Privacy Policy 

Privacy Policy for RendrFlow 

Effective Date: September 07, 2025  

Last Updated: October 21, 2026  

1. Introduction

RendrFlow ("the App") is developed by Mohammad Saif Ansari ("we," "us," or "our"). We respect your privacy and are committed to being transparent about how your information is handled. This Privacy Policy describes what data we access, how it is used, and how we keep it secure.

By using RendrFlow, you agree to this Privacy Policy. If you do not agree, please discontinue using the App.

2. On-Device Image Processing (Our Core Privacy Principle)

RendrFlow performs all image processing enhancement, upscaling, and editing fully on your device.

• Your photos never leave your device.

• We do not upload, analyze, store, or share your images.

• The App works offline for all core image-processing functions.

• No image data is sent to any server.

2b. Artificial Intelligence (AI) & Content Safety

RendrFlow uses deep-learning neural network models running locally on your device hardware to upscale, remove backgrounds, and edit photos.

In compliance with Google Play policies, users are strictly prohibited from using RendrFlow to process, generate, or enhance:

• Child Sexual Abuse Material (CSAM) or Child Sexual Exploitation and Abuse (CSAE).

• Non-consensual sexual content, explicit material, or intimate deepfakes.

• Hate speech, harassment, violence, defamation, or content that infringes third-party intellectual property rights.

Your photos and processed results are never used to train or fine-tune AI models.

3. Information We Collect

a) Photos and Media You Select

When you choose an image to edit, the App accesses only that file and solely for processing. All processing happens locally on your device. We do not upload, store, or share your images.

b) Anonymous Crash & Performance Data

To improve stability, we use Firebase Crashlytics (Google).

The data collected may include:

• Device model and OS version

• App version

• Crash logs and technical diagnostics

• Anonymous installation identifier

No personal information or images are collected. Crash data is not used for advertising or profiling.

c) Payment and Subscription Information 

RendrFlow offers premium features via in-app purchases and subscriptions processed by Google Play Billing.

• What we do not collect: We do not collect, access, or store your credit card details, billing address, or financial transaction.

• What we access: We receive an anonymous purchase token or receipt from Google to verify your subscription status (e.g., "Premium Active") and unlock features.

d) App Preferences (Language) 

We store your selected language preference locally on your device to ensure the App launches in your preferred language. This preference is strictly stored on-device and is not uploaded to any server or used for profiling.

4. Permissions We Use

a) Storage & Media Permissions

• Android System Photo Picker: RendrFlow uses the Android System Photo Picker (PickVisualMedia) and System Document Picker to let you choose photos. The App does NOT declare or request broad read access to your device's photo library (such as READ_MEDIA_IMAGES or READ_EXTERNAL_STORAGE). It only receives temporary access to the specific images you explicitly choose.

• WRITE_EXTERNAL_STORAGE (maxSdkVersion=28; legacy devices only): Used solely on older Android versions (Android 9.0 and below) to save your edited images to the device gallery. On modern Android versions (Android 10+), images are saved directly through the Android MediaStore API without requiring any storage permissions.

b) Network Permissions

• INTERNET

• ACCESS_NETWORK_STATE

Purpose: Required for loading ads, downloading necessary AI model assets from our servers, and sending anonymous crash reports. No personal images are ever transmitted online. 

c) Notifications Permission

• POST_NOTIFICATIONS (Android 13+)

Purpose: To show progress notifications during long-running image processing tasks.

d) Foreground Service Permissions

• FOREGROUND_SERVICE

• FOREGROUND_SERVICE_MEDIA_PROCESSING

• FOREGROUND_SERVICE_DATA_SYNC

Purpose: Allows the App to perform heavy AI upscaling and ensure reliable model downloads while running in the background. 

e) Device Stability 

• WAKE_LOCK 

Purpose: Keeps device awake during intensive AI processing or downloading to ensure tasks complete successfully without interruption. 

5. Advertising and Analytics

We use the following third-party services:

• Google AdMob – to display ads

• Google Analytics for Firebase – to understand anonymized app usage

• Firebase Crashlytics – for crash reporting

• Hugging Face – anonymous model file downloads only 

• Google Play Billing – to securely process payments and manage subscriptions 

• Google User Messaging Platform (UMP): Used to collect and manage user consent preferences for personalized advertising and data usage, ensuring compliance with privacy laws like GDPR and CCPA. 

• Google Play In-App Updates: Used to communicate with Google Play Services to check for available app updates and facilitate their installation. 

• Pixabay API: Used to provide in-app royalty-free stock photo search. When searching for stock images, your search keyword and device IP address are transmitted to Pixabay to retrieve image results. No personal photos or user identifiers are shared. Use of stock imagery is governed by the Pixabay Terms of Service and Privacy Policy.

• Google Play Integrity API: Used to verify app authenticity, prevent piracy, and detect tampered versions of the app. It does not collect personal identifiers.

Advertising ID (AAID)

AdMob may access the Android Advertising ID to:

• Deliver personalized ads

• Measure ad performance

• Prevent fraud

We do not store or access your AAID ourselves.

6. AI Model Downloads

The App downloads AI model files from Hugging Face. These downloads are performed anonymously and involve no personal data. 

7. Data Security

We implement several layers of security:

• All images are processed on-device.

• The Android sandbox protects all internal app files.

• We do not operate servers that store personal data.

8. User Accounts & Data Deletion

• No Account Required: RendrFlow does not require user accounts or registration. We do not operate remote servers that store your personal media, photos, or account profiles.

• Data Deletion: Because no remote personal data is collected, there is no remote account or data to delete. Firebase retains anonymous crash diagnostics for approx. 90 days.

• Purging Local Data: You can delete all locally cached files, preferences, and downloaded AI models at any time by clearing the App's storage via device settings (Settings > Apps > RendrFlow > Storage & Cache > Clear Storage) or by uninstalling the App.

9. Children’s Privacy

RendrFlow is not intended for children under 13. We do not knowingly collect data from children.

10. Payment Processing 

All financial transactions within RendrFlow are handled directly by Google Play. We rely on Google’s secure payment infrastructure. For details on how your payment data is secured, please refer to the Google Privacy Policy. We expressly disclaim liability for any issues arising from the processing of transactions by Google Play, as we have no control over their data handling practices. 

Subscription Management & Cancellation:

Subscriptions automatically renew unless cancelled. You can manage or cancel your subscription at any time directly in the Google Play Store:

• Open the Google Play Store app.

• Tap your Profile Icon in the top right.

• Go to Payments & subscriptions > Subscriptions.

• Select RendrFlow and choose Cancel subscription.

All refund requests are handled exclusively by Google Play under Google Play Refund Policies.

11. Contact Us

Developer: Mohammad Saif Ansari

Email: helpnativeai@gmail.com