Privacy Policy — Retrova

This privacy policy applies to the Android app Retrova(com.gookkis.retrova), developed and published by Heri Kiswanto ("we") onGoogle Play. It explains what data is processed when you use the app, by whom, how long it is kept, and what choices you have.

Short summary

• No account sign-up. No name, email address, phone number, or login. You are identified only by a random per-device identity.
• Your photo is sent to our server — that is the only way the image can be created. The original photo is deleted automatically within 1 day.
• Results are kept for 30 days on the server, and stay on your device until you delete them.
• Your photos are never used to train AI models and are never shared with anyone beyond the infrastructure providers that process the image.
• The app shows Google AdMob ads and accepts purchases through Google Play.
• You can delete all of your data at any time from inside the app, or through the data deletion page.

What we collect

The photo you choose

When you pick a style and tap Generate, the photo you selected is uploaded to our server for processing. This is the core of the service: a styled image cannot be produced without sending the photo. Photos are chosen through the Android system photo picker, so the app only ever receives the file you picked yourself — it does not request access to your whole gallery.

The original photo is deleted from the server within 1 day of processing. The resulting image is kept for 30 days, so you can still open it from History if you lose your device or reinstall the app. Links to result files expire after 48 hours and are regenerated when needed.

Device identity (not personal identity)

So that your credit balance survives a reinstall, the server stores a random identifier (usr_…) along with a hashed fingerprint of your device key, an install number, the app version, and the platform. No name, email address, phone number, or location. You can see this identifier under Settings → Device ID.

Balance, purchases, and credit usage

We store your credit balance, records of purchases validated through Google Play, and records of rewarded ads you watched. Payments are handled entirely by Google Play — we never receive or store your card number or payment details.

Device integrity checks

To prevent abuse of free credits, the app uses the Google Play Integrity API. That service tells our server whether the app is running on a genuine Android device and was installed from Google Play. We receive only its verdict, never the contents of your device.

Automated content checks

Every uploaded photo passes an automated content check before it is processed. A photo that does not pass is rejected and no credit is charged. This check is performed automatically by the system, not reviewed by a human under normal circumstances.

If you report a result through the Report this result menu inside the app, your report and the result ID are sent to us by email, and the image in question is reviewed by a human to decide whether it breaks the rules.

Third-party advertising (Google AdMob)

The app shows ads from Google AdMob: banners, interstitials, and rewarded ads you choose to watch in exchange for free credits. AdMob may collect and process data under its own policies, including the Android Advertising ID and device data, in order to serve and measure ads.

• Google privacy policy: policies.google.com/privacy
• How Google uses data from partner apps: policies.google.com/technologies/partner-sites

You can reset or delete your Advertising ID under Android Settings → Google → Ads. Buyers of credits are free of ads for as long as their balance is high enough.

App permissions

• Internet — to send your photo for processing and fetch the result.
• Notifications — to tell you when a result is ready. Can be turned off in Settings.
• Storage (Android 9 and below only) — to save results to your gallery. Android 10 and above does not need this.
• Camera (optional) — only if you choose to take a photo directly. The app works fully without it.
• Advertising ID — used by AdMob to serve ads.

The app does not request gallery access (READ_MEDIA_IMAGES). Photos are chosen through the system photo picker, so the app can only read the file you point at.

Your choices

• Delete one result — through the ⋮ menu on that result in History.
• Delete all results — Settings → Delete all my results.
• Delete all your data and identity — Settings → Delete account and all data. Any remaining credit balance is deleted with it and cannot be restored.
• Without installing the app — follow the data deletion page.
• Turn off notifications — Settings → Notify when result is ready.

Children's privacy

This app is not directed at children under 13, and we do not knowingly collect data from children. If you are a parent or guardian and believe your child has uploaded a photo through this app, contact us and we will delete that data.

Security

All communication between the app and our server uses HTTPS. Original photos are stored only for as long as processing requires and are deleted automatically afterwards. Device keys are stored as hashed fingerprints, never as their original values.

Changes to this policy

This policy may be updated when features or third-party services change. The current version is always published on this page with a new update date.

Contact

Questions about this privacy policy can be sent to admin@gookkis.com.