unruinPrivacy Policy Unruin App
Last updated: 15 October 2026
1. Controller and scope
Unruin is an iOS application that repairs photographs you already hold: it opens closed eyes, removes hair from a face and removes glare from glasses. It does not generate persons who do not exist and it does not substitute the face depicted in a photograph.
The controller of your personal data, meaning the party that decides why and how it is used, is Osayawe Ventures, company number 72179693, registered at Hufer Weg 59, 51467 Bergisch Gladbach, Germany. You can reach us at support@unruin.app.
This policy applies to the application, to everything you do within it, and to our website at unruin.app. It does not apply to the App Store or to any site to which we link.
2. Personal data we collect
The application collects the minimum data required to operate. No account, name, email address or password is required unless you contact us.
| What | What it is | When |
|---|---|---|
| Photos you pick | The photos you choose from your library for us to repair | Only when you pick one |
| Face scan | A short video of your face, and the facial measurements worked out from it | Only when you record it |
| Repaired photos | The results the app produces from your photos | Every time a repair runs |
| Purchase data | Which plan you are on, when it started and renews, and whether it is active. Handled by RevenueCat and the App Store | When you subscribe |
| Device and app data | Device model, operating system version, app version, language, time zone, and an identifier generated for your device by RevenueCat | While you use the app |
| Crash and error data | What the app was doing when it failed | When something breaks |
| What you write to us | Your email address and whatever is in your message | Only when you contact us |
| Analytics events | Which screens you open, which features you use and when, together with an identifier Firebase generates for your installation | While you use the app |
| Advertising and attribution | Your device's advertising identifier (IDFA) if you allow tracking, the vendor identifier (IDFV), and events such as install, trial start and subscribe, which Meta and Adjust use to work out which ad brought you here | From first launch, and the IDFA only if you allow tracking |
We do not collect your name, telephone number, location, contacts, health data or payment card details. Payment is taken by Apple, which does not disclose your card number to us.
App Tracking Transparency. iOS asks you once whether the application may track you across the apps and websites of other companies. If you decline, we do not use your advertising identifier, and no identifier is transmitted to Meta or Adjust. You may change your answer at any time in Settings, Privacy and Security, Tracking.
3. Photographs and facial data
Access to your photo library. The application accesses only the photographs you select. It does not scan, index or upload your library. iOS permits access to selected photographs only, and the application functions on that basis.
Processing of a photograph. A photograph you select is transmitted over an encrypted connection to the image processing provider engaged by us, repaired there, and returned. The original and the result are retained for 30 days so that the repair remains available to you in the application, and are then deleted. You may delete any photograph within the application at any time, which deletes it from our systems.
The face scan. The app asks you to record a short video of your face once. From it we work out measurements of your facial features: the position of your eyes, nose and mouth, the geometry and proportions of your face. We keep those measurements as your profile, because every repair has to put back a face that matches yours rather than a generic one. The video itself is deleted as soon as the profile is built, and never later than 24 hours after you record it.
Restrictions on use. We do not use your facial data to identify you, to verify your identity, to authenticate access, to match you against any other photograph or database, or to profile you. We do not sell, lease or trade it. We do not use your photographs or your facial data to train any AI model.
Deletion of the profile. The profile may be deleted in the application's settings. Deletion removes the measurements and the scan, and the application cannot be used until a new scan is recorded.
4. Purposes and legal bases
| What we do | Why | Legal basis under the GDPR |
|---|---|---|
| Repair the photos you pick | It is the thing you came for | Performance of our contract with you (Art 6(1)(b)) |
| Build and keep your face profile | So a repair puts back your face and not a generic one | Your explicit consent (Art 9(2)(a)), on top of the contract |
| Keep your repairs in the app | So you can find them again | Performance of our contract |
| Run subscriptions and restore purchases | To give you what you paid for | Performance of our contract |
| Fix crashes and keep the app working | So the app does not break | Our legitimate interest in a working product (Art 6(1)(f)) |
| Answer you when you write | To reply | Our legitimate interest, or the contract |
| Keep records of consent and purchases | Because tax and data protection law makes us | Legal obligation (Art 6(1)(c)) |
| See how the app is used, and measure which ad brought you to it | To know what works and to pay for advertising that does | Your consent (Art 6(1)(a)), given through the iOS tracking prompt, which you can withdraw at any time |
Where we rely on consent, you can take it back at any time, in the app's settings or by writing to us. Taking it back does not undo what was lawful before you did.
We do not make any decision about you by automated means that has a legal or similarly significant effect on you.
5. Disclosure to third parties
We do not sell your data. Your photographs and your facial data are disclosed to two recipients only: the provider that performs the repair, and the hosting provider on which they are stored. No other recipient listed below receives them.
| Who | What they get | Why |
|---|---|---|
| Our image processing provider | The photo you picked, and the facial measurements needed to repair it | To do the repair. They work under a written contract, only on our instructions, and they may not use your photos for anything else, including training |
| Our hosting provider | Whatever is stored, encrypted | To store it |
| RevenueCat | Your subscription status and a device identifier | To run subscriptions and restore purchases |
| Apple | Your purchase | Apple takes the payment and tells us only whether it worked |
| Google, through Firebase | App usage events and the installation identifier | To see how the app is used and to find what is broken |
| Meta | App events, and your advertising identifier only if you allowed tracking | To measure and target the advertising that brings people to the app |
| Adjust | The same events and identifiers | To attribute an install to the right ad |
Where the image processing provider changes, this policy is updated before the change takes effect.
6. International transfers
The app is available wherever Apple offers the App Store. Our providers are in the European Union and the United States, so your data may be processed outside the country you are in.
When we send personal data out of the EEA, the UK or Switzerland to a country the European Commission has not found adequate, we use the European Commission's Standard Contractual Clauses, and we check what else is needed for that particular country and provider on top of them. You can ask us for a copy of those clauses at support@unruin.app.
7. Retention
| What | How long |
|---|---|
| Photos you picked and the repairs made from them | 30 days, or until you delete them in the app |
| Your face scan video | Deleted as soon as the profile is built, at most 24 hours |
| Your face profile measurements | Until you delete the profile or delete the app's data |
| Subscription records | As long as tax law requires us to keep them, which is 10 years in Germany |
| Crash and error data | 12 months |
| Emails you send us | 24 months after the matter is closed |
When a period runs out, the data is deleted or anonymised so it can no longer be traced back to you.
8. Security
- Everything travels over an encrypted connection (TLS) and is stored encrypted.
- Only the people who need access to run the service have it, and access is logged.
- Accounts used to reach the systems require two-factor authentication.
- Our providers are bound by written contracts that hold them to the same standard.
- If something happens to your data despite this, we tell you and the relevant authority, within 72 hours where the GDPR requires it.
No system is entirely secure and we make no representation to the contrary. The measures above are those we take; they are not a guarantee that no incident can occur.
9. Children
The app is not for anyone under 16. If you are between 16 and 18, you need a parent or guardian's permission to use it. We do not knowingly collect anything from a child under 16, and the App Store rating is set to match.
If you believe a child has used the app and given us their data, write to support@unruin.app and we will delete it.
10. Your rights
Wherever you are, you can ask us to:
- tell you what we hold about you and give you a copy
- correct anything that is wrong
- delete what we hold
- stop or limit what we do with it
- hand your data to you, or to another provider, in a machine readable file
- take back a consent you gave
Most of these rights may be exercised directly in the application's settings, which is faster: deletion of an individual photograph, deletion of your face profile, or deletion of all data.
To ask us instead, write to support@unruin.app from the address you want us to reply to. We answer within one month. If the request is complicated we may take up to two more months, and we will tell you if that happens. It is free, unless a request is repetitive or excessive.
You may lodge a complaint with your local data protection authority. We would ask that you contact us first.
11. EEA, United Kingdom and Switzerland
Everything above applies to you, and these rights come from the GDPR, the UK GDPR and the Swiss FADP:
- Access (Art 15), rectification (Art 16), erasure (Art 17), restriction (Art 18), portability (Art 20)
- Objection (Art 21): you can object to anything we do on the basis of our legitimate interest. If you object to direct marketing we stop immediately, no questions asked.
- Withdrawing consent (Art 7(3)): at any time, including the consent for your face scan.
- Complaint: to the supervisory authority where you live, where you work, or where you think the problem happened.
Your facial measurements are special category data under Article 9. We process them only on your explicit consent, and withdrawing it deletes them.
Osayawe Ventures is established in Germany, so our lead supervisory authority is the data protection authority of North Rhine-Westphalia, the state where the company is registered. You can complain there, or to the authority where you live.
12. California residents
Under the CCPA as amended by the CPRA you can ask us to tell you what we collect and why, to delete it, to correct it, and to limit how we use sensitive personal information. We will never treat you differently for asking.
In the last twelve months we collected these categories: identifiers (a device identifier), commercial information (your subscription), internet activity (how the app is used), and biometric information (your facial measurements). Where each one comes from, why we collect it and who we share it with is set out in the sections above.
We do not sell your personal information for money. We do share identifiers and app activity with Meta, Google and Adjust so that advertising can be measured and targeted, and under California law that counts as sharing for cross-context behavioural advertising. To opt out, answer no to the iOS tracking prompt, or turn it off later in Settings, Privacy and Security, Tracking. You can also write to support@unruin.app and ask us to stop.
Your facial measurements are sensitive personal information under California law. We use them only to repair your photos, which is one of the permitted purposes, and never to infer anything about you.
If you live in Illinois, Texas or Washington. Those states have their own biometric privacy laws, and this is our written policy under them. We collect your facial measurements only after you have agreed to it in the app. We use them only to repair the photos you pick. We never sell, lease, trade or otherwise profit from them. We destroy them when you delete your profile, when you delete the app's data, or when we stop providing the app to you, whichever comes first.
13. Changes and contact
This policy is updated when our practices change. The date at the top is the date of the current version. Where a change is material, for example a new recipient of your photographs or a new purpose for your facial data, notice is given in the application before it takes effect and, where the law requires it, your consent is sought again.
Write to us at support@unruin.app, or by post at Osayawe Ventures, Hufer Weg 59, 51467 Bergisch Gladbach, Germany.