Privacy

Last updated 28 October 2026

PhotoFib is run by PhotoFib in the United Kingdom, which is responsible for your data. This page says what we keep, why, and how to get it deleted. Questions: support@photofib.com.

What we keep

  • Your account: email address, the name you choose, your plan and credit history.
  • Photos you upload: photos of the people and pets you save, and one-off photos for tools like Face swap and Fix old photos.
  • What you make: the photos PhotoFib creates for you.
  • Payments: Stripe handles them. We see what you bought and when, never your card number.
  • Technical data: basic logs and error reports needed to run the site and keep it safe. We use only the cookies needed to keep you signed in, and no advertising trackers.

Photos of faces

Photos of faces are sensitive, and some places treat them as biometric information. We use them for one purpose only: making the photos you ask for. Specifically:

  • We only process a person's photos after you confirm it is you, or that you have their permission.
  • We send the photos to our AI providers only to make your result. We don't build face databases, identify people, sell photos or share them for advertising, and we don't use them to train AI models.
  • One-off uploads are deleted automatically after 30 days.
  • Photos of saved people are kept until you delete that person or your account. If your account goes unused for 12 months, we delete them anyway.
  • When you delete a person, their photos are permanently deleted from our storage straight away. Copies at our AI providers expire within 14 days.

Why we use your data

  • To provide PhotoFib: your account, your photos, your purchases.
  • With your consent: processing photos of faces, which you give when you add someone.
  • For our legitimate interests: keeping the service secure, preventing abuse and fixing problems.
  • To meet legal duties, such as tax records for purchases.

Who helps us run PhotoFib

These companies process data for us, only to provide their part of the service:

  • Supabase: accounts, sign-in and our database (United States)
  • Cloudflare: storing your uploads and photos (worldwide)
  • kie.ai and fal.ai: running the AI models that make your photos (they keep their copies for up to 14 days) (United States and elsewhere)
  • Stripe: payments (United States)
  • Resend: sign-in codes and "your photos are ready" emails (United States)
  • Netlify: hosting the website (United States)
  • Sentry: error reports, so we can fix problems (United States)

Some of them are outside the UK and EU. Where that happens, transfers are covered by the safeguards the law requires, such as standard contractual clauses.

Your choices and rights

  • Delete a person, a photo or your whole account at any time in the app. Account deletion removes everything except records we must keep by law, such as payment records.
  • Ask us for a copy of your data, to correct it, or to stop processing it, by emailing support@photofib.com. We reply within 30 days.
  • Depending on where you live (for example the UK, the EU, or US states such as California, Illinois, Texas or Washington), you may have further rights. We honor them, and we never sell personal data.
  • In the UK you can complain to the Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to sort it out first.

Children

Accounts are for adults. Parents and guardians can add photos of their own children to make family photos; those photos follow the same rules and deletion times as any other.

Changes

If we change how we use your data in a way that matters, we will tell you before it applies.