Privacy Policy
Effective Date: January 2025
Last Updated: January 2025
Introduction
Prompt Pic ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
Information We Collect
Information You Provide
- Photos: Images you select from your photo library or capture using the camera for transformation
- Custom Prompts: Text descriptions you provide for custom transformations
Face Data (Biometric Information)
We do not collect biometric identifiers or facial recognition data. In particular, the app does not collect or derive facial geometry, depth data, face maps, face landmarks, or any other information that can be used to uniquely identify or verify a person’s identity.
- No Apple face frameworks: We do not use Apple’s TrueDepth Camera, ARKit face tracking, Vision face detection/recognition APIs, or Face ID.
- Photos that may include faces: The only face-related content we handle is the user-selected image itself (which may contain faces). We treat these as ordinary photos for temporary processing only.
Information Collected Automatically
- Device Information: Device identifier, iOS version, app version
- Usage Data: Features used, transformation styles selected, frequency of use
- Purchase Information: Subscription status, purchase history (handled by Apple and RevenueCat)
- Authentication Data: Anonymous Firebase user ID
Information from Third Parties
- Apple Sign In: If you choose to use Sign in with Apple, we receive your chosen display name and a unique identifier
- RevenueCat: Subscription and purchase validation data
How We Use Your Information
| Purpose |
Data Used |
Legal Basis |
| Provide AI transformation services |
Photos, prompts |
Contract performance |
| Manage subscriptions |
Purchase data, device ID |
Contract performance |
| Track usage limits |
Usage data, subscription status |
Contract performance |
| Improve app performance |
Usage analytics, crash reports |
Legitimate interests |
| Customer support |
Email, usage data |
Contract performance |
Data Processing and Storage
Photo Processing
- Photos are temporarily uploaded to our secure servers for AI processing
- Images are processed using Google's Gemini API
- Original and transformed images are deleted from our servers immediately after processing
- We do not store your photos permanently on our servers
Face Data Use, Sharing, and Retention
- Use: User-provided photos (which may include faces) are used solely to generate the requested artistic transformation. We do not use photos to identify, verify, or profile users, and we do not infer sensitive attributes (e.g., age, gender, ethnicity).
- Sharing: Photos are shared only with our processing provider (Google’s Gemini API) to complete your request. We do not sell photos or face-related information.
- Storage: We do not persist original or full transformed images on our servers. Transformed results are saved to your device. For abuse prevention and diagnostics, we may store minimal, non‑reconstructable metadata (e.g., a truncated prefix of a transformed image and timestamps) in Firebase (United States). This metadata cannot be used to reconstruct a person’s face.
- Retention: Photos are deleted from our servers immediately after processing. Any minimal metadata is retained only as long as needed for security/operations and is removed upon account deletion.
Data Storage Locations
- Firebase (Google Cloud): User data, usage statistics - United States
- RevenueCat: Subscription data - United States
- Local Device: Transformed images, app preferences
Data Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share information in the following situations:
Service Providers
- Google (Firebase & Gemini): Authentication, database, AI processing
- RevenueCat: Subscription management
- Apple: App distribution, payments
Legal Requirements
We may disclose information if required by law, court order, or government request.
Data Security
We implement appropriate technical and organizational measures to protect your information:
- Encrypted connections (HTTPS/TLS) for all data transfers
- Secure authentication through Firebase
- Regular security updates and monitoring
- Limited access to personal data on a need-to-know basis
Data Retention
| Data Type |
Retention Period |
| Photos |
Deleted immediately after processing |
| Face geometry / TrueDepth data |
Not collected |
| Minimal transformation metadata (non‑reconstructable) |
Only for security/operations; removed on account deletion |
| Account data |
Until account deletion requested |
| Usage analytics |
90 days |
| Purchase records |
As required by tax law (typically 7 years) |
Your Privacy Rights
Depending on your location, you may have the following rights:
Access and Portability
You can request a copy of your personal data by contacting us.
Correction
You can update your information through the app or by contacting us.
Deletion
You can request deletion of your account and associated data.
Opt-Out
You can opt-out of analytics by disabling tracking in your device settings.
California Residents (CCPA)
California residents have additional rights under the California Consumer Privacy Act. We do not sell personal information.
European Users (GDPR)
European users have rights under the General Data Protection Regulation, including the right to object to processing and the right to lodge a complaint with supervisory authorities.
Children's Privacy
Prompt Pic is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately.
Analytics and Tracking
We use Firebase Analytics to understand how users interact with our app. This helps us improve the user experience. Firebase Analytics may collect:
- App usage patterns
- Feature adoption rates
- Performance metrics
- Crash reports
You can opt-out of analytics collection through your device's privacy settings.
Third-Party Links
Our app may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the app, you consent to such transfers.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy in the app
- Updating the "Last Updated" date
- Sending a notification through the app for material changes
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
Email: support@promptart.app
App Support: Through the Settings → Support section in the app
Data Protection Officer
For privacy-related inquiries, you can contact our Data Protection Officer at: privacy@promptart.app
© 2025 Prompt Pic. All rights reserved.