Privacy Policy

1. Information We Collect

We collect the following types of information:

1.1 Personal Information

• Account Information: Name, email address, and profile picture (when you register or sign in via Google)
• Payment Information: Credit card details and billing information (processed securely through third-party payment providers)
• Communication Data: Messages, support tickets, and feedback you send to us

1.2 Content and Usage Data

• Uploaded Images: Photos and images you upload for AI transformation
• Generated Content: AI-transformed images and outputs created by our service
• Transformation Data: Prompts, selected categories, style preferences, and transformation history
• Usage Analytics: Features used, credits consumed, session duration, and app performance data

1.3 Technical Information

• Device Information: Device type, operating system, browser type and version
• Connection Data: IP address, location data (general region), and network information
• Cookies and Tracking: Session cookies, preferences, and anonymous usage analytics

2. How We Use Your Information

We use your information for the following purposes:

2.1 Service Provision

• Process your image transformations using AI technology
• Provide, operate, and maintain our application and features
• Manage your account, credits, and subscription status
• Store and organize your image gallery and transformation history

2.2 Communication and Support

• Respond to your inquiries and provide customer support
• Send important updates about service changes or account issues
• Notify you about new features, promotions, or service improvements (with your consent)

2.3 Improvement and Security

• Analyze usage patterns to improve our AI models and user experience
• Detect and prevent fraudulent activity, abuse, and security threats
• Conduct research and development for new features and services
• Ensure compliance with legal obligations and platform policies

3. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information only in these limited circumstances:

3.1 Service Providers

• Cloud Infrastructure: Firebase (Google) for hosting, authentication, and data storage
• AI Processing: Third-party AI model providers via secure n8n webhooks for image transformations
• Payment Processing: Stripe or similar payment processors for handling transactions
• Analytics: Anonymous usage analytics providers to improve our service

All service providers are bound by strict confidentiality agreements and data protection requirements.

3.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal process, court orders, or government requests
• Protect our rights, property, or safety, or that of our users
• Investigate potential violations of our Terms of Service
• Prevent fraud or security threats
• In connection with business transfers (mergers, acquisitions)

3.3 With Your Consent

We may share information with your explicit consent, such as when you choose to share transformed images on social media or public galleries.

4. Data Security and Protection

We implement industry-standard security measures to protect your information:

Technical Safeguards

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest
• Secure Storage: Images stored in encrypted Firebase Storage
• Access Controls: Strict access controls and authentication for our systems
• Regular Monitoring: Continuous security monitoring and threat detection

Operational Security

• Regular security audits and vulnerability assessments
• Employee security training and background checks
• Incident response procedures and breach notification protocols
• Regular backups and disaster recovery planning

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention and Deletion

We retain your information for as long as necessary to provide our services and comply with legal obligations:

5.1 Image Retention Policy

**Important:** To manage storage resources efficiently and protect your privacy:

• Original uploaded images and AI-generated images are stored for **30 days** from creation
• After 30 days, images may be automatically and permanently deleted
• **We strongly recommend downloading any images you wish to keep before the 30-day period expires**
• You can delete images manually at any time from your gallery

5.2 Account Data Retention

• Account information is retained while your account is active
• Usage data and analytics are retained for up to 2 years for service improvement
• Payment records are retained as required by law (typically 7 years)
• You can request account deletion at any time

You can delete your account data at any time through your account settings. Upon account deletion, we will remove your personal information and all associated images immediately, except where retention is required by law.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

6.1 Access and Portability

• Right to Access: Request a copy of your personal data we hold
• Right to Portability: Receive your data in a structured, machine-readable format

6.2 Correction and Deletion

• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data (subject to legal requirements)
• Right to Restrict Processing: Limit how we process your data in certain circumstances

6.3 Control and Objection

• Right to Object: Object to processing based on legitimate interests
• Marketing Opt-out: Unsubscribe from marketing communications at any time
• Cookie Controls: Manage cookie preferences through your browser settings

To exercise these rights, please contact us using the information below. We will respond within 30 days.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) for data transfers
• Adequacy decisions by relevant data protection authorities
• Certification schemes and codes of conduct

8. Children's Privacy

Our service is not intended for individuals under the age of 13 (or 16 in the EU). We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to remove that information promptly.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Enable core functionality and security features
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Understand how you use our service (anonymized)

You can control cookies through your browser settings, though disabling certain cookies may affect functionality. For more details, see our Cookie Policy.

10. Third-Party Services

Our service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. Please review their privacy policies before providing any information.

11. Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of the transaction. We will notify you via email and/or prominent notice on our service of any such change in ownership or use of your personal information.

12. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:

• Post the updated policy on this page with a new "Last Updated" date
• Notify you of material changes via email or in-app notification
• Provide a summary of key changes when significant updates are made

Your continued use of our service after the effective date constitutes acceptance of the updated Privacy Policy.

13. Data Protection Officer and Contact Information

For questions about this Privacy Policy, data protection concerns, or to exercise your privacy rights, please contact us:

14. Supervisory Authority

If you are located in the EU/EEA or UK, you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not adequately addressed your privacy concerns.