Privacy Policy

1. CONTENTS
2. Information We Collect
3. How We Use Your Information
4. Third-Party Services
5. Data Retention
6. Data Security
7. Your Rights
8. Children's Privacy
9. Account Deletion
10. Changes to This Policy
11. Contact Us

1. Information We Collect

1.1 Apple Sign In Data

When you sign in with Apple, we receive:

• An anonymous user identifier provided by Apple (a unique string, not your real Apple ID)
• Your name (optional, only if you choose to share it during first sign-in)
• Your email address (optional, may be a private relay address provided by Apple)

We do not receive your password, your Apple ID, or any other account information.

1.2 Photos You Upload

These photos are:

• Sent to our processing servers (hosted on Cloudflare Workers)
• Processed using third-party AI services (Google Gemini, Replicate)
• Stored temporarily on Cloudflare R2 for delivery to you
• Automatically deleted within 30 days of processing
• Never used for AI model training or improvement

1.3 Purchase Information

When you make in-app purchases, Apple processes the transaction. We receive:

• Transaction ID (for credit tracking)
• Product purchased and purchase date

We do not receive your credit card information or any payment details.

1.4 Minimal Usage Data

• Number of processing requests (for credit accounting)
• Processing success/failure status (for service improvement)
• App version (for compatibility)

2. How We Use Your Information

• To provide and maintain the photo restoration service
• To process your photo restoration requests
• To manage your credit balance and subscription status
• To respond to your customer service requests
• To detect and prevent fraud or abuse

We do not use your information for advertising or sell it to any third party.

3. Third-Party Services

• Apple Inc.: Authentication (Sign in with Apple) and payment processing (In-App Purchase). Subject to Apple's Privacy Policy.
• Google LLC: Photo restoration uses Google Gemini API. Photos sent to Google are subject to Google's Generative AI Terms.
• Replicate Inc.: Photo enhancement uses Replicate AI models. Subject to Replicate's Privacy Policy.
• Cloudflare Inc.: Serverless processing and temporary image storage. Subject to Cloudflare's Privacy Policy.

4. Data Retention

• Uploaded photos: Deleted within 30 days of processing
• Processed results: Deleted within 30 days of delivery
• Account data: Retained until you request deletion
• Transaction records: Retained for tax/legal requirements (typically 7 years)

5. Data Security

• All data transmission uses HTTPS encryption
• Authentication tokens stored in iOS Keychain
• Processed images stored with access controls
• No data sold to third parties

6. Your Rights

Under Hong Kong PDPO, EU GDPR, and other applicable laws, you have the right to:

• Access data we hold about you
• Delete your account and associated data
• Withdraw Apple Sign In authorization (via iOS Settings → Apple ID → Sign in with Apple)
• Object to processing for specific purposes
• Contact us with privacy concerns

7. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent and learn that your child has provided us with personal data, please contact sales3@hkhdtp.com and we will delete it immediately.

8. Account Deletion

To delete your account, you can:

• Use the "Log Out" feature in the app (clears local data)
• Email sales3@hkhdtp.com to request full data deletion (processed within 30 days)
• Revoke Sign in with Apple access via iOS Settings → Apple ID → Sign in with Apple

9. Changes to This Policy

We may update this Privacy Policy from time to time. The updated policy will be posted on this page with a revised date. We will notify you of significant changes via in-app notice.

10. Contact Us

• Company: HONGKONG HDTP SOFTWARE LIMITED
• Email: sales3@hkhdtp.com
• Website: www.hkhdtp.com
• Response time: Within 30 days