Picture Medic

Privacy policy

Last updated 15 September 2026

These are the photographs you keep in a box, of your parents, your grandparents, people who are no longer here. We treat them as carefully as you do. This page explains, in plain language, what we hold, what we do with it, who else is involved, and how to get it back or have it deleted.

1. Who we are

Picture Medic ("we", "us", "our") operates picturemedic.com and provides photograph restoration. We are the controller of the personal data described here. For anything on this page, write to hello@picturemedic.com or use the contact form.

2. What we collect

2.1 What you give us

• Account details: your email address, and your password stored only as a bcrypt hash, we never keep the password itself and cannot read it.
• Your photographs: the photographs you upload, and the repaired versions we produce from them.
• What you ask for: the settings you choose (how strong a repair, colour or not), and any requests you make, such as asking for the clean copy or for a repair to be done again.
• Messages you send us: anything you write to us by email or through the contact form.

2.2 What is collected automatically

• Technical data: IP address, browser and device type, and the times you use the service. This is used to keep the service running, to keep accounts secure, and to stop abuse such as automated account creation.
• Cookies: one essential cookie, which keeps you signed in to your account. We do not use advertising cookies and we do not run third-party trackers.

3. What we do with it

• To do the thing you asked for: repair your photograph, show it to you in your photographs page, and email it to you.
• To run your account: sign you in, remember your photographs, and keep your credit and receipts in order.
• To keep the service honest and safe: detect abuse, prevent accounts being created automatically, and enforce our terms.
• To answer you: reply to what you write to us.
• To meet the law: where we are required to keep or disclose something.

We do not send marketing email, and we do not use your photographs to advertise anything.

4. Who else is involved, and yes, your photograph is shared

We do not sell, rent or trade personal data. To provide the service we use a small number of providers, and there is one thing you should know clearly:

• Image processing, your photograph is sent to a third party. The repair is carried out by an AI image model, Google's Gemini image model, reached through Google's API. Your photograph, together with the instructions for the repair, is transmitted to Google so that the model can produce the restored version. Without this, the service could not exist at all. Google processes that content under its own API terms, and we send nothing to Google beyond the photograph and the repair instructions, no name, no email address, no account details.
• Email delivery: our emails, your repaired photograph, your sign-in messages, our replies, are sent through Resend, which handles your email address and the contents of the message.
• Hosting: the service runs on servers we control, provided by our hosting provider, which stores the data described on this page on our behalf.
• Legal requirements: we may disclose information where the law requires it, or where it is necessary to protect someone's safety or our rights.
• If the business is sold: your data could transfer as part of that sale. We would tell you before that happened.

Training AI: we do not use your photographs to train AI models, and we do not allow anyone else to. The provider we use for the repair is engaged only to produce your result.

5. How long we keep it

• Photographs, 60 days. Both the photograph you sent and the repaired version are deleted from our servers 60 days after upload. The date is shown to you in your photographs page for each photograph, and it applies whether you paid for a clean copy or not. If you want a copy, download it before then, after that it is gone.
• Account details: kept for as long as your account is open.
• Messages you send us: kept for up to 12 months, so we can follow up on what we discussed.
• Records of payments: kept as long as the law requires for accounting purposes.
• Back-ups: our back-ups roll over on a short cycle, so a deleted photograph may persist in a back-up for a few days longer before it is overwritten.

6. Keeping it safe

• Everything travels over TLS (HTTPS).
• Passwords are stored only as bcrypt hashes.
• Photographs are reached through links that are unguessable and can be revoked, and your photographs page is only reachable by signing in.
• Access to the data is limited to what is needed to run the service.

No system is perfect. If there were ever a breach affecting your data, we would tell you and the relevant authority, as the law requires.

7. Your rights

You can ask us to:

• Show you what we hold about you.
• Correct anything wrong.
• Delete your account and your photographs, we will do this promptly, and sooner than the 60 days if you ask.
• Send you a copy of your data in a usable format.
• Stop a particular use of your data, or withdraw a permission you gave.

Write to hello@picturemedic.com, and we will answer within 30 days. If you are in the European Economic Area or the United Kingdom, our basis for processing is the contract between us (repairing your photograph), our legitimate interest in keeping the service safe, and your consent where we ask for it.

8. Children

You must be at least 13 to hold an account. Photographs of children are, of course, exactly the kind of photograph people bring to us, a parent or guardian sends them on the child's behalf, and that is fine. We do not knowingly collect personal data from children under 13.

9. Where your data is held

Our servers and the providers we use may be located outside the country you live in, including in the European Union and the United States. Where data is transferred, we rely on our providers' contractual safeguards for that transfer.

10. Changes to this policy

If we change how we handle your data, this page changes and the "last updated" date at the top changes with it. For anything significant, we will tell you by email before it takes effect.

11. Contact

Questions about any of this, or a request about your own data:
Email: hello@picturemedic.com
Or use the contact form.

← Back to Picture Medic