Local by default
Core cropping, resizing, compression and compatible checks run in your browser memory.
Privacy by design
Your identity photo should stay yours.
Photofitr uses a local-first architecture. We do not store photos by default, and we do not require an account simply to prepare a one-time application photo.
Last updated: 1 August 2026
No photo analytics
Image pixels, facial measurements and biometric information are not included in analytics or error reports.
Temporary only when needed
A tool uses temporary server processing only when it is genuinely required to provide the requested result.
1. How we handle your photos
Standard photo preparation happens on your phone or computer using browser-based processing. The working image exists only in the active browser session and is discarded when you replace it, refresh the page or close the tab. Photofitr does not claim ownership of your original or generated photo.
The original photo is not written to a Photofitr database, cloud-storage bucket, server log, analytics platform or advertising system during local processing.
2. When temporary server processing is used
Some operations may not run reliably on every device. A feature may use temporary server processing only when it is genuinely needed to provide the requested result.
Refer to the All tools page for the processing method and any tool-specific transfer or retention details for the feature you are using.
Temporary files are retained only for the minimum time required to complete the selected operation. They are not reused for model training, advertising, identity recognition or unrelated product development without a separate, explicit opt-in.
3. Information that is separate from your photo
Photofitr uses limited technical information to operate safely and understand product performance. This can include the page visited, selected document preset, device or browser category, approximate country, processing duration and whether a download completed.
These events do not contain the image, a thumbnail, EXIF contents, facial landmarks, biometric templates or measurements that could reconstruct or identify the person in the photo.
4. Payments and support
When you make a payment, the payment provider receives the information required to complete the transaction. Photofitr does not store complete card or bank-account details. Order records are retained where required for customer support, refunds, fraud prevention, accounting and tax obligations.
If you contact support, we receive the details you choose to provide. Do not attach an identity photo unless support specifically requests it and explains how it is handled and deleted.
5. Analytics, advertising and cookies
Analytics are limited to aggregated product and performance information. Advertising appears only on informational pages and does not receive your photo or appear inside the upload, editor, checkout or paid-download journey.
Analytics, advertising, payment and error-monitoring services remain subject to the no-photo-data rule described above.
6. Security and retention
Photofitr uses encrypted connections, restricted operational access and the shortest practical retention periods. Data that is no longer needed for the purpose described in this policy is deleted or anonymised.
7. Children's photos
Parents and guardians may use Photofitr to prepare a child's application photo. The same local-first rules apply. Photofitr does not create behavioural profiles or use a child's image for training or advertising.
8. Your choices
Where Photofitr holds order or support information, you may request access, correction or deletion where applicable. Some information may be retained where required for legal, accounting, fraud-prevention or dispute-resolution purposes.
9. Changes to this policy
We update this policy whenever the image-processing architecture or any analytics, payment, advertising, hosting or support service materially changes. The latest revision date remains visible at the top of this page.