Effective August 3, 2026

Privacy Policy

The short version: No account, developer server, cloud database, remote AI, ads, analytics, tracking, or third-party SDK. Selected photos and restoration data stay in ArchiveProof's local app container unless you explicitly share an export.

Selected-photo access

ArchiveProof uses Apple's system Photos picker. The picker provides the app only the image you select. ArchiveProof does not request broad photo-library permission, scan your library, or use the camera.

Information stored on your device

Selected photo bytes, an original SHA-256 identity, project titles and dates, restoration recipes, Dust Lift masks, local previews, and export records are stored in ArchiveProof's local app container. The imported original remains separate from edited copies.

On-device processing

Restoration filters and Change Map use Apple Core Image on the device. Face Audit uses Apple Vision on the device to outline likely face regions. ArchiveProof does not upload a photo for processing, download a model, reconstruct a face, or use a remote AI fallback.

No developer collection

ArchiveProof has no account, developer-operated server, cloud database, analytics, advertising, tracking, or third-party SDK. ToolBistro does not receive the photos, recipes, masks, project records, or exports stored in the app.

Exports and sharing

Restored images and Lifetime restoration receipts are generated locally. They leave ArchiveProof only after you explicitly choose a destination in the iOS share sheet. That destination may apply its own privacy terms, so review the image and receipt before sharing.

Purchases

The one-time Lifetime purchase is processed by Apple. ArchiveProof can read StoreKit product and entitlement status, but ToolBistro does not receive your payment card details.

Tracking and data sale

ArchiveProof contains no cross-app tracking or data broker SDK. ToolBistro does not sell photo, project, recipe, mask, or export data.

Delete your data

Delete an individual project from its editor, or use Delete all ArchiveProof data in Settings to remove local originals, recipes, masks, previews, and export records. Deleting the app also removes its remaining local app data from the device. Files already shared elsewhere are not affected, and an Apple Lifetime purchase remains restorable.

Contact

Questions about this policy can be sent to tianwenliuyu@gmail.com. Do not email a private family photograph unless you deliberately choose to share it.