Clear choices. Careful handling.

1. Summary

• Winku is an iPhone photo-editing app for restoring old photos and applying seasonal film effects.
• Winku stores its profiles, settings, originals, and creations locally on your device. Winku does not operate an app server or provide cloud synchronization.
• Winku does not require registration or sign-in. Your editable profile and library are stored on this device.
• Seasonal Film processing happens on your device. Restore, Colorize, and Revive Colors send the photo you choose and related processing instructions to SiliconFlow for AI processing.
• We do not sell personal information or share it with data brokers.

2. Information We Process

2.1 Information you provide or select

Depending on how you use Winku, the App processes:

• Photos you select from the system photo picker or capture with the camera.
• A nickname and optional profile photo when you edit your local profile.
• Your selected restoration operation and damage tags, such as scratches, fading, blur, noise, or automatic restoration.
• Crop, rotation, straightening, seasonal film recipe, intensity, grain, and light-leak choices.

Photos can contain faces, documents, location clues, or other sensitive content. Only use photos that you are authorized to process and share.

2.2 Information generated or saved by the App

Winku may generate or save:

• Original imported photos, temporary working copies, restored or colorized results, seasonal film results, and an optional profile photo.
• Creation metadata, including creation identifiers, profile ownership, crop transforms, film adjustments, selected damage tags, whether an image was classified as monochrome or color, active result type, and creation/update timestamps.
• Local profile information, including profile type, nickname, profile creation/update timestamps, and the date when the AI Processing Notice was accepted.
• Local preferences, including onboarding completion and the last selected season.
• A local profile identifier in iOS Keychain. Older installations may retain legacy identifiers solely to reopen their existing on-device library; Winku does not send these identifiers to an authentication service.

Winku does not intentionally read photo location metadata. AI input is re-rendered as a JPEG before upload, but you should still avoid submitting photos containing sensitive visual information that is not needed for the requested edit.

2.3 Information not intentionally collected for current features

The current version does not intentionally collect or request:

• Contacts or address-book data.
• Precise location or background location.
• Microphone audio.
• Health or fitness data.
• Payment card or purchase information.
• Advertising identifiers or cross-app tracking data.
• Free-text AI prompts written by you.

3. How We Use Information

Winku uses the information described above to:

• Import, edit, render, organize, compare, save, and share the photos you choose.
• Perform local seasonal film processing.
• Request AI photo restoration, colorization, or color revival when you explicitly continue to AI processing.
• Open your local profile and library and preserve existing on-device data when the app is updated.
• Remember local preferences and your acknowledgement of the AI Processing Notice.
• Diagnose failures through on-device errors and a bounded in-memory log of operation categories, anonymous job identifiers, error categories, timestamps, and preview timing. Winku does not automatically send diagnostics, analytics, or crash reports to us. These logs do not contain photos, prompts, names, credentials, or local paths.

4. Where Data Is Stored

• Winku stores structured records in an on-device SQLite database and stores photos and generated files in the App's local sandbox.
• The App stores its active local profile identifier in iOS Keychain. Database records and media files use a local profile identifier to associate your creations with their library.
• Winku marks its managed Winku media directory as excluded from device backup. Winku does not provide its own cloud backup, account server, or cross-device library synchronization. Operating-system handling of the SQLite database, Keychain, system Photos library, and device backups may still depend on your Apple and device settings.
• Temporary processing files are stored locally. On launch, Winku attempts to remove temporary directories older than 24 hours and orphaned creation folders.
• Saving a result to Photos creates a copy in your system Photos library. That copy is then controlled by your Photos and iCloud Photos settings, not by Winku's in-app deletion controls.
• Sharing a result opens the iOS share sheet. A copy sent to an app, person, or service you choose is handled under that destination's terms and privacy practices.

5. Third-Party Processing

5.1 SiliconFlow

Winku uses SiliconFlow for optional AI features:

• The prompt-generation request includes the requested operation, selected damage tags, and Winku's fixed editing instructions. It does not include the photo, nickname, profile identifier, local path, filename, or creation identifier.
• The image-editing request includes a transformed JPEG copy of the selected photo, the generated prompt and negative prompt, the requested output size, and model parameters.
• SiliconFlow returns an AI-generated result through its service; Winku downloads the result and stores it locally when the operation succeeds.
• Photos may reveal personal information about people shown in them even when Winku does not send profile identifiers with the request.
• SiliconFlow processes submitted data under its own Privacy Policy and Terms of Service. Its retention, security, international processing, and data-use practices are governed by those documents.

Winku records the local date of your acceptance of the AI Processing Notice. You can decline the notice; if you do, Winku does not start that AI request. Seasonal Film remains a local feature and does not require SiliconFlow.

6. Permissions and System Features

• Camera: Requested only when you choose to take a photo. The captured photo is used for the edit or profile photo you selected.
• Photos selection: Winku uses the iOS system photo picker so you can choose a photo to import. The App does not request access to browse your entire photo library for its main import flow.
• Add to Photos: Requested only when you choose Save to Photos. It is used to write the selected result to your Photos library.
• Network: Used for optional SiliconFlow AI requests, downloading AI results, and opening external legal or support destinations you select.
• Share sheet: Used only when you choose Share. You decide the destination and recipients.

The current app configuration does not request microphone, contacts, precise location, Bluetooth, motion, health, or tracking permission.

7. Data Sharing and Selling

• We do not sell personal information or share it with data brokers.
• We do not use advertising, attribution, analytics, or third-party crash-reporting SDKs in the current version.
• Information is sent to SiliconFlow only for an AI operation you choose, as described above.
• Photos are shared with another app, service, or person only when you choose a destination through the iOS share sheet.
• We may disclose information if required by applicable law or legal process. Because Winku has no app-operated server, we ordinarily do not possess your local Winku library.

8. Data Retention and Your Controls

• Local profiles, metadata, originals, and creations remain on the device until you delete them, clear the relevant profile data, or uninstall the App, subject to operating-system storage and backup behavior.
• Delete Creation removes that creation's local database record and its original and generated Winku files. Copies previously saved to Photos or shared elsewhere are not removed.
• Clear Current Profile Data removes the current profile's creations, avatar, active editing draft, AI-notice acceptance timestamp, and profile-specific settings. It keeps the local profile, resets its nickname to the default, and leaves other profiles unchanged.
• Remove Photo removes the current locally stored profile photo.
• Winku attempts to remove editing drafts when you finish, discard, or clear profile data. Files left after interruptions or failed cleanup may remain until a later launch cleanup pass after they are more than 24 hours old.
• Deleting local Winku data does not delete information already processed or retained by SiliconFlow. SiliconFlow's retention and request mechanisms are governed by its privacy policy.
• Uninstalling Winku generally removes its app-sandbox data from the device, subject to iOS, Keychain, and backup behavior. Copies in Photos or at destinations you chose to share with remain outside Winku.

Winku does not currently provide a bulk data export. You can export individual creations using Save to Photos or Share.

9. International Data Transfers

When you use online features, relevant information may be processed by SiliconFlow or its infrastructure in countries or regions other than your own, as described in their applicable privacy documents.

10. Children's Privacy

Winku is not directed to children under the age required by applicable law to independently consent to the processing described in this policy. If you are not permitted to consent on your own, use the App only with the authorization of a parent or legal guardian.

11. Security

Winku relies on the iOS app sandbox for local files, iOS Keychain for the local profile reference, and profile identifiers in its local database. No storage or transmission method is completely secure, and third-party processing is subject to the provider's own safeguards and policies.

12. Changes to This Policy

We may update this Privacy Policy when Winku's features or data practices change. We will update the "Last Updated" date and publish the revised version with the App or on its distribution page.

13. Contact

If you have questions, privacy requests, or complaints about this Privacy Policy, contact us at [email protected].

See also the Winku Terms of Use and Winku website.