Riela HomeHelpPrivacyTermsSupport

Privacy Policy

Riela — AI Photo Studio. Effective 19 July 2026. Data controller: Levent Yenilmez (i-shim), contact [email protected].

1. What this policy covers

This policy applies to the Riela mobile application (the “App”), an AI photo studio that enhances, restores, colorizes and stylizes your photos and creates AI portraits and short videos from them. The backend runs on Google Firebase (project “riela-start”).

2. Data we process

2a. Face data

Riela is a photo app, so the photos you choose may show faces — including yours. This section explains exactly what happens to face data. (Added 13 September 2026; last updated 14 September 2026.)

• What we collect. Two things, and only when you tap an AI action: (1) the photo you picked — and, for tools that ask for more than one photo, the other photos you pick: a clearer photo of your face, a full-body photo, or photos of the other people you want in the picture (for example with AI Hug, AI Kiss or Reunite; please use other people's photos only with their permission); and (2) on-device face measurements — the position of the eyes, nose and mouth and the size of the face in that photo — computed by Google ML Kit on your phone. We do not identify who a person is, and no face template or faceprint is created on our servers or anywhere outside your device.
• What the measurements are used for. Only to check the photo and protect the result: to tell you when a face is too small or covered (for example by sunglasses) for a good result, and to keep your eyes and mouth from being altered by the AI. They never leave your device and are discarded when the operation ends. If you turn on the optional "Recognise my face" feature in your profile, a compact set of these numbers (about 300 bytes — proportions and two texture values, never an image) for the photos you chose is stored only on your device, is used solely to check that a result still looks like you, and is removed with one tap in your profile or when you delete the App. It never leaves your device.
• What leaves your device. Only the photos you picked (as images), over an encrypted connection, to our server (Google Cloud, project riela-start), which passes them to the AI processors that produce and check your result: fal.ai (image and video generation, and some of the checks below; fal.ai passes some requests on to the model's own developer — for example Google (Gemini) or Kuaishou (Kling video) — directly or through its routing partner OpenRouter) and Google (Vertex AI / Gemini, used to check whether the photo is suitable and whether the result is safe — for example that the face is visible and the image is appropriate). These processors do not receive your name, e-mail or account ID with the photo.
• Quality checks on our server. To make sure a result is good and still looks like you, our server may ask Google's Gemini models (through Vertex AI or fal.ai): whether the face in your photo is clear enough for the tool you chose; whether the face in the finished result looks natural (for example, no duplicated or melted features); where the faces are in the photo or the result (a box around each face), so that sharpening does not distort faces and, in outfit try-on, your original face can be put back onto the result; and how closely the face in the result matches the original, as a score from 0 to 100. For older versions of the App, the portrait tool also asks where the eyes and mouth are in your photo, to check that the result keeps them in place. These answers are used only for your request (a short-lived copy may stay in the server's memory for up to 30 minutes, so the same photo is not analysed twice). We keep only the results of these checks in our server logs — short verdicts such as "clear" or "distorted", the score and a short text note about visible differences — without the photo and without your name, e-mail or account ID, and server logs are deleted automatically after 30 days. None of this identifies who you are.
• Storage and retention. We do not store your photos or your results on our servers. Photos are held only while they are being processed — seconds for most tools, a few minutes for videos. Result files are hosted temporarily on the AI provider's CDN and expire automatically: about 1 hour for photos and 48 hours for videos. Your results are saved on your own device (your Riela projects), where you can delete them at any time. The only exception is a screenshot you choose to attach when sending feedback from inside the App: it is stored with your feedback message in our feedback inbox and is deleted when you delete your account (or when you ask us to).
• Sharing. Face data is not sold, not shared with advertisers, and not used to train AI models — by us or by our processors under our agreements with them. It is shared only with the processors listed above, only to produce your result.
• Deletion. Deleting your account (Settings → Account → Delete account) removes your account record, purchase and fair-use counters, your feedback and support messages and any screenshots you attached; photos and results were never retained on our servers, and on-device data (including "Recognise my face") is removed when you delete the App.

3. What we do NOT do

We do not sell your data. We do not use your photos to train AI models. We do not scan or upload your photo library in the background. We never ask for your phone number. We ask you to sign in (with e-mail, Google or Apple) when you first open the App, so that your subscription and credits stay yours; with Sign in with Apple you can hide your e-mail address from us.

4. Sharing

Data is shared only with the processors needed to run the service: Google Firebase (authentication, database, cloud functions — Google LLC, EU/US servers), fal.ai (AI image/video processing of the photos you submit; fal.ai passes some requests on to the model's own developer, for example Google or Kuaishou, directly or through its routing partner OpenRouter), Google Vertex AI (Gemini checks on photos and results, see 2a), DeepSeek (text only — the wording of an edit request you type, and the text of feedback you send; never your photos or face data), Telegram (a text notification to our team when you send feedback; no photos), RevenueCat (subscription management), Apple / Google (payments, app distribution, push), Google AdMob (ads on the free tier only).

5. Retention & deletion

Photos are processed transiently and are not kept in a permanent library on our servers; AI-provider result links expire automatically. Purchase and fair-use records are kept while your account exists. You can delete your account and its data from inside the App at any time: Settings → Account → Delete account (two confirmation steps). Deleting removes your authentication record, the purchase/fair-use counters tied to it, and your feedback and support messages together with any screenshots you attached. You can also e-mail [email protected] from the device in question; we respond within 30 days. See riela.app/delete-account.

6. Your rights

Depending on where you live (GDPR, KVKK, CCPA and similar laws) you may request access, correction, deletion, restriction, portability and object to processing. Write to [email protected].

7. Children

The App is not directed at children under 13 and we do not knowingly collect their data.

8. Changes

We will post any changes on this page and, where material, notify you in the App.

Gizlilik Politikası (Türkçe özet)

Riela — yürürlük: 19 Temmuz 2026. Veri sorumlusu: Levent Yenilmez (i-shim), [email protected].

Fotoğraflar: yalnızca sizin seçtiğiniz fotoğraf, bir AI işlemi başlattığınızda şifreli bağlantıyla sunucumuza ve AI işleme sağlayıcılarımıza (fal.ai; uygunluk/güvenlik denetimi için Google Vertex AI) gönderilir, sonuç size döner; galeriniz asla arka planda taranmaz. Yüz verisi (13 Eylül 2026; güncelleme 14 Eylül 2026): yüz algılama telefonunuzda çalışır (Google ML Kit); göz/burun/ağız konumu ve yüz boyutu gibi ölçümler yalnız fotoğrafı denetlemek ve sonuçta gözlerinizi/ağzınızı korumak için kullanılır, cihazınızdan çıkmaz ve işlem bitince silinir; kimseyi tanımlamayız, sunucularımızda yüz şablonu oluşturulmaz (isteğe bağlı "Yüzümü tanı" özelliğinin ~300 baytlık oranları yalnız cihazınızda durur). Bazı araçlar (AI Hug, AI Kiss, Reunite) seçtiğiniz başka kişilerin fotoğraflarını da işler. Sunucumuz Gemini ile yüzün net olup olmadığını, yüzlerin fotoğraftaki yerini ve sonucun size ne kadar benzediğini denetler; yalnız bu denetimlerin sonuçları (kısa hükümler, benzerlik puanı, kısa not) kimliksiz olarak 30 gün loglarda kalır. Fotoğraflarınız ve sonuçlar sunucularımızda saklanmaz; AI sağlayıcısındaki sonuç bağlantıları fotoğrafta ~1 saat, videoda 48 saat içinde kendiliğinden silinir. Fotoğraflarınız AI modeli eğitmek için kullanılmaz, satılmaz. Hesap: uygulama ilk açılışta e-posta, Google ya da Apple ile giriş ister (Apple ile e-postanızı gizleyebilirsiniz). Paylaşım: fal.ai (bazı istekleri modelin geliştiricisine iletir, ör. Google, Kuaishou — doğrudan ya da yönlendirme ortağı OpenRouter üzerinden), Google Vertex AI; DeepSeek yalnız metin alır (yazdığınız düzenleme isteği, geri bildirim metni — fotoğraf ya da yüz verisi asla). Geri bildirim: eklediğiniz ekran görüntüsü geri bildiriminizle birlikte saklanır ve hesabınızı silince silinir. Satın almalar: App Store / Google Play üzerinden işlenir; kart bilgileriniz sunucularımıza ulaşmaz (abonelik yönetimi: RevenueCat). Reklamlar: yalnızca ücretsiz katmanda (Google AdMob); Pro reklamları kaldırır. Silme ve haklarınız (KVKK/GDPR): [email protected] adresine yazın; 30 gün içinde yanıtlarız.