Privacy policy
This policy explains what the Orvel iPhone app and its server collect, why, who processes it and how long it is kept. Orvel is provided by DIGIT29 TECHNOLOGIES PRIVATE LIMITED, India ("we"). Contact: support@digit29.com.
The short version
- The camera works without an account. Photos and videos you take stay on your iPhone unless you choose an AI look.
- When you run an AI look, only that photo is uploaded, for that edit only. It is not used to train AI models by us.
- No ads, no tracking, no third-party analytics, and we do not sell personal data.
- You can delete your account and its data at any time in the app (Profile → Delete account).
What we collect
| Data | When | Why |
|---|---|---|
| Email address and, if you share it, your name | When you sign in with Apple, Google or email | To create and secure your account and send sign-in codes. With Sign in with Apple you may use Apple's private relay address. |
| Account ID | When you sign in | A random identifier that links your credits, purchases and usage. |
| Purchase history | When you buy credits or redeem an Apple offer code | Apple sends us a signed record of the transaction (product, transaction ID, date, price, currency, storefront). We never see your card or Apple payment details. |
| Credit ledger (usage) | When you use an AI look | Which look was used, when, and the credit charged or refunded, so your balance and history are correct. |
| The photo you send for an AI look, plus an optional note you type | Only when you run an AI look | To produce the edited image. |
| Technical logs | Every server request | IP address, request time and error details for security, abuse prevention and debugging. |
The app keeps an anonymous install identifier in the iPhone Keychain and your sign-in session in the Keychain. Camera settings stay on your device.
Who processes data for us
| Processor | Purpose | Location |
|---|---|---|
| Google Cloud and Firebase (Google LLC / Google Ireland) | Firebase Authentication (accounts), Cloud Firestore (account, credit ledger, purchase records), Cloud Run (our API), Secret Manager, logging | Firestore and Cloud Run in europe-west3 (Frankfurt, Germany); Firebase Authentication is a global Google service |
| Google Workspace (Gmail) | Sending sign-in emails from noreply@digit29.com | Google data centres |
| Apple | Sign in with Apple, App Store payments and offer codes | Apple |
| Google Sign-In | Only if you choose "Continue with Google" | |
| kie.ai, running the Seedream image model | Producing AI looks. Receives the photo, the look's instructions and your optional note, and returns the edited image | Outside India and the EU; transfers rely on the provider's terms |
How long we keep it
- Photos for AI looks: our server does not store them; it streams the photo to kie.ai. kie.ai deletes uploaded files automatically after 24 hours, and keeps generated results only for its short retention period. The edited result is saved on your iPhone.
- Edit task records (status, no image): 24 hours.
- Email sign-in codes: stored only as a hash, valid for 10 minutes, single use.
- Account, credit ledger and purchase records: until you delete your account. Where tax or accounting law requires us to keep transaction records, we keep only what the law requires.
- Server logs: up to 30 days.
Deleting your account
In the app, open Profile → Delete account. This deletes your Firebase account, your credit balance and ledger, and your purchase records on our side, and revokes the Sign in with Apple link where applicable. Unused credits are lost. Refunds for App Store purchases are handled by Apple at reportaproblem.apple.com. You can also email support@digit29.com.
Your rights
Depending on where you live (for example under India's Digital Personal Data Protection Act 2023 or the EU/UK GDPR) you can ask to access, correct or delete your data, withdraw consent, and complain to a data protection authority. Write to support@digit29.com; this address also reaches our grievance officer. We answer within 30 days. Our legal bases are performing our contract with you (account, credits, edits), your consent (sending a photo to the AI provider, which the app asks before the first upload) and legitimate interests (security, abuse prevention).
Children
Orvel is not directed at children under 13, and an account requires the age of digital consent where you live. If you think a child has given us data, contact us and we will delete it.
Security
All traffic is encrypted (HTTPS). Access to production data is limited to the people who run the service. Sign-in tokens are kept in the iPhone Keychain.
Changes
We will update this page and its effective date when our practices change, and tell you in the app if a change is significant.