Privacy Policy
Rupa is a photo editor for iPhone made by Indise LLC (“we”, “us”). This policy explains what data Rupa uses, where it goes and how long it stays.
The short version
- Most tools run entirely on your iPhone. Photos you edit with them are never uploaded.
- A photo leaves your iPhone only when you start a cloud AI tool and agree in the consent screen. It is sent as a smaller JPEG without location or other metadata.
- Rupa deletes cloud photos from its servers as soon as they are no longer needed, and always within 24 hours. Some AI partners that run the models keep copies longer: Google may keep AI change photos for up to 55 days to prevent abuse. Section 3 has the details for each tool.
- Rupa never uses your photos to train AI. We never sell or share your data for advertising.
- No account, no ads, no tracking, no advertising ID.
1. Who we are
Indise LLC is responsible for the data processed by Rupa (the “controller”). For any privacy question or request, wherever you live, contact us at dimonzalis@gmail.com or write to Indise LLC, 1110 Brickell Ave #400, Miami, FL 33131, USA.
2. Tools that stay on your iPhone
Face and body retouch and reshape, one-tap auto glow, skin smoothing, liquify, background blur and removal, blur face, crop, light, filters, templates, the Rupa camera and Rupa inside the Photos app all run on your iPhone. These tools work offline. To apply them, Rupa uses Apple’s Vision framework on your device to find faces, facial points, body pose and outlines. These points and masks are used only to apply the edit you choose. They never leave your iPhone, are never logged, and are never used to identify anyone. Rupa does not create face templates or any other biometric identifier.
Your edits, history and settings are stored in Rupa’s private storage on your iPhone. Saved photos go to your photo library at full resolution, with the location removed.
3. Cloud AI tools
A few tools need more computing power than a phone has: HD Enhance, Restore old photo, Object remover (including Remove text) and AI change. They run in the cloud and only after you agree in the consent screen that Rupa shows before the first cloud edit. If you say no, every on-device tool keeps working.
When you start a cloud edit:
- What is sent: only the photo you are editing, resized and saved as a JPEG with location and other metadata (EXIF) removed. For Object remover and Remove text, the mask that marks the area to remove is sent too. For AI change, the text you typed is sent too.
- Where it goes: to our backend on Google Firebase (Google Cloud, Singapore region asia-southeast1), then to fal.ai (Features & Labels, Inc., USA), our AI provider. fal.ai runs HD Enhance and Restore old photo itself. For Object remover and AI change, fal.ai passes the photo to the company that makes the model (see below).
- Content check: before editing, the photo is checked automatically for prohibited content (for example sexual content) by a model that fal.ai runs with a partner. Blocked photos are deleted right away and the edit is not counted. Results are checked the same way; a blocked result is deleted and the edit is not counted either.
- Deletion on our side: your original is deleted from our storage as soon as processing finishes. The result is deleted as soon as Rupa has downloaded it to your iPhone. Anything not downloaded is deleted automatically, so every cloud photo is gone from Rupa’s servers within 24 hours of upload. Versioning and “soft delete” are turned off for this storage, so deleted photos cannot be recovered.
- At fal.ai: with every request we tell fal.ai not to store the request and its result in its request history, and to delete the result files it creates within one hour. fal.ai’s terms say it does not use customer content to train its models.
- No training: Rupa never uses your photos or results to train or improve AI models.
Object remover and Remove text. These tools run on a model made by Bria AI (Bria Artificial Intelligence Ltd., Israel). fal.ai sends the photo and the mask to Bria to make the edit. We have not been able to confirm how long Bria keeps them. We will update this page when we can.
AI change. When you use AI change, fal.ai sends your photo and your text to Google’s Gemini image model (Google LLC, USA) to make the edit. Rupa deletes your photo, your text and the result from its own servers within 24 hours. Google’s terms for paid use of Gemini say Google may keep prompts, images and results for up to 55 days only to detect and prevent abuse, and does not use them to improve its products. Images made with AI change carry an invisible SynthID watermark from Google that marks them as AI-generated.
Safety check of your text. When you type a request for AI change, the text of your request (never your photo, never your app ID) is also checked for safety by an automated text model. fal.ai runs this check through its partners OpenRouter and Groq. Your text is used only for that check and is not used to train AI. OpenRouter says it does not keep it. Groq says it may keep it for up to 30 days if needed to investigate abuse or errors.
Rupa asks for this consent once, before your first cloud edit, and again only if this notice changes. You can withdraw it at any time: Settings > Delete my cloud data deletes your cloud data and resets the consent, so Rupa asks again before the next cloud edit. Until you agree again, nothing is uploaded. Withdrawing consent does not undo edits already made, and it cannot delete copies that our AI partners keep under their own terms (described above).
4. Other data Rupa uses
- Anonymous app ID. Rupa has no accounts. On first use, Firebase Authentication creates a random anonymous ID for your installation. It is not linked to your name, email, phone number or Apple Account.
- Free edit counter. Every iPhone gets 3 free cloud AI edits. To count them, even if you reinstall the app, we use Apple’s DeviceCheck, which lets us store two bits per device with Apple (a number from 0 to 3). It contains nothing else.
- App integrity. Firebase App Check with Apple’s App Attest confirms requests come from the genuine Rupa app. Rupa also keeps a random install number on your iPhone and sends it to our backend together with your anonymous app ID, to limit abuse (for example, too many requests per minute). For these limits our backend stores only a keyed hash of your IP address, never the address itself.
- Edit records. For each cloud edit we keep a short technical record (tool, status, time, image size, cost), without the photo. It is deleted automatically about 1 to 2 days later. For AI change we keep a short record (anonymous app ID, tool, model, style and a code made from your text; never the text or the photo) for 90 days so a result can still be reported; Delete my cloud data removes it. Monthly edit counts are kept until 60 days after the month ends. If you report a result, we keep the tool, model, your reason and a short code made from the text (not the text, not the photo) for 90 days.
- Purchases. Payments are handled by Apple. We never see your name or payment details. To unlock Rupa Plus we receive Apple’s signed transaction data (product, transaction ID, dates, renewal status) and check it with Apple’s App Store Server API.
- Notifications. If you allow notifications, we store a push token so we can tell you when a cloud edit is ready and update the Live Activity on your Lock Screen.
- Diagnostics and usage. Firebase Crashlytics collects crash reports and performance data. Firebase Analytics collects app usage events (for example which tool was opened), in-app purchase events, an app-instance ID, device model, iOS version, language and an approximate region derived from your IP address. This data is not linked to your anonymous app ID and is used only to fix problems and improve Rupa. If you got Rupa from the App Store in the EEA, the UK or Switzerland, usage statistics are off until you turn them on in the app (me > share usage data). Everywhere else they are on, and you can turn them off there at any time. Crash reports are on everywhere and are never linked to your app ID.
Rupa does not use the advertising identifier (IDFA), does not ask for tracking permission, does not show ads and does not track you across other apps or websites.
5. Why we use data
- Your consent: uploading and processing photos (and AI change text) for cloud AI tools.
- Providing the service you asked for: the anonymous ID, edit counters, cloud edits you start, purchases and notifications.
- Your consent: usage statistics in the EEA, the UK and Switzerland.
- Legitimate interests: security, preventing abuse of free edits and of AI change, crash reports, and usage statistics outside the EEA, the UK and Switzerland, in a way that does not identify you.
- Legal obligations: for example tax and accounting records for purchases.
Rupa does not make decisions about you by automated means that have legal or similarly significant effects. The automatic content check can block a single edit; a blocked edit is never counted. If you think a block was wrong, contact us.
6. Service providers
| Provider | What it does | Location |
|---|---|---|
| Google (Firebase / Google Cloud) | Backend, anonymous ID, temporary photo storage, App Check, Remote Config, Crashlytics, Analytics | Singapore; Analytics and Crashlytics in the USA |
| fal.ai (Features & Labels, Inc.) | Runs the AI models for cloud tools, or passes the request to the model maker | USA |
| Content-check partner of fal.ai | Checks photos and results for prohibited content | Not published by fal.ai |
| Bria AI (Bria Artificial Intelligence Ltd., via fal.ai) | Runs the model for Object remover and Remove text | Israel |
| Google LLC (Gemini, via fal.ai) | Runs the Gemini image model for AI change | USA |
| OpenRouter, Inc. (via fal.ai) | Forwards the text of AI change requests to the safety check model | USA |
| Groq, Inc. (via fal.ai and OpenRouter) | Runs the safety check model on the text of AI change requests | USA |
| Apple | App Store payments, DeviceCheck, App Attest, push notifications | USA and other Apple locations |
Each provider may use the data only to provide its service to us, except where section 3 says a provider keeps data under its own terms (for example to prevent abuse). We do not sell your data and do not share it for advertising. We disclose data to anyone else only if the law requires it.
7. How long we keep data
| Data | How long |
|---|---|
| Photos, masks and results on Rupa’s servers | Until processing ends or the result is downloaded; never longer than 24 hours |
| AI change text on Rupa’s servers | Until the edit ends; never longer than 24 hours |
| Result files at fal.ai | Deleted within 1 hour; request history not stored |
| AI change photo, text and result at Google | Up to 55 days, for abuse prevention only |
| Object remover photo and mask at Bria AI | Not confirmed yet (see section 3) |
| AI change text at Groq | Up to 30 days, only if needed for abuse or errors |
| Cloud edit records | About 1 to 2 days |
| AI change records and reports | 90 days |
| Monthly edit counts | Until 60 days after the month ends |
| Install number for rate limits | 180 days after the app was last used |
| Anonymous app ID, settings and consent date | Until you use Delete my cloud data |
| Subscription records | As long as needed for the subscription, billing, tax and the law |
| Crash reports and usage statistics | Under Firebase’s retention settings, then deleted |
8. International transfers
Indise LLC and our providers are in different countries, so your data may be processed in Singapore, the USA, Israel and other countries. We protect these transfers as follows:
- Google (Firebase / Google Cloud): Google LLC is certified under the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework. Firebase’s data processing terms also include the EU standard contractual clauses.
- fal.ai: fal.ai’s data processing addendum includes the EU standard contractual clauses, the UK International Data Transfer Addendum and the Swiss changes to those clauses.
- Bria AI: Israel has an adequacy decision from the European Commission.
- Partners fal.ai works with (Google for Gemini, OpenRouter, Groq and the content-check partner) receive data under fal.ai’s agreements with them.
9. Your rights
Depending on where you live, you can ask to access, correct, delete or receive a copy of your data, withdraw consent, object to or limit processing, and get information about who we share it with. You can also complain to your data protection authority. Sections 10 and 11 explain the rules in different regions.
Because Rupa has no accounts, we can only find your data through the app. The fastest way to delete it is Settings > Delete my cloud data. For other requests, email dimonzalis@gmail.com and include the Support ID shown in Rupa’s Settings. See Delete your data for all options. We answer requests within 15 days. We will not treat you differently for using your rights.
10. EEA, UK and Switzerland
If you are in the European Economic Area, the United Kingdom or Switzerland, the GDPR, the UK GDPR or the Swiss Federal Act on Data Protection (FADP) applies. This section adds to the rest of this policy.
- Controller: Indise LLC, 1110 Brickell Ave #400, Miami, FL 33131, USA, dimonzalis@gmail.com.
- Legal bases: performance of a contract with you (Art. 6(1)(b) GDPR) for the anonymous ID, the cloud edits you start, edit counters, Rupa Plus and notifications; your consent (Art. 6(1)(a)) for sending a photo and AI change text to the cloud and for usage statistics (off until you turn them on); our legitimate interests (Art. 6(1)(f)) in security, preventing abuse and crash reports; legal obligations (Art. 6(1)(c)) for tax and accounting records.
- Withdrawing consent: for cloud edits, use Settings > Delete my cloud data; for usage statistics, turn off me > share usage data. This does not affect processing done before.
- Recipients: the processors in section 6: Google (Firebase / Google Cloud), fal.ai and the model providers fal.ai uses (Bria AI, Google for Gemini, OpenRouter, Groq and a content-check partner), and Apple.
- Transfers: see section 8.
- Retention: see section 7.
- Your rights: access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent at any time. Email dimonzalis@gmail.com.
- Complaints: you can complain to the data protection authority where you live or work, to the UK Information Commissioner’s Office (ICO), or to the Swiss Federal Data Protection and Information Commissioner (FDPIC).
- Automated decisions: we do not make decisions with legal or similarly significant effects solely by automated means (Art. 22 GDPR).
- Is it required? No law requires you to give us data. Without consent, cloud tools do not work; every on-device tool still does.
- Age: Rupa is for adults 18 and over.
11. Your rights where you live
Many countries give you privacy rights. These usually include access, correction, deletion and withdrawing consent. You can use them by emailing dimonzalis@gmail.com, and you can complain to your local authority. This includes, where they apply:
- Brazil: LGPD (authority: ANPD).
- Türkiye: KVKK (authority: Personal Data Protection Authority).
- Indonesia: Personal Data Protection Law (Law No. 27 of 2022).
- Vietnam: Personal Data Protection Law.
- Philippines: Data Privacy Act of 2012 (authority: National Privacy Commission).
- India: Digital Personal Data Protection Act, 2023 (Data Protection Board of India).
- Japan: Act on the Protection of Personal Information (Personal Information Protection Commission).
- South Korea: Personal Information Protection Act (Personal Information Protection Commission).
- Thailand, Malaysia and Singapore: each country’s Personal Data Protection Act and its data protection authority.
- Taiwan: Personal Data Protection Act.
- Hong Kong: Personal Data (Privacy) Ordinance (Privacy Commissioner for Personal Data).
- Saudi Arabia: Personal Data Protection Law (SDAIA).
- United Arab Emirates: Federal Personal Data Protection Law.
- Israel: Protection of Privacy Law (Privacy Protection Authority).
- Ukraine: Law on Personal Data Protection (Ukrainian Parliament Commissioner for Human Rights).
- California and other US states: you can ask to know, correct and delete your personal information. We do not sell your personal information and do not share it for cross-context behavioral advertising. We do not use sensitive personal information to infer things about you.
- Canada: PIPEDA (Office of the Privacy Commissioner of Canada).
- Australia: Privacy Act 1988 (Office of the Australian Information Commissioner).
12. Security
Data is encrypted in transit. When you start a cloud edit, Rupa uploads the photo (and, for Object remover and Remove text, the mask) directly to our cloud storage, into a folder that only your installation of Rupa and our backend can access. Our backend uses it only to run your edit.
13. Children
Rupa is rated 18+ and is meant for adults only. We do not knowingly process data of anyone under 18. If you think someone under 18 has used a cloud tool, contact us and we will delete the data.
14. Changes
If we change this policy, we will update this page and the date at the top. If a change affects how cloud photos are handled, Rupa will ask for your consent again before the next cloud edit.
15. Contact
Indise LLC
1110 Brickell Ave #400
Miami, FL 33131, USA
dimonzalis@gmail.com