Is it safe to upload family photos to a restoration app?

For most family photographs, uploading to a restoration app is safe, and the real risks are mundane: how long the image is retained, whether it may be used to train models, what account data is collected alongside it, and how easily you can delete both. Check those four things in the terms, decline anything you would not want stored, and the decision is straightforward.

The question deserves a better answer than reassurance, because people asking it are usually holding a photograph of someone who is gone, and the instinct to be careful is a good one.

What actually happens when you upload

Restoration models are large, and running one takes real computing. Most services therefore send your image to a server, run the model there, and send back a result. Some processing now happens on the device itself, particularly on recent phones, but you should not assume either way without checking.

That means, for most services, a copy of your photograph exists somewhere outside your control for at least a short period. This is not sinister, it is how the thing works. The questions that follow from it are the useful ones.

How long does that copy exist? Some services delete within hours, some within days, some keep images indefinitely so you can revisit a previous restoration from any device.

Who can reach it? Employees, subprocessors, a cloud provider. Any service of scale uses other companies for storage and compute, which is normal and which good terms disclose.

Is it used for anything besides your restoration? This is the clause worth finding, because training use is the one people mind most and the one stated most vaguely.

What else was collected alongside it? An email address, a device identifier, analytics about what you restored. Often more informative about a company’s posture than the image policy itself.

The four clauses to look for

You do not need to read a privacy policy end to end. Open it and search for four things.

Retention. Look for words like retain, delete, storage period. You want a stated timeframe rather than a promise to delete when no longer necessary, which means nothing in particular.

Training. Search the document for train and for improve our services, which is the usual phrasing for the same thing. Either your material is excluded from model training or it is not, and a service that has decided will normally say so in one sentence.

Sharing. Third parties, affiliates, partners. Subprocessors for hosting are ordinary. Sharing with advertisers is a different proposition, and it is worth knowing which you have agreed to.

Deletion and export. Can you delete an individual image, can you delete the account, and does deleting the account delete the images. If there is no mechanism described anywhere, that absence is the answer.

Five minutes with a search box gets you all four. If the policy is so vague that none of them can be answered, that vagueness is itself a finding, and it applies just as much to a large familiar brand as to a tool you found this morning.

The photographs not to upload

Independent of any policy, some material does not belong on someone else’s server.

Documents rather than photographs. Passports, licences, birth certificates, financial or medical paperwork. People scan these into photo apps constantly without thinking of them as uploads.

Photographs of children that you would not want stored. The test is not whether the app is trustworthy, it is whether a copy existing elsewhere is acceptable to you.

Material held on someone else’s behalf. A box of photographs from another branch of the family carries their privacy expectations as well as yours, and they have not been asked.

Anything under a legal or professional duty. Client material, records covered by confidentiality, documents in a dispute. If a photograph would need a data processing agreement at work, it needs one here.

For anything in those categories, the safe route is a tool that runs locally on your own computer, or a professional restorer working under a written agreement. Our guide on restoring old photos without an iPhone covers the desktop options, several of which never touch a network.

Free tools and the funding question

Processing an image with a large model costs money every single time. A service handing that away at no charge is funded somehow: advertising, an upsell to a paid tier, or the data itself.

None of those is dishonest, and plenty of free tools are funded perfectly ordinarily by the paid version sitting next to them. The point is that the question has an answer and it is worth knowing which one applies before you upload a photograph of a dead parent to a service you found in a search result ten seconds ago. Our honest look at free AI restoration tools goes further into what the free tier costs you when it is not charging money, including watermarks, resolution caps and signup walls.

A paid tool is not automatically safer. It does have an obvious revenue source that is not your material, which is a reasonable signal rather than a guarantee.

Our own position, stated plainly

Photo Restore is our iPhone and iPad app, and you are entitled to hold it to everything above.

Photographs put through the app are processed to produce your restoration and are not retained for model training. No account is required to start using it. The authoritative text, which is the version that counts rather than this paragraph, is the app’s privacy policy on its App Store listing and at momentumlab.ai/privacy.

This website is separate and simpler. There is nothing here to upload a photograph to, no account, and no login, which is set out on our privacy page. The guides are guides.

We would rather you checked our terms than took our word for it, and the same standard applies to every other tool including the large familiar ones. A service that makes the four clauses easy to find has told you something about itself before you have restored a single photograph.

What to do about photographs you already uploaded

If you have already run a collection through something and then read the terms afterwards, which is the usual order, the situation is recoverable and worth ten minutes.

Look for a delete control in the app or the account area, and use it on individual images as well as the account. Some services separate the two, so deleting an account does not always remove the material.

Check whether an export exists before you delete anything, so you keep the restored versions you actually wanted.

Email them if there is no mechanism. A plain request to delete your images and your account is usually honoured, and in several jurisdictions including Australia it has legal weight behind it.

Then stop worrying about it. An ordinary family photograph sitting in a commercial service’s storage is a low-stakes outcome. Reserve the concern for the categories in the previous section, and move on.

A sensible way to proceed

Decide what category the photograph is in. Ordinary family material, or something you would not want stored. That single question resolves most of the decision.

Spend five minutes in the terms. Retention, training, sharing, deletion. Search the document rather than reading it.

Keep your master locally. Whatever you upload, the untouched capture should live on your own machine and in your own backup, as backing up scanned family photos sets out. An app is a place work happens, never the only place your photographs exist.

Use a local tool for anything sensitive. Desktop software that runs on your own hardware removes the question entirely, at the cost of convenience.

Most family photographs are fine. The ones that are not are usually obvious once you have asked the question, and asking it takes less time than the restoration does.