1. Who this policy covers

This Privacy Policy describes how TimeLens(“we”, “us”) collects, uses and protects information in connection with the TimeLens iOS application (bundle identifier com.aimaster.timelens) and the website at timelens.space.

TimeLens is an AI photo-effects app. You give it a photo, choose an effect, and receive a transformed version of that photo. Nearly everything in this policy follows from that single flow.

2. The short version

• No account. TimeLens does not ask for your name, email address, phone number or a password. There is no profile and no social graph.
• Your photos are processed, not collected. A photo you submit is transmitted to our gateway, passed to the AI provider that performs the transformation, returned to you, and then removed from our systems.
• We never use your photos to train AI models — not ours, and we instruct our provider not to use them for theirs.
• We do not sell, rent or licence your photos or your personal information to anyone, for any purpose, including advertising.
• No third-party advertising or cross-app tracking.TimeLens contains no advertising SDKs and does not track you across other companies’ apps or websites.

3. Information we handle

3.1 Photos and generated images

When you select an effect and confirm, the photo (or photos — a few effects take two) is uploaded over an encrypted TLS connection to our gateway. The gateway forwards the image together with the effect’s prompt to the AI provider, receives the generated image, and returns it to your device.

Your photo is only uploaded at the moment you tap to generate. Browsing the effect catalog, opening the app, or selecting an image in the picker does not upload anything. TimeLens requests access to your photo library solely so you can choose an image; it does not read, index or scan your library.

3.2 A device identifier

The app generates a random identifier the first time it launches and stores it on your device. We use it to count your free generations, to remember that your one-time free onboarding effect has been used, to attribute a subscription to the right device, and to apply per-device cost limits that stop the service being abused.

This identifier is not derived from your Apple ID, your phone number, your hardware serial or your advertising identifier. It is not linked to your name and cannot be used to identify you outside TimeLens. Deleting and reinstalling the app produces a new one.

3.3 Generation and usage records

For each generation we record which effect was used, whether it succeeded or failed, how long it took, which provider ran it, its cost to us, and the device identifier it belongs to. We use these records to operate the service — to detect broken effects, enforce cost caps, size capacity and decide which effects to build next. They contain no image data.

3.4 Subscription and purchase information

Subscriptions are sold through Apple. Apple processes your payment and tells us, through our subscription infrastructure provider, whether the device holds an active entitlement and whether it is in a trial. We never see or store your payment card, billing address or Apple ID.

3.5 Diagnostics

Our servers keep standard operational logs (timestamps, request paths, response codes, coarse error messages) for a short period, which is necessary to keep the service running and secure. Apple may also provide aggregate crash and performance statistics if you have opted in to share analytics with developers in iOS Settings; that choice is entirely yours and is made in iOS, not in TimeLens.

3.6 The website

timelens.space is a static marketing and policy site. It sets no advertising or analytics cookies and does not fingerprint visitors. The only cookie the site can set is a strictly necessary session cookie used by the private administrative area, which is not reachable by visitors.

4. How your photo is processed

Image transformation is performed by Google’s Gemini image models, accessed through the Google Gemini API. Certain effects may instead be routed to OpenAI’s image models. In both cases the provider acts as our processor: they receive the image and the prompt, generate a result, and return it.

We use the paid API tiers of these providers, under terms which state that customer content submitted through the API is not used to train their models. We do not opt in to any programme that would allow your photos to be used for model improvement, and we do not permit human review of your content for product development.

Photos are transmitted to the provider over encrypted connections. The provider may retain the request transiently for abuse detection in accordance with their own policies; it is not retained by us beyond what is described in section 6.

5. Who else is involved

These are the only categories of third party that touch data related to TimeLens.

We may also disclose information where we are legally required to, or where it is necessary to investigate fraud, abuse or a security incident. We will not hand over your photos in response to an informal request.

6. How long we keep things

• Uploaded photos: held only for the duration of the generation job, then discarded.
• Generated images: stored briefly so the app can fetch the result reliably, then deleted on a short rolling schedule. Your own saved copy on your device is unaffected and is yours.
• Generation records: retained in aggregate for operational analysis. They contain no image data.
• Server logs: retained for a short period for security and debugging, then rotated out.

7. Legal bases for processing

If you are in the United Kingdom, the European Economic Area or Switzerland, we rely on the following bases under the UK GDPR / EU GDPR:

• Performance of a contract — processing your photo to produce the image you asked for, and managing your subscription.
• Legitimate interests — keeping the service secure and available, preventing abuse, enforcing cost limits and understanding aggregate usage. We have assessed that these interests do not override your rights.
• Legal obligation — where we must retain or disclose information by law.

A photograph of an identifiable person may constitute biometric or special-category data in some jurisdictions. Where that is the case, we process it on the basis of your explicit consent, which you give by choosing an effect and confirming the generation. You may withdraw that consent at any time by not submitting further photos, and by deleting the app.

8. Your rights

Depending on where you live you may have the right to access, correct, delete, restrict or object to our processing of your personal information, to receive a portable copy of it, and to complain to a data protection authority. California residents have equivalent rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them.

We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not process it for cross-context behavioural advertising.

Because TimeLens has no accounts, the fastest way to delete everything associated with you is to delete the app, which destroys the device identifier that all our records are keyed to. If you would like us to act on a request directly, email [email protected]. To locate your records we may need the device identifier shown in the app’s settings screen; we will not ask you for identity documents.

9. Children

TimeLens is not directed at children. You must be at least 13 years old (or the minimum age of digital consent in your country, if higher) to use it, and if you are under 18 you should have a parent’s or guardian’s permission. We do not knowingly collect information from children under 13. If you believe a child has submitted photos to us, contact us and we will delete the associated records.

10. International transfers

Our providers operate globally, so your photo may be processed on servers outside your country, including in the United States. Where personal data is transferred out of the UK or EEA, those transfers are covered by the recipients’ Standard Contractual Clauses or an equivalent approved transfer mechanism.

11. Security

All traffic between the app, our gateway and our providers is encrypted in transit with TLS. Provider API keys are held only on our servers and never shipped inside the app, which is the main reason the gateway exists. Administrative access is restricted, authenticated and short-lived. No system is perfectly secure, but we design for the smallest possible amount of retained data, because data we do not keep cannot be breached.

12. Changes to this policy

If we change this policy we will update the effective date at the top of this page, and for material changes we will surface a notice in the app. Continuing to use TimeLens after a change means you accept the updated policy.

13. Contact

Questions, requests or complaints: [email protected]. See also our Terms of Service.