Privacy Policy

This policy explains how TimeMend ("we") collects, uses, stores and protects personal information when you use this website, and the rights you have. Controller of your personal information: (Not provided). Contact email: (Not provided).

Optional Google sign-in: When you choose Google sign-up, sign-in or linking, we request only your name, email and unique Google account ID to create, identify and link your site account. We do not access Gmail, Drive, contacts or Google Photos or store Google access, refresh or ID tokens. We retain the linked account ID and email until you delete your account. After redirecting to Google, Google processes data under its own Privacy Policy.

1. Information we collect

• Account information: the email address and name you enter when signing up. We store only an encrypted (Argon2id) hash of your password and cannot see the password itself.
• Login and security records: login times, IP addresses and browser/device information, used to let you view and manage your logged-in devices, detect unusual logins and prevent password guessing.
• Language preference: the site language you signed up in, so that we can email you in the same language.
• Photos you choose: Choosing a photo only previews it in your browser. Submitting an available AI restoration uploads it to our server and sends it to the configured AI provider.
• Purchase records: order amounts, currencies, payment references and credit changes.

We do not collect phone numbers, identity documents, precise location or contacts.

Optional visit statistics: We do not collect visit statistics when they are disabled in the site's settings. When enabled, we use GA4 for the configured overseas target region or Baidu Analytics for mainland China. Analytics scripts load only after you allow them, and only on permitted public pages; pages whose address may contain private parameters are skipped, and a referral source is reduced to its site's domain, without its path or parameters. Visits while signed in are excluded from statistics, including on public pages.

Statistics help us understand visits, sources and page use, and are not used for advertising. The provider may receive network IP addresses and browser/device information, and use cookies. The site does not actively send accounts, email addresses, photos, filenames, task IDs, order IDs or tokens to analytics providers. Statistics therefore do not mean complete anonymity or the absence of personal information.

You can reject or withdraw consent in Statistics preferences at any time without affecting the service; withdrawal stops further collection. Browser local storage keeps only your choice, the current analytics configuration identifier and expiry, not your account, for up to 180 days (about 6 months). We ask again if the provider or analytics ID changes.

Provider data and cookie retention follow the actual configuration and the provider's policies. The site's 72-hour photo retention rule does not apply to analytics data. Statistics may be affected by consent choices, browser blocking and network conditions.

2. How we use this information

• To provide account features: sign-up, login, password reset, email verification, device management and account deletion;
• To keep the service secure: limiting repeated login attempts and identifying and handling abusive accounts;
• To send service emails: only essential account-related emails, never marketing;
• To comply with legal obligations.

We do not sell your personal information or use it for advertising or profiling.

3. Legal bases for processing

If you are in the EU, the UK or another region that requires a legal basis: we process account information to perform our contract with you (providing the account you signed up for); we process login records based on our legitimate interest in keeping accounts and the site secure; and we keep or disclose information where required by law. Optional visit statistics rely on your separate consent, which you can withdraw at any time; we also ask separately for any other processing that requires consent.

4. Photos and AI restoration

Submitted originals are processed by the configured AI provider. Provider identity, processing location, retention and model-training rules: (Not provided). The site's 72-hour cleanup does not guarantee deletion by the provider. Photos are not displayed publicly.

5. Storage and retention

• Account information is kept while your account exists. When you delete your account, we immediately delete your profile and login history.
• After a task completes, fails or is canceled, its original and result are kept on this site for 72 hours. At expiry, viewing and downloads stop and automatic cleanup runs. You can delete them earlier in “My account → My restorations”; account deletion also schedules photo cleanup. Keep your own originals and download results before expiry.
• Photo expiry removes photo files, while restoration, credit and order records may remain. Payment and audit retention periods: (Not provided).
• Expired login sessions and one-time verification links are purged regularly.
• For security auditing, actions administrators take on accounts (such as suspending one) are recorded in an audit log, which may include the account's email address, and kept for as long as needed for that purpose.
• Country or region where servers are located: (Not provided).

6. Sharing and processors

We do not sell or rent your personal information. We share it only:

• Depending on enabled features, hosting, email, AI restoration and payments (Alipay or PayPal) may involve third-party providers. Provider identities, processing locations, contractual terms and safeguards: (Not provided).
• When required by law, in response to lawful requests from courts or authorities.
• In a business transfer, such as a merger or acquisition, where the recipient must continue to honor this policy.

7. International transfers

If you are in a different country or region from our servers or service providers, your information may be transferred across borders. We apply the safeguards required by applicable law, such as the cross-border procedures of China's Personal Information Protection Law or the EU Standard Contractual Clauses, and ask for your separate consent where the law requires it.

8. Your rights

Depending on where you live (for example under China's PIPL, the EU and UK GDPR, the California CCPA/CPRA, Brazil's LGPD, Japan's APPI or Korea's PIPA), you may have the right to:

• access your personal information and get a copy;
• correct inaccurate information;
• delete your information (deleting your account in "My account" does this);
• restrict or object to certain processing;
• data portability;
• withdraw consent;
• lodge a complaint with your local data protection authority.

To exercise these rights, email (Not provided). We will respond within the time required by law, and we will not treat you differently for exercising your rights. We do not "sell" or "share" personal information as those terms are defined under California law.

9. Minors

Only adults who have reached the legal age of majority in their region may register and use this service; minors may not register or use it. If you believe we have collected a minor's personal information, contact us to request deletion.

10. Security

Our measures include storing passwords as Argon2id hashes, storing only hashes of login credentials, limiting repeated login attempts, collecting only what we need, and encrypting all traffic with HTTPS. No system is perfectly secure. If a personal data breach occurs, we will notify you and the authorities as the law requires.

11. Cookies

We use the essential login cookie and local preference storage; optional analytics cookies are used only when statistics are enabled and you allow them. See our Cookie Policy for details.

12. Changes to this policy

If we make significant changes, we will announce them prominently on the site before they take effect and ask for your consent again where the law requires it.

13. Contact us

Controller: (Not provided) Email: (Not provided)