Summary
- Uploads and results are deleted automatically: photos after 24 hours, videos after 7 days, unless you save them to your library on a paid plan.
- We never train our models on your photos or videos, and we never sell or share your data for advertising.
- We don't use advertising or cross-site tracking cookies.
- You can ask us to delete your data at any time from the contact page.
What we collect
Photos and videos you upload
The files you upload, and the results we create from them (colorized, upscaled or recolored versions and previews). Recolor edits and color styles are applied in your browser and are not sent to us, except when you download a result at full resolution from your own device.
Account and payment information
When you create an account: your email address and, if you sign in with Google, your name and profile picture. When you buy something: what you bought and when. Card details go directly to our payment provider and never reach our servers.
Waitlist and contact messages
If you join a waitlist or write to us: your email address, what you signed up for, and your message.
Technical data
Your IP address and basic request information (browser type, time), used to run the service, limit free usage and prevent abuse. We keep it for at most 30 days, except where it's needed to investigate abuse.
Share links
If you create a share link, the watermarked preview of that result (and the "before" image) can be seen by anyone who has the link for 7 days. The full-resolution file stays private.
How we use it
- To process your files and give you the results (performance of our contract with you).
- To run your account, credits and purchases, and to send service emails such as sign-in links, receipts and "your video is ready" (contract).
- To keep the service working and secure, prevent abuse and limit free usage (legitimate interests).
- To answer your messages, and to tell you when a feature you joined a waitlist for launches (consent; you can withdraw it at any time).
- To meet legal obligations, for example tax records of purchases (legal obligation).
We do not use your photos or videos to train or improve our models. If we ever offer an opt-in for that, it will be off by default and explained clearly before you turn it on.
How long we keep it
| Data | Kept for |
|---|---|
| Uploaded photos and their results | 24 hours, then deleted automatically |
| Uploaded videos and their results | 7 days, then deleted automatically |
| Share-link previews | 7 days |
| Photos saved to your library (paid plans) | Until you delete them or close your account |
| Account data | While your account exists, then deleted within 30 days |
| Purchase records | As long as tax law requires (typically 7 years) |
| Waitlist and contact messages | Until the feature launches or your question is resolved, and at most 2 years |
Who processes it
We use a small number of service providers, each under a data processing agreement and only for the purpose listed:
- Cloudflare: website hosting, file storage, waitlist and contact storage, and bot protection.
- RunPod: the GPU servers that colorize, upscale and process your files. Files are processed and not kept there.
- Google Firebase: sign-in and account data.
- Our payment provider (merchant of record): checkout, payment, invoices and sales tax.
- Our email provider: sending sign-in links, receipts and notifications.
These providers may process data in the United States and the European Union. Where data leaves the EU or UK, we rely on the providers' Standard Contractual Clauses or the EU–US Data Privacy Framework.
Cookies and local storage
We don't use advertising or tracking cookies. The app keeps a few settings in your browser's local storage, such as your free-preview count, your chosen style and an invite code. Our bot protection (Cloudflare Turnstile) may set a strictly necessary cookie. If we add analytics, we will use a privacy-friendly, cookieless tool and update this page first.
Your rights
Depending on where you live (for example under the GDPR in the EU and UK, or the CCPA in California), you can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent. We don't sell personal information or share it for cross-context behavioral advertising. To use any of these rights, write to us from the contact page; we answer within 30 days. You can also complain to your local data protection authority.
Security
Files travel over HTTPS and are stored encrypted at rest. Downloads use links that expire. Only the systems that process your files can read them, and our staff don't look at your photos unless you ask us to (for example, to investigate a bad result) or the law requires it.
Children
Ungray is not directed at children under 13 (under 16 in the EU), and we don't knowingly collect their personal data. Photos of children uploaded by a parent or guardian are handled like any other upload.
Changes and contact
If we change this policy in a meaningful way, we'll update the date above and, if you have an account, tell you by email before the change takes effect. Questions or requests: use our contact page.