Privacy Policy

Effective date: 17 October 2026 · Last updated: 17 October 2026

This Privacy Policy explains how Honami Development s.r.o. (“Honami”, “we”, “us”, or “our”) processes personal data when you use the Nostalgio mobile application and related services (collectively, the “Service”). Family photos are personal, so we collect as little as we can and delete photos as soon as they are no longer needed.

Controller: Honami Development s.r.o., Karpatské námestie 7770/10A, 831 06 Bratislava, Slovakia
Contact: contact@nostalgio.app
Data Protection Officer: support@honami.dev

1. Scope

This Policy applies to the Nostalgio app distributed on Google Play (package name: dev.honami.nostalgio), to this website and to our backend APIs that power the Service. It does not apply to third-party websites or services that we do not control.

The Service is intended for users aged 13 and over. If you are under the age required in your country to consent to data processing without parental consent, you may not use the Service.

2. Summary of processing

Nostalgio lets you restore, colorize and improve old photos, bring people from two photos together into one, and turn a photo into a short AI-generated video. We use an anonymous device-based account (no e-mail or password required). We process data to operate the Service, prevent abuse, handle in-app purchases through Google Play, send notifications you allowed, improve reliability, and comply with law.

We do not sell your personal data. We do not show ads, do not use an advertising ID, and do not use third-party advertising or analytics SDKs.

3. Data we collect

3.1 Account and authentication data

On first launch our servers create an anonymous account with a random secret user identifier, which the app keeps on your device, and a short public ID (shown in Settings and used for support). We store:

• the account identifiers and account metadata such as creation time, last use, language and credit balance;
• security tokens used to sign in the app to our servers.

Important: your account identifier is stored on your device. If you lose it (for example by uninstalling the app or clearing its data), we cannot restore your account or its credits. Subscriptions bought through Google Play can be restored on a new installation.

3.2 Fraud prevention and platform integrity

To protect the free starter credits and the Service against abuse and automated misuse, we process:

• a Google Play Integrity attestation token and the resulting verdict;
• a one-way hash (SHA-256) of a device identifier derived on your device from the Android ID;
• your IP address, only temporarily and in hashed form, to limit how many new accounts can be created from one network per hour.

We do not use this information for advertising or profiling.

3.3 Photos and job data

To create a result, we process:

• the photo(s) you choose to upload — they may show faces of you, your family or other people;
• the optional name, title or description you type, and the options you pick (for example orientation or pose);
• the generated images and videos produced for your request;
• technical metadata about each job (tool, status, times, error codes).

We use photos only to create the result you asked for, to check that a photo shows a person when the tool needs one, and to block prohibited content. We do not use faces to identify anyone and we do not use your photos to train AI models. Photos and results are stored in encrypted cloud storage.

3.4 Purchase and subscription data

If you buy credit packs or subscriptions through Google Play, we process:

• product identifiers (credit packs, monthly or yearly subscription plans);
• purchase tokens and order references from Google Play;
• subscription status and billing period linked to your account;
• renewal, cancellation, refund and revocation events received from Google Play.

We do not receive or store your payment card number. Payment processing and tax collection are handled by Google Play. Prices shown in the app are tax-inclusive where applicable.

3.5 Notifications

If you allow notifications, the app registers a Firebase Cloud Messaging token so we can tell you when a result is ready. The notification language follows your device language.

3.6 App and device information

The app may send optional fields such as country and locale settings, time zone, language, device type and model, app version and build number, install source, number of app launches and free storage space. We use them for troubleshooting, choosing the notification language and understanding which devices we need to support. Updates you send replace the previous values.

3.7 Data that stays on your device

Your gallery of results, original photos kept for before/after comparison, and your settings are stored only on your phone. Scanning a paper print uses Google’s document scanner on your device (Google Play services); the scan goes to the app, not to us, unless you then use a tool on it.

3.8 Data you send us directly

If you e-mail contact@nostalgio.app, we process the information you include (such as your e-mail address, message and public ID) to respond to you.

3.9 Visits to this website

This website uses a cookie-free web analytics service from our cloud infrastructure provider to count visits in aggregate: the page viewed, the referring site, country, browser, operating system and device type, and page load performance. It does not use cookies or local storage, does not build a profile of you or track you across websites, and we do not receive or store your IP address. The website does not use advertising or social media trackers.

4. How we use your data

We process personal data on the following legal bases under the GDPR:

We do not use automated decision-making that produces legal or similarly significant effects solely based on profiling. Automated content checks may refuse a photo; you can contact us if you believe this was a mistake.

5. AI and automated processing

Results are created by third-party AI services, which we may reach through an API intermediary:

• Image analysis — an AI model receives your photo to check that it shows a person and does not contain prohibited content.
• Image and video generation — AI models receive your photo, or temporary access to it via a secure time-limited link, together with a text prompt to create the result.

These providers process data on our instructions to deliver the Service and keep inputs only as long as their terms allow. Processing may occur outside the European Union, including in the United States and other countries. Outputs are interpretations and may be imperfect or unexpected.

6. Where data is stored and processed

Our servers, database and photo and video storage are hosted by a cloud infrastructure provider in the European Union. The same provider delivers our API and protects it at the network edge, so requests may pass through its global network.

Because we operate worldwide, data may also be processed in other countries, including the United States, when:

• Google processes billing, subscription, Play Integrity or notification requests;
• AI providers perform image analysis or photo and video generation.

Where required, we rely on appropriate safeguards for international transfers, such as Standard Contractual Clauses approved by the European Commission and supplementary measures where appropriate.

7. Retention

We keep personal data only as long as necessary for the purposes above:

When retention periods expire, we delete or anonymize data unless we must retain it to comply with law or establish, exercise, or defend legal claims.

8. Sharing and disclosure

We share personal data only with:

• service providers that help us run the Service, under contracts that require them to protect your data and use it only on our instructions:

• Google as the app store operator when you make in-app purchases or when the app submits Play Integrity checks;
• authorities or third parties when required by law, court order, or to protect rights, safety, and security.

We will send you the current list of the specific providers on request to contact@nostalgio.app. We do not sell or rent personal data and do not share it for advertising.

9. Your rights

If the GDPR or comparable law applies to you, you have the right to:

• access your personal data and receive a copy;
• rectify inaccurate data (much of your account data is technical; some fields are updated by using the app);
• erase your data (“right to be forgotten”) in certain circumstances;
• restrict processing in certain circumstances;
• object to processing based on legitimate interests;
• data portability for data you provided, where technically feasible;
• withdraw consent where processing is based on consent;
• lodge a complaint with a supervisory authority — in Slovakia, the Úrad na ochranu osobných údajov Slovenskej republiky (dataprotection.gov.sk), or the authority where you live.

To exercise your rights, contact contact@nostalgio.app and include your public ID (Settings, next to the app version) so we can find your account. We will respond within one month, extendable where permitted by law.

Account and data deletion

You may request deletion of your account and associated personal data at any time — see how to delete your data. We will verify the request and complete deletion within 30 days, unless we must retain certain data for legal, billing, or security reasons (we will explain if so).

Because your account is anonymous, we may need you to demonstrate account ownership, for example by sending the public ID shown in the app or information only you would know about recent activity.

10. California privacy notice (CCPA / CPRA)

If you are a California resident, you may have additional rights under California law, including the right to know categories of personal information collected, to delete personal information, and to correct inaccurate personal information. We do not sell or share personal information for cross-context behavioral advertising.

To submit a request, e-mail contact@nostalgio.app. We will not discriminate against you for exercising your rights.

Categories collected in the last 12 months: identifiers (anonymous account identifiers, hashed device identifiers, push tokens); customer records related to purchases (via Google Play); internet or app activity (app and device information); user-generated content (photos, names and descriptions, generated images and videos); inferences from AI processing (whether a photo shows a person or prohibited content).

11. Security

We implement reasonable technical and organizational measures to protect personal data, including encryption in transit (HTTPS/TLS with certificate pinning in the app), encryption at rest on storage systems, short-lived signed links for uploads and downloads, access controls, and redaction of secrets in logs. No method of transmission or storage is 100% secure.

If we become aware of a personal data breach likely to pose a high risk to your rights, we will notify you and the relevant supervisory authority as required by applicable law (including GDPR breach notification rules).

12. Children

The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. Family photos showing children may be uploaded by a parent or guardian. If you believe a child under 13 has used the Service, contact contact@nostalgio.app and we will take appropriate steps to delete the data.

13. Changes to this Policy

We may update this Privacy Policy from time to time. We will post the revised version at https://nostalgio.app/privacy.html and update the “Last updated” date. For material changes, we may provide additional notice in the app where appropriate.

14. Contact

Honami Development s.r.o.
Karpatské námestie 7770/10A, 831 06 Bratislava, Slovakia
Privacy & support: contact@nostalgio.app
Data Protection Officer: support@honami.dev

This document describes our privacy practices as of the effective date. It is provided for transparency and does not constitute legal advice.