Derbani — Privacy Policy
Effective date: 2026-10-07 · Version: 1.0
Derbani ("we", "us") is an app that improves your photos with AI. This policy explains what data we handle, why, for how long, who helps us, and your rights. It is written to meet Jordan's Personal Data Protection Law No. 24 of 2023 and Google Play's requirements.
1. Who is responsible
The data controller is Laith Adnan Atieh Muhaisen, Shahid Street, Safout, Amman, Jordan. Contact for privacy questions and requests: privacy@derbani.com. We answer within 30 days.
2. What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| An anonymous account ID created by Google Firebase when you first open the app. No name, email or phone number. | To know which photos and results are yours, and to stop abuse. | Performing the service you ask for; your consent |
| The photos you choose to enhance, uploaded exactly as they are on your phone. A photo file can contain hidden details (EXIF) such as the date, the camera model and sometimes the location where it was taken. Android 10 and newer usually remove the location before an app receives the photo; older Android versions may not. | To enhance the photo. | Your consent, given each time you pick a photo |
| The enhanced result. We remove all hidden details (EXIF/GPS) from every result. | To give it back to you. | Performing the service |
| Job records: the photo's file type, size and dimensions, the processing status, times and error codes. No image content. | To run the queue, fix problems and prevent abuse. | Our legitimate interest in a working, safe service |
| Your rating of a result (Better / Same / Worse, and whether the face no longer looks like the same person). No free text. | To measure and improve quality. | Your consent (rating is optional) |
| Your internet (IP) address, kept only in memory to limit how many requests one connection can make, and processed by Cloudflare, which protects our servers. | Security and abuse prevention. | Legitimate interest |
We do not collect your name, contacts, other photos in your gallery, or your precise location from your device. The app uses Android's photo picker, so it only ever sees the one photo you choose.
Faces. Our AI may detect faces in a photo to enhance them. Face detection happens only in the computer's memory while your photo is processed. We never store face data, face measurements or anything that could identify a person, and we never use it to recognise who someone is.
No training on your photos. We do not use your photos or results to train or test AI models, and we never sell your data or share it for advertising.
3. How long we keep it
| Data | Kept for |
|---|---|
| Original photo you uploaded | deleted automatically after 1 day (storage deletion can take up to 48 hours more) |
| Enhanced result on our servers | deleted automatically after 7 days |
| Job records and ratings | 90 days, then deleted |
| Anonymous account | until you delete it; accounts unused for 12 months are deleted |
| Database backups (contain job records, never photos) | 14 days, then overwritten |
| Photos you save to your phone | on your phone, under your control |
4. Who helps us (processors) and where data goes
| Provider | What they do | Where |
|---|---|---|
| Google Firebase (Google LLC) | anonymous sign-in | global, including the USA |
| Cloudflare, Inc. | stores photos for up to 7 days (R2), protects and routes traffic | global network |
| Our own computer in Jordan | runs our server and database, and the AI that enhances your photo | Jordan |
Each provider only processes data on our instructions and under its own security and data protection terms. Some of these locations are outside Jordan.
5. How we protect it
Encrypted connections (HTTPS) everywhere; photos are uploaded and downloaded through short-lived private links that expire within 15 minutes; our servers accept no direct connections from the internet; access to data is limited to the app owner; temporary copies on the processing computer are deleted as soon as each photo is done.
6. Your rights
You can ask us to: see the data we hold about you, correct it, delete it, stop or object to processing, and withdraw your consent at any time (this does not affect processing already done). You can also complain to Jordan's Personal Data Protection Council.
Delete everything yourself: in the app, open Settings → Delete my account and data. This deletes your photos, results, history and anonymous account from our servers straight away. Without the app, see derbani.com/delete-account.
7. Children
Derbani is meant for people aged 18 and older. We do not knowingly process children's data. If you believe a child used the app, contact us and we will delete the data.
8. Changes
If we change this policy we will update the date above and, for important changes, tell you in the app before they apply.
9. Contact
privacy@derbani.com · Shahid Street, Safout, Amman, Jordan