Honest photo restoration · for your family, not your followers
Heirloom: Restore Photos for Android · Developer: WiM Labs · package com.wimlabs.heirloom
Effective: June 27, 2026 · Last updated: October 28, 2026
The short version: Heirloom restores one photo at a time. The photo you choose is sent over an encrypted connection, restored in temporary server storage, and returned to your phone. The server copy is deleted when the request finishes. We do not keep a cloud photo library, require an account, show ads, sell personal data, or use photos for AI training.
This Privacy Policy applies to Heirloom: Restore Photos for Android ("the App"), developed by WiM Labs ("we," "us," "our").
Heirloom repairs old, torn, faded, or damaged family photos. You pick a photo; the App sends it to our restoration service, which mends damage, restores the face, sharpens, checks that the restored face still matches the original person, and (for black-and-white photos) adds color. The restored image is returned to you. That's the whole product.
When you tap to restore a photo, that single image is transmitted over an encrypted (HTTPS/TLS) connection through Cloudflare to our restoration backend on Google Cloud. The service uses an isolated temporary working directory while the models run. That directory, including the original and restored files, is deleted automatically when the request finishes. The result is streamed back and kept in the App's private cache on your phone until Android clears it, you clear App data, or you uninstall the App. We do not put photos in a cloud photo library, database, or model-training dataset.
As part of restoration, the service temporarily computes face embeddings and a numeric similarity score comparing the face in the restored image with the original. This lets the App warn you when the result may depict the person inaccurately. The embeddings exist only during that request and are not retained or used to identify you. The score is returned to the App and is not retained by the restoration service.
If you buy a restoration-credit pack, the transaction is handled by Google Play Billing. Our server receives the product ID, an opaque purchase token, order information, purchase region, and purchase status so it can verify the purchase with Google, grant the correct credits, prevent duplicate grants, process refunds or cancellations, and consume an exhausted pack so it can be purchased again. We never receive your Google account email, name, card number, or payment details.
Heirloom provides three free restorations. To prevent the trial from resetting whenever App data is cleared or the App is reinstalled, the App creates a one-way hash from an Android app-scoped device identifier and sends only that hash to our server. The raw Android identifier is not transmitted. Our server stores the hash and remaining free-credit balance. The hash is not your email, name, advertising ID, or precise location.
The App uses Google Play Integrity when it requests a restoration session. Google checks whether the App is Play-installed, recognized, licensed, and running on a device that meets its integrity requirements. Our server receives the resulting integrity verdict and a request-bound verification token. This protects paid restoration compute from modified or unlicensed clients.
Every completed result includes a "Report a problem" control. If you use it, we receive the reason you select, optional text you enter, the App version, and limited facts about the result such as whether colorization ran and whether the identity check warned or was unavailable. The original and restored photos are not included. Reports are kept for up to 90 days so we can investigate safety and quality problems.
Cloudflare and Google Cloud may process standard network and service information such as an IP address, request time, response status, and diagnostic logs to deliver, secure, and operate the service. We do not add analytics or advertising tracking and do not use this information to build a user profile.
Cloudflare provides the secure gateway that streams each restoration request to our backend and accepts user-submitted problem reports. Photos are not stored in the report database. See Cloudflare's privacy policy: cloudflare.com/privacypolicy.
Purchases are processed by Google Play. See Google's privacy policy: policies.google.com/privacy.
Google Play Integrity verifies that restoration requests come from the recognized, Play-licensed App and an eligible device. It does not give us your Google account email or payment details.
Our restoration service and all five image models run on Google Cloud infrastructure. Files are created only in temporary request storage and deleted when processing ends. Photos are not sent to a separate third-party AI inference provider.
| Data | Where | Retention |
|---|---|---|
| Your photo (original & restored) | Cloudflare transit; temporary Google Cloud request storage; App cache | Server copy deleted at request end; App cache remains until cleared, or you save/share it |
| Temporary face embeddings | Google Cloud request memory | Deleted at request end |
| Face-match score | Computed on Google Cloud and returned to the App | Not retained by the service |
| Problem report | Cloudflare KV | Up to 90 days; no photo included |
| Purchase and credit ledger | Google Play + Cloudflare D1 | While credits remain and afterward as reasonably needed for refunds, fraud prevention, accounting, and legal obligations |
| Hashed app-scoped identifier and free-trial balance | Cloudflare D1 | While the service operates, unless deletion is required or requested where applicable |
| Restoration session | Cloudflare D1 | Up to 30 days |
We do not use your photos to train any AI model — not ours, not anyone's. Your images are used solely to produce the restoration you asked for, and are discarded afterward.
Heirloom's identity check temporarily converts detected faces into mathematical embeddings solely to compare the original and restored versions within the same request. The service does not retain those embeddings, enroll them in a database, match them against other people, or use them to determine who someone is.
Heirloom is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has used the App in a way that provided us personal information, contact us and we will address it.
Because we don't keep a photo library or user account, there is no persistent photo profile to access or delete. Specifically:
Heirloom's initial Google Play launch is available in the United States. Paid packs are accepted only when Google Play reports the purchase region as the United States.
We may update this Privacy Policy from time to time. Changes are posted to this page with a new "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.
WiM Labs (George Abrahamyants)
Email: gugosf@gmail.com
GitHub: github.com/gugosf114/heirloom-android