Privacy Policy

1. Information we process

RevealCut may process the before-and-after images you select or capture, project titles, captions, calls to action, brand-kit fields, selected service and template, app language, export history, favorite templates and a randomly generated account identifier. The core workflow does not require your name, email address, phone number, contacts or precise location.

Account and optional sign-in

RevealCut first creates a random anonymous account. In Settings → Protect your account you can optionally link it to Sign in with Apple, Google, or an email address with a password (confirmed with a one-time code sent to that address). We then store your email address together with the account identifier. We do not ask for or store your name. If you use Sign in with Apple, we keep the refresh token Apple issues on our server, readable only by our server-side service and never by the app, solely to revoke Apple access when you delete your account. Your email address is used only to sign you in and identify your account; we do not send marketing email.

Camera and photo library

Camera access is requested only when you choose to take a photo. Library access is used for the images you select and, if you use pair suggestions, to read the creation time and size of your most recent photos on this device so RevealCut can propose before-and-after pairs. Photo locations are not read, nothing is uploaded until you save a project, and RevealCut does not request microphone access.

Clients, team, ratings and portfolio

If you use client cards, team members, approval ratings or the public portfolio, RevealCut also processes the client names, contact details and notes you enter, the ratings and comments your clients leave, team member names and handles, and the results you choose to publish. Portfolio results are copied to a public storage path only when you add them and are removed when you take them out.

2. How information is used

• Save, restore, edit, compare and export your projects.
• Apply your selected brand identity and content preferences.
• Synchronize your workspace and enforce feature limits.
• Provide optional AI-generated campaign text when you request it.
• Maintain reliability, prevent abuse and diagnose technical failures.
• Verify and restore Pro subscription entitlements.

3. Local storage and private cloud sync

Projects are saved on your device first. When an internet connection and an account session are available, project data and selected images may sync to Supabase. Database row-level controls and private object paths restrict each account to its own workspace. Signed image links expire. Deleting a synchronized project removes its active cloud record and associated uploaded project media, subject to limited backup retention.

4. AI features

When you explicitly request a campaign, RevealCut sends the selected service, language, tone and limited text context through a protected server to OpenAI. Your before-and-after photos are not sent to OpenAI. Do not submit sensitive personal information. AI output can be inaccurate and must be reviewed before publication.

5. Analytics and diagnostics

Optional PostHog analytics use content-free events such as screen views or feature actions. Analytics stays off until you opt in. Sentry may receive scrubbed technical crash details to improve reliability; you can disable diagnostics in Settings. We configure these tools to avoid captions, photo paths, authorization headers and direct contact details.

6. Purchases

Apple App Store or Google Play processes payment information. RevenueCat may process your random app user identifier, product identifier, store, transaction state, subscription dates and entitlement status so RevealCut can unlock or restore Pro. RevealCut does not receive your full card number.

7. Service providers and disclosures

We use Supabase for authentication (including optional Google, Apple or email sign-in), database and file storage; Apple and Google for Sign in with Apple and Google Sign-In when you choose them; OpenAI for requested text generation; PostHog for consent-based analytics; Sentry for consent-controlled diagnostics; and RevenueCat plus the applicable app store for purchases. Providers process data under their own terms and our configuration. We may disclose information when required by law, to protect users or the service, or during a legitimate business transfer with appropriate safeguards. We do not sell personal information or use it for cross-app advertising.

8. Retention and deletion

Local data remains until you delete projects, clear app storage or remove the app. Active cloud projects remain until deletion. Operational logs, store transaction records and backups may be retained for limited security, accounting, fraud-prevention and legal periods. You can permanently delete all of your RevealCut data, including the cloud and local RevealCut workspace, directly in Settings → Data control. If you signed in with Apple, Apple access is revoked. An anonymous account is deleted completely, and so is your sign-in (email address and sign-in link) unless you use the same Google, Apple or email account in our other apps — then only your RevealCut data is deleted, the shared sign-in record is kept and your account there is not affected. If the app is unavailable, use our account-data deletion page; we may ask for the email address linked to your account or the private session code previously shown in Settings to locate the correct workspace.

9. Security and international processing

We use access controls, encrypted transport, private storage and secret separation. No service can guarantee absolute security. Providers may process data outside your country under their applicable transfer safeguards.

10. Children, rights and choices

RevealCut is not directed to children under 13. Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, and to withdraw consent. Analytics and diagnostics controls are available in Settings. Store subscription controls remain available through Apple or Google.

11. Changes and contact

Material changes will be posted with a revised effective date and, where appropriate, an in-app notice. Questions or privacy requests: destek@dodeyazilim.com.