so each user can read only their own records, and avoid storing photos at all. No system is perfectly secure, but we work to protect your information and will notify you and the authorities of a data breach where the law requires.
12. Changes to this policy
We'll update this policy when the app or our practices change, for example if we add crash reporting or analytics. We'll change the "Last updated" date above, and for significant changes we'll tell you in the app before they take effect.
13. Contact us
Privacy questions and requests: privacy@portrella.app
General support: support@portrella.app