Tonvra privacy policy

Summary

• Your photos never leave your phone. Tonvra has no server of its own, does not sync to the cloud and does not send your images, edits or metadata to anyone.
• We collect anonymous usage data (which panels are opened, whether an export finishes successfully) to improve the app, never the content of your photos.
• If you use the free version, ads from Google AdMob are shown; you can manage your consent at any time.
• If you subscribe to Tonvra Pro, Google Play processes the payment and RevenueCat handles subscription management.
• We do not use artificial intelligence to analyze or modify your photos. The only exception is a face detector that runs entirely on the device, only to place an editing template (see below).

1. Data about your photos and edits

• The photos you import, thumbnails, previews and the edit document (JSON with your adjustments) are stored only in your device's local storage (the app's own database and files).
• None of this is transmitted to Tonvra or to third parties. There is no user account or cloud backup.
• If you uninstall the app or clear its data, this information is lost (except the original photos, which stay in your gallery if you imported them from there).
• Tonvra asks for access to your photos (photo or file picker) only so you can choose what to import; the rest of your gallery is not accessed without your explicit selection.

Face detection for the retouch template (Pro)

For the face retouch tool, Tonvra uses Google ML Kit in its fully local (on-device) mode to automatically set the starting position of the point template over the face. This process:

• Runs on your device, without an internet connection and without sending the photo or the result to any server.
• Only determines the position of the face in the image; it does not identify the person, does not compare it with any database and does not store any biometric data.
• From there, all editing (guide points, sliders) is manual and under your control.

2. Usage data and analytics (Firebase Analytics)

We use Firebase Analytics (Google) to understand how the app is used in aggregate: which screens and panels are opened, whether an import or export completes, whether a Pro feature notice is shown, etc.

• These events do not include the content of your photos or your edits, only screen, panel or feature names, and an indicator of whether your plan is Free or Pro.
• Firebase may associate these events with an installation/device identifier under its own policies. You can see how Google handles this data in the Google privacy policy.
• We explicitly configure Firebase consent to allow usage analytics but not ad storage or ad personalization (ad_storage, ad_user_data and ad_personalization disabled): Firebase is not used for advertising in this app.

3. Advertising (Google AdMob) — free version only

If you use Tonvra without a Pro subscription, the app shows ads (banner, full-screen after export, and rewarded ads) through Google AdMob. Tonvra Pro users never see ads.

• Before requesting any ad, we show Google's consent form (UMP) when your region requires it (for example, the European Economic Area and the United Kingdom), so you can decide whether to accept personalized ads, only non-personalized ones, or none.
• AdMob may use device identifiers (such as the Android advertising ID) and ad interaction data to serve ads and measure their performance, depending on your consent.
• You can change your decision at any time from Settings › Ad privacy inside the app.
• More information: Google privacy policy and how Google advertising works.

4. Pro subscription and purchases (Google Play / RevenueCat)

Tonvra Pro is offered as a monthly or yearly subscription managed by Google Play and technically administered with RevenueCat.

• The payment itself is processed by Google Play; Tonvra does not receive or store your card or payment method details.
• RevenueCat receives an anonymous user identifier and data about the subscription itself (plan, start/renewal date, status) to validate your right to Pro features and show your subscription status in the app (for example, in the Customer Center and in "Restore purchases").
• More information: RevenueCat privacy policy and Google Play privacy policy.

5. Device permissions

Tonvra only asks for the permissions it needs to work:

• Photos / storage, through the system photo picker or file picker, to choose what to import.
• Save to the gallery, to save your exports.
• Access to the camera, microphone, contacts or real-time location is not requested. If your photos include location (GPS) data in their EXIF metadata, you decide on each export whether it is kept or removed.

6. Who we share data with

We do not sell your data. The only third parties that receive any data, and only what is strictly necessary for the function they provide, are:

7. Minors

Tonvra is not directed at children under 13 and does not knowingly collect data from children of that age. Ads are not configured as directed at a child audience.

8. Your rights

Depending on your country of residence (for example, under the GDPR in the European Union), you may have the right to access, rectify, delete or restrict the processing of your data, and to object to personalized advertising.

• Since your photos and edits exist only on your device, you can delete them at any time by removing them in the app or uninstalling it.
• To exercise rights over analytics, advertising or subscription data processed by Google or RevenueCat, you can write to us at contacto@rossbtv.com or contact those providers directly through the links in this policy.

9. Changes to this policy

We may update this policy if the app's features or applicable regulations change. We will publish the current version on our website and, if the change is significant, indicate it inside the app.

10. Contact

• Email: contacto@rossbtv.com
• Website: https://tonvra.rossbtv.com/