Privacy Policy & Data Handling
Last updated: 2026-09-28
1. Data Collection & Purpose
We prioritize your privacy and collect only the essential information required to deliver our core services. This includes:
Account Credentials: Your email address, gathered securely during the sign-in process, is used solely to manage your account identity and communicate important service updates.
Source Imagery: We collect the photos you choose to upload or capture, including visible faces, to create and edit portraits of the person you select. We also create processed reference copies and previews for this purpose.
Face Data: Alongside photos and generated portraits, we store face position and relative face size, photo-quality findings (such as face count, pose, visibility, and image suitability), and any appearance or accuracy hints you provide for a profile. The iOS camera guide uses face landmarks, head angle, and eye-open estimates temporarily on your device to help frame a photo; these live camera measurements are not uploaded or saved. Uploaded photos are separately measured for face position and size. We do not create a biometric identity database or use face data to authenticate or identify people across accounts. Optional Face ID app locking is handled by Apple; we receive only the authentication result, not Face ID data.
Generated Assets: The final, processed images created by our system are stored securely so you can view and download them.
We maintain a strict zero-monetization policy regarding your personal data. We do not sell, rent, or share any of your data, images, or personal information with third-party advertisers or data brokers.
2. Image Storage, Security, and Retention
Storage: Photos, processed copies, previews, generated portraits, face measurements, profile hints, and photo-quality findings are stored securely with Cloudflare. Data is encrypted in transit.
Use and Sharing: We use face data to assess photo suitability, guide capture, preserve the selected person's appearance, create and edit portraits, and let you save and manage your photos and profiles. We do not use face data for advertising, tracking across other services, or training our own models. Photos are disclosed to the image-processing providers listed in section 3 for the requested functions. If you choose to share a portrait, anyone with the share link can view it until you revoke the link or delete the portrait. Copies already downloaded by others remain outside our control.
Retention: Uploaded photos, processed copies, generated portraits, stored face measurements, profile hints, and photo-quality findings remain in your account until you delete the relevant data or your account. Deleting an uploaded photo removes that photo and its processed copies but does not delete portraits already generated from it. Deleting a profile does not delete its existing sessions or generated portraits. Account deletion covers all of your stored photos, portraits, profile hints, and face-analysis data.
Deletion: You can delete uploaded photos, generated portraits, and profiles in the app, or delete your account from Settings. Account deletion revokes access immediately and starts removal of stored images and face-analysis data. Removal normally completes immediately, but may take longer if a technical problem delays deletion. Contact support@pro-photoz.com if you need help with deletion. Limited purchase, account, support, and usage records may remain for receipts, security, legal obligations, and support; retained records do not require your image files or face measurements. Deleting data from ProPhotoz does not immediately erase a provider's separate safety logs or copies you saved or shared outside ProPhotoz.
Reported Images: When you report an image as offensive, we remove it from your gallery and keep a copy, together with the reason you chose, any note you added, and the instructions used to create it, so our team can review the report and improve our content filtering. We keep reported copies until our team completes that review and deletes them; deleting your account does not remove them.
3. Service Providers & Subprocessors
The following providers process data for the functions described below. Image-processing providers receive the photos and instructions needed for the selected action; authentication and billing do not require your source photos or face-analysis data.
Authentication: Clerk manages sign-in and account access.
Image Processing: We share selected photos and your instructions with OpenAI, Google, and fal.ai to create, assess, and edit portraits. ProPhotoz does not train models on your face data or submit your images for provider model training.
Provider Retention: OpenAI may retain API content in abuse-monitoring logs for up to 30 days, with longer retention for legal or safety reasons; flagged image inputs may be retained for manual safety review. Google processes images for face detection without saving them to disk. Google's AI photo-review service may retain flagged prompts for abuse review for up to 90 days and may use temporary in-memory caching. Provider safety or legally required records can have separate retention. We do not claim that every provider has zero retention.
Payments: RevenueCat manages purchase records and credit-pack entitlements. iOS purchases are processed by Apple In-App Purchase.
4. Children
ProPhotoz is not directed at children. We do not knowingly collect personal information or photographs from anyone under 18, and if we learn that we have, we will delete them.