Privacy Policy
Short version. RE Shots has no accounts, no ads and no tracking. Some edits run on your iPhone and never leave it. For AI edits such as sky replacement, window pull, twilight or virtual staging, the photos you choose are uploaded to our processing service and sent to the AI providers named below, only after you allow it. We delete them from our servers within 24 hours. We never sell your data or use your photos to train AI models.
1. Who we are
RE Shots (the “app”) is operated by Uladzislau Yasinski, a sole proprietor (NIP 5273049048), ul. Michała Kleofasa Ogińskiego 11 lok. 9, 03-318 Warsaw, Poland (“we”, “us”). We are the controller of the personal data described in this policy. Contact for any privacy question or request: support@reshots.aeoriaapps.com.
2. What we process and why
| Data | When | Purpose | Kept |
|---|---|---|---|
| Photos you choose to edit and the edited results | Only when you start an AI edit that runs in the cloud, after you allow AI processing | To produce the edit you asked for and return it to your device | Deleted from our servers within 24 hours, usually right after your device downloads the result |
| Edit settings (for example which edit, intensity, output size) | With each cloud edit | To run the edit | Deleted with the photo |
| Anonymous app user ID (a random identifier created by the app, not linked to your name or email) | On first launch | To know which subscription and edit credits belong to your installation, and to prevent abuse of free edits | While you use the app, and up to 12 months after your last activity |
| Purchase information (product, subscription status, renewal and expiry dates, Apple transaction identifiers, country) | When you buy or restore a purchase | To unlock what you paid for and to handle refunds and support | As long as needed for the subscription and our legal obligations |
| Technical request data (IP address, app version, device model, OS version, time and result of requests; an Apple App Attest or DeviceCheck token if used) | With each request to our servers | Security, fraud and abuse prevention, fixing errors | Server logs up to 30 days |
| Support emails (your email address and anything you send us) | When you contact us | To answer you | Up to 24 months after the conversation ends |
We do not collect your name, contact list, precise location, browsing history or advertising identifier. The app removes location (GPS) metadata from photos before uploading them. We do not use advertising SDKs, we do not track you across other companies’ apps or websites, and we do not sell or share personal data for advertising.
We do not currently use third-party analytics or crash-reporting SDKs. If we add one, we will update this policy and the App Store privacy details before that version is released.
3. On-device editing
Some features, such as straightening verticals, auto exposure and merging bracketed shots, run entirely on your device. Photos edited this way are not uploaded. Your projects, originals and exports are stored on your device and remain there until you delete them or the app.
4. AI processing by third parties
Generative edits (for example sky replacement, window pull, twilight, object removal, virtual staging and upscaling) run on servers operated by the AI infrastructure providers listed in section 5. Before the first cloud edit, the app asks for your explicit permission and tells you which providers receive your photos. Nothing is uploaded unless you tap Allow.
- What is sent: only the photos you select for a cloud edit, resized for processing, together with the edit settings. No name, email or contact details are sent.
- Why: solely to generate the edited image you requested.
- Training: we do not use your photos to train AI models, and we only use providers whose terms for API customers do not allow them to train their models on your photos.
- Withdrawing permission: you can turn AI processing off at any time in the app under Settings → AI processing. On-device features keep working; cloud edits stop until you allow them again.
Please avoid uploading photos that show people. If a photo does include a person or other personal information, it is processed in the same way and deleted on the same schedule.
5. Service providers (processors)
We share data only with the providers below, who process it on our behalf and under our instructions. We will update this list before a change of provider takes effect.
| Provider | Role | Data |
|---|---|---|
| Cloudflare, Inc. (USA) | Hosts our processing API and temporary file storage | Photos, results, edit settings, technical request data |
| fal (Features & Labels, Inc., USA) | Runs the generative AI models that perform the edits | Photos and edit settings for cloud edits |
| Replicate, Inc. (USA) | Runs utility models for object removal and upscaling | Photos for those edits |
| RevenueCat, Inc. (USA) | Manages subscriptions and in-app purchases | Anonymous app user ID, purchase information |
| Apple Inc. | App Store distribution and payments | Purchase information (Apple processes your payment; we never see your card details) |
| Google LLC (Google Workspace) | Hosts our support email | Support emails |
| Vercel Inc. (USA) | Hosts this website | Standard web server logs |
AI providers may keep temporary copies of inputs and outputs for a short period under their own policies, for operation, security and abuse monitoring, after which they are deleted. They may not use them for any other purpose.
6. Legal bases (EU/EEA and UK users)
- Contract (Art. 6(1)(b) GDPR): running the edits you request and providing purchases.
- Consent (Art. 6(1)(a) GDPR): sending your photos to the third-party AI providers above. You can withdraw consent at any time; this does not affect processing done before withdrawal.
- Legitimate interests (Art. 6(1)(f) GDPR): security, fraud and abuse prevention, and handling support requests.
- Legal obligation (Art. 6(1)(c) GDPR): keeping records the law requires.
7. International transfers
Several providers are in the United States. Transfers rely on the EU–U.S. Data Privacy Framework where the provider is certified, or on the European Commission’s Standard Contractual Clauses, with additional safeguards such as encryption in transit.
8. Security
Data in transit is encrypted with TLS. Uploaded files are stored privately, reachable only through short-lived links, and deleted automatically. API keys never ship inside the app. Access to production systems is limited to the operator.
9. Your rights
Depending on where you live, you can ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent. EU/EEA users can also complain to a data protection authority, in Poland the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.
U.S. residents, including California residents, can ask what personal information we hold and ask us to delete or correct it. We do not sell or share personal information and will not treat you differently for using these rights.
Because there is no account, include your App User ID (shown in the app under Settings → About) when you write to support@reshots.aeoriaapps.com, so we can find the related records. We answer within 30 days. Uploaded photos are deleted automatically within 24 hours, so there is usually nothing left to delete.
10. Children
RE Shots is a tool for real estate professionals and is not directed to children. We do not knowingly collect personal data from children under 16. If you believe a child has sent us data, contact us and we will delete it.
11. Changes
We will post any change to this policy on this page and update the effective date. If a change materially affects how your photos are processed, we will ask for your permission again in the app.