Privacy Policy

1. Who we are

This Privacy Policy explains how App Studio Yazılım Hizmetleri Ltd. Şti. ("App Studio", "we", "us") collects, uses and shares information when you use our mobile applications (each an "App"). We are the data controller for this information.

Our Apps are intended for users aged 18 and over. Please also read our Terms of Use. For any privacy question or request, contact us at [email protected].

2. Information we collect

Our Apps do not require an account, and we do not ask for your name, email address or phone number to use them.

• Content you provide: photos, videos and text prompts you choose to upload or enter. Photos and videos may show faces.
• Device and usage information: an anonymous identifier created for your installation, device model, operating system and app version, language and country, in-app events (such as screens viewed, features used and generations started or completed), and crash and performance data.
• Purchase information: subscription and purchase status, product, price, transaction identifiers and refund status, received from Apple or Google. We never receive your payment card details.
• Advertising and attribution information: your device's advertising identifier (IDFA on iOS, Advertising ID on Android) and information about which ad led to your install, collected only where permitted (see section 6).
• Support information: if you email us, your email address, your message and any technical details the App adds to it (device model, OS version, app user ID and purchase ID).

3. How we use information

We do not sell your personal information. We do not use your photos, videos or face data to train AI models, or for advertising or profiling.

4. Photos, face data and AI processing

Your permission first. Before you upload a photo or video for the first time, the App asks for your permission to send it to our third-party AI processing providers. We only process your content after you give this permission and choose a feature. You can withdraw it at any time (see section 8); without it, AI features cannot work.

What we do with face data. Your photos are processed only to create the result you asked for and to check it against our content rules. We do not create biometric identifiers, facial recognition templates or facial geometry data, and we do not use face data to identify you. We do not use face data for advertising, marketing, analytics, profiling, tracking, authentication or recognition, and we do not sell or share it for those purposes.

Who processes it. Your content is sent over encrypted connections to the AI providers listed in section 5. They act only as our service providers: they process your content on our instructions to create the result you asked for, do not use it for their own purposes, and do not sell it. We have set each provider to delete these files within 24 hours, and some within 1 hour (see section 7).

No training. We do not use your photos, videos or prompts to train AI models.

5. Who we share information with

We share information only with the service providers below, only for the purposes listed, and we require each of them to protect it at least as well as this policy does. Their own privacy policies also apply.

We may share aggregated or anonymized information that cannot identify you, for example the number of users of an App, with partners or investors. We may also disclose information if required by law, to protect the safety of users or others, or as part of a merger or sale of our business.

6. Tracking and advertising

On iOS, we ask for your permission through Apple's App Tracking Transparency prompt before collecting your advertising identifier or tracking you across apps and websites owned by other companies. If you do not allow tracking, we do not access your advertising identifier, and attribution is limited to aggregated, privacy-preserving reporting such as Apple's SKAdNetwork.

You can change your choice at any time:

• iPhone: Settings → Privacy & Security → Tracking
• Android: Settings → Google → Ads → Delete advertising ID

We never use your photos, videos or face data for advertising.

7. How long we keep information

Uploaded photos, videos and generated results are deleted automatically, typically within hours. Save any result you want to keep to your device.

We may keep information longer only where the law requires it or to resolve a dispute.

8. Your rights and choices

Withdraw your AI processing permission. You can stop sending photos and videos to our AI providers at any time by not using AI features, or by emailing us. Withdrawing does not affect processing already done. Without this permission, AI features will not work.

Tracking. You can change your tracking permission at any time in your device settings (see section 6).

Delete your data. Because the apps do not use accounts, we identify you by the anonymous ID linked to your device. Email [email protected] and include the Device Info that the app adds to support emails. We will delete the anonymous ID and the data linked to it, usually within 30 days. Deleting your data does not cancel your subscription; cancel it in your App Store or Google Play settings.

Your rights by region.

• EU, EEA and UK (GDPR): access, correction, deletion, restriction, objection, data portability, and the right to withdraw consent. You can complain to your local data protection authority.
• United States: depending on your state (for example California, Colorado, Virginia, Texas), the right to know, access, correct and delete your data, and to opt out of targeted advertising. We do not sell personal information for money. Where sharing with advertising partners counts as "sharing" or "selling" under state law, you can opt out by turning off tracking in your device settings or by emailing us. We do not collect biometric identifiers, so state biometric laws (such as Illinois BIPA) do not apply to our processing.

To use any of these rights, email [email protected]. We may ask for your Device Info to find your data. We reply within 30 days, or within the time your local law requires. For complex requests, GDPR allows us to extend this by up to two more months; we will tell you if we do. We will not treat you differently for using your rights.