Legal

Privacy Policy

Effective 10 November 2026 · Zeki Tolunay Dönmez, sole proprietor, Türkiye

Also available in Türkçe.

This policy describes what Toneli collects, who processes it, how long it is kept, and what you can ask us to do with it. It describes what the app actually does, not what a template says an app might do.

01 Who we are

Toneli is operated by Zeki Tolunay Dönmez, a sole proprietor established in Türkiye, acting as data controller. You can reach us at support@toneli.app for any question in this policy, including access and deletion requests.

02 What we collect

Crash reports never contain your photographs, your email address or your account identifier: screenshots are switched off, account identifiers and email addresses are removed before a report is stored (on your device for errors in the app, and on the crash-reporting service’s servers for system-level crashes), and your IP address and the location it implies are not stored.

Usage steps are not linked to your account either: they carry no account identifier, email address, photograph or text you typed, only a random identifier that is deleted with the app. We use them only to see where the app gets in people’s way.

We do not collect your contacts, your location, your browsing activity, or advertising identifiers. We do not sell personal data and we do not show advertising.

03 Photographs you publish

04 Who processes your photographs

Editing happens on external AI infrastructure. Your photograph leaves our storage and is sent to the processor listed below for the duration of the edit. This is the part of this policy we most want you to read.

Except for email delivery and crash reports, which are handled and stored inside the European Economic Area, these processors operate outside Türkiye and outside the European Economic Area. Transfers are made because they are necessary to provide the service you have asked for, and we send only what the specific operation requires.

Colour and tone presets are applied entirely on your device, so no AI processor receives those photographs. The original and the result are still saved to your Toneli account in Supabase storage, like any other edit, and follow the retention periods below.

Face data

Toneli does not create face templates or face geometry, does not recognise or identify anyone, and does not use Face ID or the TrueDepth camera. Your photograph itself, including every face in it, is uploaded to our storage and sent to the processors in the table above. In detail:

• Our storage (Supabase): the photograph you upload is kept for 30 days, and results for the periods in section 05. Everything is deleted with your account.
• fal.ai receives the photograph for every AI edit, analysis, content check and person check, and passes it to the company that runs the model: Google Gemini for editing and, through OpenRouter, for analysis and content checks; Topaz Labs for upscaling; Bria for background removal. For analysis, content checks and person checks we tell fal not to store the request. For edits, fal keeps a copy until we delete it, as described in the table above.
• What these companies say they keep: Google logs Gemini requests for a limited period, only to detect abuse, and does not use them to improve its products. OpenRouter does not store requests by default. Bria does not store request content unless a product’s documentation sets a storage period. Topaz Labs keeps personal information as long as needed for the purpose it was collected, with no fixed period. These statements come from each company’s published terms; we cannot inspect their systems.
• On iPhone and iPad, Apple’s Vision framework, on your device, finds where faces are and outlines the people in the photograph, so an edit stays on the person you picked and a crop does not cut through a face. These positions and outlines never leave your device. The outline is a temporary file in the app’s own storage, normally deleted when the edit finishes or when you choose another photograph, and always when the app is deleted.
• For styles that need a person, fal.ai checks the photograph for faces and people. From its answer we use only the number of faces and the size of the largest one, and keep those two numbers in our server logs for up to 7 days.
• Photo analysis may suggest fixes such as closed eyes or red-eye. The suggestions are shown to you and are not stored by us.

We never use faces for advertising, profiling or to train AI models, and we never sell them.

05 How long we keep it

• Photographs you upload: deleted after 30 days.
• Edited results: 30 days on the free plan, 12 months on Basic, kept indefinitely on Ultra.
• After a subscription ends: your results are protected for a further 90 days, then move to the free plan's period.
• Published posts: the public copy is deleted the moment you remove the post.
• Account data: deleted when your account is closed, along with everything linked to it.
• Crash reports: deleted automatically after at most 90 days. They are not linked to your account, so they expire on this schedule rather than with the account.
• Usage steps: deleted automatically after 90 days, on the same schedule as crash reports.
• Moderation records: reports and the actions taken on them are kept while the account exists, so that a decision can be explained or appealed.

06 Why we are allowed to process it

We process your account details and your photographs to perform the contract you enter into when you use the app. We process crash reports and usage steps on the basis of our legitimate interest in keeping the app working and improving it. We process moderation data on the basis of our legitimate interest in keeping the community safe and in meeting the obligations app stores place on services that host user content. Where we ask for consent, notifications for example, you can withdraw it at any time in Settings.

07 Your rights

Under Türkiye's Personal Data Protection Law (KVKK) and, where it applies to you, the EU General Data Protection Regulation, you may ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to a particular use.

08 Children

Toneli is not intended for children under 13, and under 16 in countries where that is the applicable age. We do not knowingly collect data from children. If you believe a child has an account, write to us and we will remove it.

09 Security

Private photographs are stored in private buckets and served only through short-lived signed links. Access is enforced at the database level rather than only in the app, so a request that is not yours returns nothing. Payment card details never reach us; Apple or Google Play handles them.

10 Changes

If we change this policy we will update the effective date above, and we will tell you in the app when a change is material.