Privacy Policy
PosuraLast updated 7 August 2026
Posura has no accounts, no sign-up and no passwords. We never ask for your name, your email address or your phone number, and we do not build a profile of you.
The short version. Your photos are processed to create a glow-up and are not kept on our servers. We do not sell your data, we do not show ads, and we do not track you across other apps or websites.
Who we are
Posura ("we", "us") is the developer of the Posura iOS app. For questions about this policy or about your data, contact hello@posura.app.
What we collect
An anonymous ID
The first time you open Posura, the app creates a random anonymous identifier. It is a machine-generated string of characters. It is not linked to your name, your Apple ID, your email or your device's advertising identifier, and it is not shared with anyone except the service providers listed below. Its only job is to keep your subscription and your remaining coins attached to you.
If you delete and reinstall the app, a new anonymous ID is created and the old one is no longer associated with you.
Photos you choose to enhance
When you take a photo in Posura or pick one from your library and apply a Cam, that single image is sent to our server, which passes it to our image-processing provider to generate the enhanced version. The result is returned to your device.
- We do not store your photos in our database.
- Our processing provider holds the image temporarily to run the job and deletes it automatically after approximately three days.
- For each job we store a record containing only: the job's ID, your anonymous ID, whether the job succeeded or failed, whether it was refunded, a temporary link to the generated result, and the time it was created. This exists so that a failed generation refunds the right person, exactly once.
Photos you do not enhance are never uploaded. The camera preview is live only — it is not recorded or transmitted.
Purchase information
If you subscribe, Apple processes the payment. We never see your card details. Our payments provider receives your anonymous ID and the details of the transaction (which product, whether it is active, when it renews) so we know whether your subscription is valid and how many coins to grant.
What stays on your device
Your gallery of glow-ups, the originals behind them, your saved favourites and your coin balance are stored locally on your iPhone. Deleting the app deletes all of it.
What we do not collect
- No name, email address, phone number or postal address.
- No contacts, location, health data or browsing history.
- No advertising identifier (IDFA). We do not run ads and we do not track you across other companies' apps or websites, so we never ask for tracking permission.
- No scanning or indexing of your photo library. The app only reads the specific photos you select.
Permissions the app asks for
Permission — Why
Camera — To show the viewfinder and take a photo. The preview is never recorded or uploaded.
Photo Library (read) — Only so you can pick an existing photo to enhance.
Photo Library (add) — Only to save a finished glow-up when you tap Save to Photos.
You can change any of these at any time in iOS Settings › Posura.
Service providers
We use a small number of processors. Each receives only what it needs to do its job.
Provider — What it receives — Why
Supabase — Anonymous ID, job records — Our backend and database
Kie.ai — The photo you chose to enhance — Runs the image generation; deletes the image after about three days
RevenueCat — Anonymous ID, subscription status — Manages subscriptions and the coin ledger
Superwall — Anonymous ID, coin balance — Displays and measures the subscription screen
Apple — Payment details — Processes all purchases; we never see your card
We do not sell or rent personal information to anyone, and we do not share it for advertising.
How long we keep things
- Your photos: not retained by us; deleted by our processing provider after approximately three days.
- Job records: retained while they may still be needed for refunds and support, and deleted within 12 months.
- Subscription records: retained by our payments provider for as long as your subscription is active and afterwards as required for accounting and tax.
Your rights
Depending on where you live (including under the GDPR in the EU/UK and the CCPA in California) you may have the right to access, correct, export or delete your personal information, and to object to certain processing.
Because Posura holds no name or email, the practical routes are:
- Delete everything on your device: delete the app.
- Delete our server records: email hello@posura.app. We will ask you to send the request from the device so we can identify which anonymous ID to remove, then delete the associated records.
- Cancel your subscription: iOS Settings › your name › Subscriptions. Apple controls cancellations and refunds, not us.
You also have the right to complain to your local data protection authority.
Children
Posura is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has used the app and you want their data removed, contact us.
International transfers
Our providers operate servers in the United States and the European Union, so your data may be processed outside your country. Where required, transfers rely on the European Commission's standard contractual clauses.
Security
Traffic between the app, our server and our providers is encrypted in transit (HTTPS). Our database rejects all direct client access — only our server can read or write it, so one user's records are never reachable by another. No system is perfectly secure, and we cannot guarantee absolute security.
Changes
If this policy changes materially we will update this page and the date at the top. Continuing to use Posura after a change means you accept the updated policy.