PhotoCraft: AI Photo Editor – Privacy Policy

1. Summary

• Photos you choose are sent to our servers, and for some tools to our AI provider Google (Gemini via Google Cloud Vertex AI), only to create your result.
• The app asks for your permission before any photo is uploaded; you can withdraw it in Settings.
• Uploaded photos are not kept after processing. Results are deleted from our servers automatically within 7 days (at most 30 days for some tools).
• We never sell your photos, never use them for advertising or tracking, and never use them to identify you.

2. Information We Collect

• Photos and prompts you submit to an AI tool (enhance, restore, colorize, cartoon, background remover, face swap, text-to-image, Magic Edit, headshot).
• Face swap: faces in the photos you choose are detected only to perform the swap you request. No face templates or biometric identifiers are stored. Only swap photos of yourself or people who agreed.
• Optional account: if you sign in with Google or Apple, we receive your name, email address and a user ID. You can delete your account in the app at any time.
• Purchases: Apple or Google process payments; we only receive subscription status via RevenueCat.
• Device, usage and diagnostic data: device model, OS and app version, language, approximate location from IP address, in-app events, crash reports and – only if you allow tracking – your advertising identifier.
• Reports and support: if you report a result or email us, we receive what you send.

3. Third-Party AI Processing (Google Gemini)

For AI editing tools the photo you choose is sent over an encrypted connection to our servers (Hetzner, Germany) and processed by Google LLC using Gemini models on Google Cloud Vertex AI. Google acts as our processor, handles the image only to return the result, and does not use it to train its models. Other tools (for example enhance, background removal, face swap and some cartoon styles) run on our own servers.

4. Services We Use

• Google Gemini via Google Cloud Vertex AI – AI editing features (Magic Edit, Restore, Headshot, some cartoon styles, colorize). Data: the photo and text prompt you submit. Privacy policy
• Cloudflare (R2 storage and network) – secure delivery and temporary storage of results. Data: generated images, IP address. Privacy policy
• Google AdMob and Meta Audience Network – ads for free users. Data: advertising identifier (only with your permission), coarse location from IP, device and ad-interaction data. Privacy policy
• Google Firebase (Authentication, Analytics) – optional sign-in, app analytics. Data: name, email and user ID if you sign in; app events and device information. Privacy policy
• RevenueCat – subscriptions. Data: anonymous app user ID and purchase history. Privacy policy
• OneSignal – push notifications, only if you allow them. Data: push token and device information. Privacy policy

5. Advertising, Tracking and Promotions

Free users see ads. Pro subscribers do not. We ask for permission through Apple’s App Tracking Transparency prompt and, in the EEA, UK and Switzerland, Google’s consent form before your advertising identifier is used; if you decline you see non-personalized ads. Cards promoting our other apps are labelled “Ad”. Your photos are never used for advertising.

6. Data Retention

• Uploaded photos: processed and not stored after processing.
• Results: stored on Cloudflare R2 so the app can show and download them, deleted automatically after 7 days (at most 30 days). Copies you save stay on your device.
• Google (AI provider): processes only to return the result; not used for training.
• Account data: kept until you delete your account in the app, then deleted within 30 days.
• Server logs (IP, time, status): kept only as long as needed for security, normally no longer than 6 months.
• Analytics, crash, advertising and purchase data: kept by the services above under their own settings (analytics up to 14 months).
• Support emails and reports: kept as long as needed, no longer than 2 years.

7. Security

All traffic is encrypted (HTTPS) and server access is restricted to authorized staff.

8. Your Choices and Rights

• Withdraw AI photo consent and delete your account in the app’s Settings.
• Request access, correction or earlier deletion of your data by emailing aiphotocraft@gmail.com; we reply within 30 days.
• Turn off tracking in device settings (iOS: Settings › Privacy & Security › Tracking) and manage notifications in system settings.
• Depending on where you live (e.g. GDPR, CCPA) you may also object, restrict processing, request portability or complain to a data protection authority. We do not sell personal information.

9. Legal Basis (EEA/UK)

Photo processing: your consent. Subscriptions and accounts: contract. Analytics, diagnostics and security: legitimate interests. Personalized ads: consent.

10. Children

The app is not directed to children under 13 (16 in the EEA). Contact us and we will delete any such data.

11. Changes and Contact

We may update this policy; the date above shows the latest version. Questions: aiphotocraft@gmail.com (Nep Tech Pal Pvt. Ltd.).