Privacy Policy
Last updated: June 24, 2026
Stain Remover — Restore Photos ("the App") is published by Bulpara Inc ("we", "us", "our"). This policy describes how we handle information when you use the App.
1. Photos You Submit
The App restores damaged and faded photos using a hosted AI model, so a photo you choose to restore leaves your device to be processed. Here is exactly what happens:
- When you tap Restore, the selected photo is uploaded over an encrypted (HTTPS) connection to our backend.
- It is stored transiently on Cloudflare R2 and processed by Replicate, which runs the restoration model. The restored image is returned to the App.
- Uploads and results auto-delete within 24 hours.
- No human ever reviews your photos.
- Your photos are never used to train AI.
- You can remove your uploads immediately at any time from Settings → Delete My Uploads.
Because photos genuinely leave your device for processing, we do not claim the App is "on-device" or that "nothing leaves your iPhone."
2. No Account, No Login
- The App has no sign-up and no login. We do not ask for your name, email, or any profile information to use it.
- To prevent abuse of the free tier, the App uses Apple’s DeviceCheck — a per-device token issued by Apple. This token is not linked to your identity and is used only to enforce free-tier limits.
3. Data We Store Locally
- Restore history (Premium): References to your restored images, timestamps, and the settings used. Stored locally on your device.
- Preferences: Default download format, Colorize toggle, theme, and notification settings.
- Free-tier counter: A local record of your free restore(s) so the App can enforce the free-tier limit.
- Purchase status: Subscription state is managed by Apple’s StoreKit and cached locally for feature access.
4. Permissions We Request
- Photo Library (read-only): Only when you choose a photo to restore. We access only the photo you select via the iOS picker — we do not enumerate or scan your library.
- Files / iCloud Drive: Only the image you explicitly pick is imported into the App.
- Notifications (optional): Used only to let you know when a batch of photos finishes processing. You can disable this in iOS Settings.
5. Third-Party Services
The App relies on the following third-party services:
- Replicate — runs the AI restoration model on the photo you submit. Replicate acts as a sub-processor that performs the restoration on our behalf. See Replicate’s Privacy Policy.
- Cloudflare R2 — short-lived transit storage for your upload and the restored result, deleted within 24 hours. See Cloudflare’s Privacy Policy.
- Apple App Store / StoreKit — manages subscriptions and purchases. Governed by Apple’s Privacy Policy.
- Apple DeviceCheck — provides the per-device token used to enforce free-tier limits.
The App does not contain advertising and does not share your photos with any advertising network.
6. Data Retention & Security
- Uploaded photos and restored results are automatically deleted within 24 hours, and immediately when you tap "Delete My Uploads."
- All transfers between the App and our backend use encrypted (HTTPS) connections.
- No human reviews your photos, and they are never used to train any model.
- Purchase verification uses Apple’s secure StoreKit framework.
7. Data Sharing
We do not sell your personal data. Your photos are shared only with the sub-processors listed above (Replicate and Cloudflare R2), and only to perform the restoration you requested. They are never shared for advertising and never used to train AI.
8. Your Rights
You can:
- Delete your uploads on demand from Settings → Delete My Uploads
- Delete individual restores and your local history inside the App
- Delete the App to remove all locally stored history and preferences
- Disable Notifications and Photo Library access from iOS Settings at any time
- Contact us about data handling at hello@bulpara.com
9. Children’s Privacy
The App is rated 4+. Family photos you submit may include images of minors; we process them only to perform the restoration you requested, do not build profiles, and delete uploads within 24 hours. The App has no account system and does not knowingly collect personal information from children.
10. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.
11. Contact Us
If you have questions about this privacy policy, contact us at: