Privacy Policy

Last updated: October 25, 2026

Imagera AI ("the App") respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information.

1. Data We Collect

1.1 Device Identifier

We generate a unique device identifier (UUID) stored in your device. This is used to identify your device. We do not collect your name, email address, or phone number.

1.2 Face Data

Definition: "Face Data" refers to photos containing your face that you upload, facial characteristics extracted for AI processing, and AI-generated images based on your likeness. This data may be considered biometric data under certain jurisdictions.

Collection: When you create avatars or use AI filters, we collect photos containing your face. These photos are processed to generate personalized AI images.

Use: Face Data is used exclusively to:

• Generate personalized AI images based on your selected filters
• Apply AI styles to your facial features
• Maintain a private history of generation input photos and generated results for service administration and support

We DO NOT:

• Use Face Data to train AI models or other products
• Use Face Data for identification, authentication, or surveillance
• Sell Face Data or share Face Data with advertising platforms, ad networks, or data brokers
• Build user profiles for marketing purposes

Service Providers: We disclose Face Data only to the service providers listed in Section 3 (Replicate, Firebase/Google Cloud, and Apple CloudKit/iCloud where applicable) strictly to deliver requested app features.

Retention:

• Avatar photos (Firebase Storage): Retained until you delete them or close your account
• Generation input photos: Private copies of photos submitted for generation or editing are retained in Firebase/Google Cloud Storage for up to one year (365 days) from submission. This includes uploaded photos, selected selfie/avatar photos, and generated images resubmitted as editing inputs. They are automatically removed after this period and are also removed when you delete your account. Deleting an original profile photo does not delete the separate generation-history copy.
• AI processing (Replicate): Photos are temporarily processed and automatically deleted after generation completes
• Generated results: A private server copy of new generated results is retained for up to one year (365 days) from generation for service administration and support, and removed on account deletion if earlier. Images saved to your library are also stored on your device and synced within your iCloud account (CloudKit). Generated images resubmitted for editing are treated as input photos under the policy above.

1.3 Avatar Photos

When you create avatars, photos you upload are stored in Firebase Storage (Google Cloud). These photos are used exclusively for AI image generation.

1.4 Avatar Information

Avatar name and gender selection you provide are stored in Firebase Firestore to personalize AI-generated content.

1.5 Credit Balance & Subscription Status

Your credit balance, purchase history, and subscription status are stored in Firebase Firestore, linked to your device identifier.

1.6 Technical Data

We may collect:

• IP address (for rate limiting and security)
• Device model and OS version
• App usage data (features used, generation counts)

2. How We Use Your Data

• AI Image Generation: Your photos and prompts are processed by AI models to generate images.
• Account Management: Device identifier is used to manage your credit balance and subscription.
• Payment Processing: In-app purchases are handled by Apple. We do not collect or store payment information.
• Service Improvement: Anonymized, aggregated usage data may be used to improve the App.
• Security: IP addresses are used for rate limiting to prevent abuse.

3. Third-Party Services

We share data with the following third-party services as necessary to provide the App's features:

3.1 Replicate (AI Image Generation)

Your photos are temporarily sent to Replicate's AI models for image generation. Replicate processes your Face Data on servers in the United States.

• Photos are used only for the requested image generation
• Photos are automatically deleted after processing completes
• Replicate does not use your photos to train AI models

See Replicate's Privacy Policy.

3.2 Firebase / Google Cloud

• Firestore: Stores your account data (device ID, credit balance, avatar info).
• Firebase Storage: Stores your uploaded avatar photos and the private one-year history of generation inputs and generated results.
• Firebase App Check: Validates that requests come from genuine app installations.

See Firebase Privacy Policy.

3.3 Apple Services

• StoreKit: Processes in-app purchases and subscriptions.
• CloudKit / iCloud: Syncs locally stored image data across your devices.
• APNs: Delivers push notifications.

See Apple's Privacy Policy.

4. Data Retention

• Generation input photos and generated results are retained for up to one year (365 days) from submission or generation, or until account deletion if earlier. Other account data is retained as long as your account is active.
• If you request deletion, your data will be removed within 30 days.
• Images saved on your device and in your iCloud account remain under your control; deleting a server copy does not remove your local library. Server copies of generated results and images submitted for editing follow the retention policy above.

5. Your Rights

You have the right to:

• Access: Request a copy of the data we hold about you.
• Deletion: Request deletion of your account and associated data.
• Portability: Request your data in a portable format.

To exercise these rights, contact us at [email protected] with your device identifier (found in the App's Settings).

6. Security

We implement security measures to protect your data:

• Firebase App Check: Ensures requests come from genuine app installations.
• HTTPS: All data is transmitted over encrypted connections.
• Rate Limiting: Prevents abuse of our services.
• Keychain Storage: Device identifier is stored securely in the iOS Keychain.

7. International Data Transfer

Your data may be processed on servers located in the United States (Replicate AI services) and other countries where Google Cloud operates. By using the App, you consent to this transfer.

8. GDPR (European Users)

If you are in the European Economic Area, you have additional rights under GDPR:

• Right to rectification of inaccurate data.
• Right to restrict processing.
• Right to object to processing.
• Right to lodge a complaint with a supervisory authority.

Our legal basis for processing your data is your consent (by using the App) and legitimate interest (service operation and security).

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the App after changes constitutes acceptance.