This policy explains what the Sarto app does and does not do with data. It applies to the Sarto app for iPhone and Android and to the Sarto pages on https://revolisapp.com.
The short version
- Your photos are processed on your phone. They are never uploaded to us or to anyone else.
- Sarto works without an account.
- Sarto shows no ads and uses no advertising identifiers. We do not sell personal data and do not share it for advertising.
- We receive three kinds of data: a record of purchases, a random identifier for your installation, and — only if you allow it — anonymous usage counts and crash reports.
- You can switch usage counts and crash reports off in Settings, and you can ask us to delete what our providers hold.
Who is responsible
{{LEGAL_NAME}} ("we", "us"), publishing as Revolis
{{LEGAL_ADDRESS}}
Privacy contact: privacy@revolisapp.com
What Sarto does not collect
- Your photos, thumbnails of them, or anything visible in them
- File names and photo metadata (capture date, camera details, location)
- Your location
- Your contacts
- Advertising identifiers
- Your name, email address or phone number (unless you write to us)
Sarto opens photos through the system photo picker, so it sees only the photos you choose.
Data we process
| Data | What it contains | Why | Legal basis (GDPR) | Kept for |
|---|---|---|---|---|
| Purchases | Which product was bought, purchase and renewal dates, store transaction identifiers, the store's country and currency, whether Sarto Pro is active | To unlock Sarto Pro, restore it, and keep accounts | Performance of a contract; legal obligation for bookkeeping | While the purchase is active, then for {{RETENTION_TAX}} |
| Installation identifiers | Random identifiers created by the app. They are not derived from your device's hardware and they change if you reinstall the app or use "Delete my data" | To connect purchases, usage counts and crash reports to one installation | Performance of a contract; legitimate interests (running a reliable app) | As long as the data they belong to |
| Usage counts (only if allowed) | Events such as "app opened", "paywall viewed" or "job completed", with values like the goal chosen, the format and the number of photos. Never photo content, file names or free text | To see which features are used and where people get stuck | Consent where the law requires it; otherwise legitimate interests | 12 months |
| Crash and performance reports (only if allowed) | Error type and code location, app version, system version, device model | To find and fix failures | Consent where the law requires it; otherwise legitimate interests | 90 days |
| Device and app details | Device model, system version, app version, language and region setting, sent with the rows above | To make the reports useful | As above | As above |
| Support messages | Your email address and what you write | To answer you | Legitimate interests; steps taken at your request | 12 months after the case is closed |
Usage counts and crash reports are your choice. In the European Economic Area, the United Kingdom and Switzerland, Sarto asks before sending either; nothing is sent until you agree. Elsewhere they are on by default. Everywhere, two switches under Settings → Privacy and data turn them off at once.
Internet addresses. Every server an app talks to sees the IP address of the connection. We have configured our providers not to store it with your data and not to derive your location from it. Hosting providers may keep short-lived security logs.
Kept only on your phone. Your settings, the history of results from the last 7 days, the count of free photos used today and any reminder you set are stored on the device and are not sent to us.
Permissions
| Permission | When Sarto asks | What it is used for |
|---|---|---|
| Add to Photos (iPhone) | The first time you save a result | Saving results to your library |
| Photos, read and write (iPhone) | Only if you use "Delete originals" | Removing the originals you confirm |
| Notifications | Only if you ask for a reminder | One reminder that your free photos are available again |
On Android, Sarto uses the system photo picker and requests no photo or storage permission to choose photos.
Purchases and the stores
Purchases are made through the Apple App Store or Google Play. They process your payment under their own privacy policies; we never receive your card or bank details.
Apple: https://www.apple.com/legal/privacy/ · Google: https://policies.google.com/privacy
Who processes data for us
| Provider | Role |
|---|---|
| RevenueCat, Inc. (United States) | Purchase records and entitlement |
| PostHog (EU region) | Usage counts |
| Sentry (EU region) | Crash and performance reports |
| Vercel Inc. (United States) | Hosting of these pages and of the app's configuration file |
| {{MAIL_PROVIDER}} | The mailboxes named in this policy |
These providers act on our instructions under data-processing agreements. We do not sell personal data, and we do not share it with anyone for their own purposes.
Transfers to other countries
Some providers process data outside your country, including in the United States and the European Union. For data covered by EU, UK or Swiss law, we rely on the European Commission's standard contractual clauses or an adequacy decision. For data covered by Turkish law, transfers abroad are made on the basis of {{TRANSFER_SAFEGUARD_TR}}.
Your choices
- Usage counts and crash reports: Settings → Privacy and data.
- Reminder notifications: Settings → Notifications, or your phone's settings.
- Delete your data: Settings → Privacy and data → Delete my data, or the page Delete my data.
Your rights
Depending on where you live, you can ask us to tell you what data we hold about you, give you a copy, correct it, delete it, restrict or stop its use, or move it elsewhere. Where we rely on consent, you can withdraw it at any time; this does not affect what happened before.
Write to privacy@revolisapp.com. We answer within 30 days and do not charge for it. Because Sarto does not know who you are, please include the identifier shown in the app under Settings → Privacy and data → Delete my data, or the order number from your store receipt, so that we can find your data. We do not ask for identity documents.
You can also complain to the data protection authority of your country. In Türkiye this is the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).
We do not sell or share personal information as those words are defined in US state privacy laws, and we do not use sensitive personal information.
Children
Sarto is a general-purpose tool. It is not directed to children under 13 (or the age at which your country lets a person agree to data processing on their own), and we do not knowingly collect personal data from them. Sarto does not ask for anyone's age.
Security
Photos never leave the device, so they cannot be exposed by a breach on our side. The limited data we do receive is sent over encrypted connections and held by the providers named above. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
This website
These pages set no cookies and load no analytics. Like every website, the hosting provider records technical logs (such as IP address, time and page requested) for security and keeps them for a short time.
Changes
If this policy changes, we update the date at the top. If a change affects how your data is used in a way you would not expect, the app tells you before it takes effect.
Contact
{{LEGAL_NAME}} · {{LEGAL_ADDRESS}} · privacy@revolisapp.com