Privacy Policy

2. Information We Collect

Phovio is designed to be privacy-friendly and anonymous-first. We do not require you to create an account with your name or email address, and we do not collect your real name, email address, contacts, or precise location.

We collect the following categories of information:

a) Account and Device Identifiers

• An anonymous account ID generated by Firebase Authentication (a Firebase UID). This is created automatically on first launch — no email or password is required.
• A device identifier (on iOS, the identifierForVendor; on Android, the Android ID) used to keep your subscription and credits associated with your device, including across app reinstalls.
• A RevenueCat user ID used to manage purchases and subscriptions.
• Your platform (iOS or Android) and app version.

b) Content You Provide

• Photos, images, and audio files you upload or capture to use as inputs for AI generation.
• Text prompts and generation settings you enter (e.g., descriptions, styles, aspect ratios, duration).
• AI-generated content produced from your inputs (photos, audio).
• If you use the Prompt Hub community feature: prompts you choose to publish, an example image, and an optional nickname (or you may post anonymously).

c) Purchase and Subscription Data

• Records of your credit purchases and subscriptions (such as the product purchased, subscription status, renewal/expiration dates, and credit balances), processed through RevenueCat and the Apple App Store or Google Play.
• We do not collect or store your credit card number, billing address, or other payment details — those are handled directly by Apple, Google, and RevenueCat.

d) Push Notification Token

• A Firebase Cloud Messaging (FCM) token so we can notify you when your content has finished generating. You can disable notifications at any time in your device settings.

e) Usage and Diagnostic Data

• Basic usage counters (such as the number of generations attempted, succeeded, or failed) and your last active time, used to operate the Service, enforce fair-use limits, and improve reliability.
• Server logs for security and troubleshooting (e.g., request paths and error logs).

f) Analytics and Advertising

• We use Google Analytics for Firebase to understand how the App is used. It collects an app instance identifier, device and app information, and in-app events (such as screens viewed, generation activity, paywall interactions, and purchases), as well as your premium status and app language.
• We use the Meta (Facebook) SDK to measure the effectiveness of our advertising campaigns. It receives app events (such as app installs and launches, and purchases and subscriptions, including price and currency), along with device and app information.
• If you do not have a premium subscription, the App may offer optional rewarded ads (for example, in the Trend Wheel) served by Google AdMob. AdMob may collect device and app information and data about your interactions with ads in order to deliver and measure ads.
• On iOS, these SDKs can access your device's advertising identifier (IDFA) only if you allow tracking in Apple's App Tracking Transparency prompt. On Android, they may collect your device's advertising ID, which you can reset or delete in your device settings.

What We Do Not Do

• We do not collect your name, email address, or phone number.
• We do not sell your personal information.

3. How We Use Your Information

We use the information we collect to:

• Provide the core Service — process your inputs and deliver AI-generated photos and audio;
• Manage your credits, purchases, and subscriptions, including granting credits and processing refunds to your balance;
• Send push notifications about your generation jobs;
• Operate the Prompt Hub community, including moderation and handling reports;
• Enforce rate limits, prevent abuse and fraud, and maintain the security and integrity of the Service;
• Diagnose problems, fix bugs, and improve the App's performance and features;
• Understand how the App is used and measure the effectiveness of our advertising campaigns (see Section 2(f));
• Show optional rewarded ads to users without a premium subscription (see Section 2(f));
• Comply with legal obligations and enforce our Terms of Use.

4. AI Processing & Third-Party Providers

To generate content, Phovio sends your inputs (such as uploaded images, audio, and text prompts) to third-party AI and infrastructure providers ("subprocessors"). Your content leaves the App and is processed on these providers' systems. Each provider processes your data under its own privacy policy and terms.

Notes:

• We may add or change subprocessors as the Service evolves (for example, additional AI providers). We will update this Policy accordingly.

We encourage you to review the privacy policies of these providers to understand how they handle data.

Face Data (Photos That Show People)

The App does not use facial recognition and does not collect biometric data. It has no face detection, face scanning, or face-mapping feature. It does not use Face ID, the TrueDepth camera, ARKit, or any on-device face analysis, and we never create or store facial landmarks, face geometry, face embeddings, faceprints, or other biometric identifiers.

Photos you choose to upload (for example, a selfie or portrait for a trend or a photo tool) may show your face or other people's faces. We treat these as ordinary image files and collect them only when you select them.

• Use: We use these photos only to generate the image you request. We do not use them to identify or authenticate anyone, to build profiles of you, for advertising or tracking, or to train AI models, and we do not sell them.
• Sharing: To create your image, the photo is sent over an encrypted connection only to the AI providers listed above that run the generation: OpenAI, Google (Gemini), and Replicate. They process it under their own terms. These photos are not shared with our analytics or advertising partners (Google Analytics for Firebase, Meta, or Google AdMob).
• Storage: The photos are stored in Cloudflare R2 under a random file name linked to your anonymous account ID. Our database (MongoDB Atlas) holds only links to these files, not the images.
• Retention and deletion: The photos and the images generated from them are permanently deleted from our storage within 7 days of upload, and we keep no backups or other copies. You can delete generated results sooner from within the App, or ask us to delete your data at any time (see Section 12). The only exception is an example image you choose to publish to the Prompt Hub (see Section 11).

5. Storage, Location & Retention

• Your uploaded source files and AI-generated content are stored in Cloudflare R2 object storage under a path tied to your anonymous user ID.
• Your account record, generation history, and credit ledger are stored in our database (MongoDB Atlas).
• Your photos are permanently deleted. Photos you upload and the images generated from them are permanently and completely deleted from all of our systems within 7 days of creation, unless you delete them sooner from within the App. We do not keep backups or other copies of them. This does not apply to an example image you choose to publish to the Prompt Hub (see Section 11), or to copies processed by the AI providers listed in Section 4, which handle data under their own terms.
• Photos that show faces are not kept longer than any other photo: they are deleted from our storage within 7 days, and no backups or other copies are kept (see Face Data in Section 4).
• Uploaded and generated audio files are also automatically deleted from all of our systems within 7 days of creation.
• Text you enter for a generation, such as prompts and other input values, may be stored with your generation history in our database and may be kept longer than the related files. These records may be kept for as long as your account remains active or as needed to provide the Service, and you can ask us to delete them at any time (see Section 12).
• We retain your account data (account record, credit ledger) for as long as your account remains active or as needed to provide the Service.
• You can delete generated results from within the App, which removes the associated files from storage.
• For accuracy and fraud prevention, credit ledger entries (records of credits granted, spent, and refunded) are kept as an immutable transaction history.
• You may request deletion of your account and associated data by contacting us (see Section 12).

6. How We Share Information

We do not sell your personal information. We share information only:

• With the subprocessors listed in Section 4, to operate the Service, and with the analytics and advertising partners described in Section 2(f);
• To comply with the law, respond to lawful requests, or protect the rights, safety, and property of Phovio, our users, or the public;
• In connection with a business transfer (such as a merger or acquisition), in which case we will notify you of any change in how your data is handled.

7. Your Rights & Choices

Depending on where you live, you may have rights under laws such as the EU/UK GDPR or the California Consumer Privacy Act (CCPA/CPRA), including the right to access, correct, delete, or restrict processing of your personal data, and the right not to be discriminated against for exercising these rights. We do not sell personal information.

You can also:

• Revoke device permissions (photos, microphone, notifications) at any time in your device's settings;
• Control tracking — on iOS, allow or deny tracking in the App Tracking Transparency prompt and change your choice at any time in Settings > Privacy & Security > Tracking; on Android, reset or delete your advertising ID in your device settings;
• Turn off push notifications in your device settings;
• Delete generated content within the App;
• Request access to or deletion of your data by contacting us at the email in Section 12.

To make a request, contact us using the details in Section 12. We may need to verify your request using your device or account identifiers.

8. Children's Privacy

Phovio is not intended for children under the age of 13 (or the minimum age required in your country). We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with information, please contact us and we will delete it.

9. Security

We take reasonable measures to protect your information, including:

• Storing authentication tokens in the device's secure storage;
• Transmitting data over encrypted connections (HTTPS/TLS);
• Verifying purchase webhooks with a shared secret to prevent tampering.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International Data Transfers

Phovio is available globally and our providers may process and store data in countries other than your own, including the United States. Where required, we rely on appropriate safeguards for such transfers. By using the App, you understand that your information may be transferred to and processed in these locations.

11. Community Content (Prompt Hub)

If you publish prompts to the Prompt Hub:

• Your submitted prompt, title, and example image become publicly visible to other users.
• You may publish under a nickname or anonymously.
• Do not include personal or sensitive information in prompts or example images, as published content is visible to others.
• Published content is moderated and may be removed if it violates our Terms of Use, and users may report content they find objectionable.

12. Changes to This Policy & Contact

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, where appropriate, provide additional notice in the App. Your continued use of the App after changes take effect constitutes acceptance of the updated Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your data, contact us at: