Effective date: October 8, 2026 · Last updated: October 8, 2026
This Privacy Policy ("Policy") describes how Pace Tech ("Pace Tech", "we", "us" or "our") collects, uses and shares information in connection with the Photold mobile application (the "App") and the Photold pages and purchase flow on pacetech.co (the "Website"). It applies to all users, regardless of country.
By downloading, installing or using the App or the Website you confirm that you have read this Policy. If you do not accept it, please stop using the App and the Website.
co.pacetech.photold)For the purposes of the EU/UK General Data Protection Regulation, the United Kingdom Data Protection Act 2018, the California Consumer Privacy Act / CPRA and the Turkish Personal Data Protection Law (KVKK), Pace Tech acts as the data controller for the information described below. The service providers listed in Section 7 process information on our behalf or, where stated, as independent controllers under their own privacy policies.
This summary is provided for convenience. The remainder of the Policy is what binds the parties.
On first launch the App creates an anonymous account with a random identifier. If you sign in with an e-mail link, we process your e-mail address; if you sign in with Google on Android, we receive your e-mail address and Google account identifier. If you buy on the Website, we receive your e-mail address, name and country from the checkout and use them to create or link your account and to send you sign-in and order e-mails.
When you scan a printed photograph or import an image, the App processes it to crop, correct and edit it. Photos you save to your Photold library, together with their thumbnails, albums and scan details, are stored on your device and in our cloud storage (Google Firebase), linked to your account, so that your library is kept if you reinstall the App or sign in on another device. Embedded location metadata (EXIF) is removed from library photos before they are stored. Photos you save to your device's photo library are controlled by you.
When you start an AI feature (for example, colorize, restore or animate), the App sends the selected image(s) and the options you chose through our servers to our AI providers: Google (Gemini API) and eachlabs, which may run the request on AI models of other providers. The result is returned to the App. Images uploaded to eachlabs are deleted once the result is ready, and in any case within about two hours. Google processes requests under the Gemini API terms. We also keep a record of each AI operation (type, status and credits used) to charge and refund credits, enforce usage limits and prevent abuse.
Only submit images you have the right to use. If you do not want an image processed by these providers, do not start an AI feature for it.
We keep your credit balance, credit usage and rewarded-ad credits on our servers. Subscriptions and in-App purchases are processed by Apple or Google; we receive the purchase details (product, dates, status and a transaction identifier) through RevenueCat. Purchases on the Website are sold by FastSpring, our reseller and merchant of record, which collects your payment and billing details and processes them as an independent controller under its own privacy policy; we receive only the order details (order number, product, price, country, your name and e-mail address). Payment card details are handled only by Apple, Google or FastSpring.
If you do not have a subscription, you can choose to watch a rewarded video ad to earn credits. Ads are served by Google AdMob, which may fill a request through its mediation partners Liftoff Monetize (Liftoff / Vungle) and Unity Ads. When an ad is loaded or shown, these providers may collect your IP address (from which an approximate location can be derived), your device's advertising identifier (on iOS only if you allow tracking), device and app information, information about the ads you see and how you interact with them, and diagnostics. Each provider processes this data under its own privacy policy: Google, Liftoff, Unity. To credit a watched ad, Google sends our server a signed confirmation containing your account identifier and a transaction identifier.
We use Google Firebase (Analytics, Crashlytics, Remote Config) to understand how the App is used, to fix crashes and to configure features, and Meta App Events and Apple's attribution service to measure which ads led to an install or purchase. These tools process app events, device and app information, an app-instance identifier and, where permitted, your device's advertising identifier. In the EEA, the UK and Switzerland, analytics and marketing tools run only after you consent; on iOS, your advertising identifier is used only if you allow tracking.
The App stores settings on your device, such as onboarding progress, your consent choices and cached values (for example your credit balance). They are deleted when you uninstall the App or use Delete my data.
The Photold pages on pacetech.co use Google Analytics and PostHog to measure visits and the steps of the purchase flow, and the Meta Pixel to measure which of our ads lead to visits and purchases (for example that a checkout was started or a plan or credit pack was bought, with its price). These tools set cookies or similar identifiers in your browser and receive your IP address, browser information and the pages you visit. When you buy, we also report the purchase to Meta from our server (Meta's Conversions API) with its amount, your country and your e-mail address in hashed (SHA-256) form, so Meta can link it to the ad you came from; this happens only when the Meta Pixel is allowed to run for you. Checkout is provided by FastSpring as described in Section 3.4.
Visitors from Europe (including the EEA, the UK, Switzerland and Türkiye) are asked first: none of these tools load until you accept, and the site works the same if you reject them. You can change your choice at any time: .
We do not access your contacts or calendar, and we do not collect your precise (GPS) location.
The App will, through the operating system, ask for permission to access:
You may revoke any permission at any time in your device settings; doing so may disable the related feature.
| Provider | Purpose |
|---|---|
| Google (Firebase, Google Cloud) | Account, cloud storage of your library, servers, analytics, crash reports, configuration |
| Google (Gemini API), eachlabs | AI features |
| Google AdMob, Liftoff Monetize, Unity Ads | Rewarded ads |
| Meta Platforms | Advertising measurement (App Events in the App, Meta Pixel on the Website) |
| Apple, Google Play, RevenueCat | In-App purchases and subscription management |
| FastSpring | Website checkout, payment and tax (as merchant of record and independent controller) |
| Resend | Sending sign-in and order e-mails |
| PostHog | Website analytics |
We may also disclose information where required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition or sale of assets.
| Category | Retention |
|---|---|
| Account, library, credits, AI operation and ad-reward records | Until you delete your data or account |
| Images sent to eachlabs | Deleted when the result is ready, at the latest within about two hours |
| Images sent to Google's Gemini API | Per Google's Gemini API terms |
| Purchase and tax records | As long as required by law |
| Analytics, crash and advertising data | For the retention periods set in the respective provider's service |
| Settings on your device | Until you uninstall the App or delete your data |
Our servers are located in the United States, and our service providers may process information in other countries whose data protection laws may differ from those of your country. Where required by law, these transfers rely on appropriate safeguards offered by the providers, such as the European Commission's Standard Contractual Clauses.
Pace Tech uses commercially reasonable technical and organizational measures to protect your information, including encrypted (HTTPS) connections, authenticated access to our servers and access rules that limit each account to its own data. No system is perfectly secure, and we cannot guarantee that information will never be accessed, disclosed or lost.
Depending on where you live, you may have the right to:
Settings → Delete my data in the App permanently deletes your account and the data linked to it. Records we must keep by law (such as purchase and tax records) are kept only as long as required. For other requests, write to info@pacetech.co; we will respond within 30 days.
The App and the Website do not respond to browser Do Not Track signals.
The App is not directed to children under the age of 13 (or under 16 in the European Economic Area, the United Kingdom and any other jurisdiction whose law applies a higher minimum age for the processing of children's personal data). Pace Tech does not knowingly collect personal information from children below the applicable age threshold. If you believe a child has used the App or that we have inadvertently received information from a child, please contact us at info@pacetech.co and we will take appropriate action, including deletion of any such information from our records.
Pace Tech may update this Policy from time to time, including in response to changes in the App, applicable law or third-party services. The "Effective date" and "Last updated" lines at the top of this Policy reflect the current revision. Material changes will be communicated through the App's release notes or through an in-App notice. Your continued use of the App after a revised Policy becomes effective constitutes your acceptance of the revised Policy.
Privacy questions, requests or complaints:
Email: info@pacetech.co
Subject line: Photold — Privacy
Pace Tech