Privacy Policy

Last Updated: September 30, 2025

GhostfaceAI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

1. Information We Collect

1.1 Photos and Images

We collect photos that you voluntarily provide through:

• Camera Access: Photos you take directly within the App.
• Photo Library: Images you select from your device's gallery.
• Generated Images: AI-transformed images created by our service.

1.2 Device Information

We automatically collect basic device information such as:

• Device type and model
• Operating-system version
• Unique device identifiers
• Mobile-network information
• App version and usage statistics

1.3 Usage Data

We collect data about how you interact with the App:

• Features used and frequency of use
• Time spent in the App
• Number of images generated
• Error logs and performance data
• User preferences and settings

1.4 Subscription Information

For premium subscribers we collect:

• Subscription status and type
• Purchase history (via Apple App Store)
• Renewal and expiration dates

Note: Payment details are processed by Apple and never stored on our servers.

2. Collection and Use of Face Data

We collect face data only in the form of the photos you voluntarily upload. We do not create or store biometric templates, facial maps, or facial-recognition identifiers.

2.1 Purpose of Use

• Uploaded face images are used exclusively to generate the AI-transformed image requested by you.
• Face images are not used for identity verification, surveillance, advertising, or behavioral profiling.

2.2 Processing and Storage

• Uploaded photos are transmitted first to our secure backend server and then to our trusted AI processing provider Fal.ai to generate the requested image.
• Original photos are cached only for the duration of processing and are automatically deleted typically within minutes (and in all cases within 24 hours) after processing is complete.
• Generated images remain available in your personal in-app gallery until you choose to delete them.

2.3 Third-Party Sharing

• For the sole purpose of generating your requested AI image, photos are securely transmitted to Fal.ai, our contracted AI processing provider.
• Both our server and Fal.ai use the photos only for transformation and delete them within 24 hours after processing.
• We do not sell, rent, or share photos or face data with advertisers or other third parties.

2.4 Retention

• Original photos: Deleted automatically after processing (typically within minutes, always within 24 hours).
• Generated images: Retained in your personal in-app gallery until you delete them.
• When you delete an image, it is removed from our systems within 30 days.

2.5 User Control

• You can delete uploaded or generated images at any time via the in-app gallery.
• You may request deletion of any residual data by contacting us (see Section 12).

2.6 Security

• All photo and face-image data is encrypted in transit (TLS/HTTPS).
• Data stored at rest (e.g., generated images in the gallery) is protected using industry-standard encryption and access-control measures.

3. How We Use Your Information

3.1 Service Provision

• Processing your photos through our AI transformation technology
• Generating and delivering transformed images
• Storing your generated images in your personal gallery
• Managing your subscription and premium features

3.2 App Improvement

• Analyzing aggregated usage data to improve features and performance
• Fixing bugs and technical issues
• Developing new functionality

3.3 Communication

• Sending essential service notifications
• Responding to inquiries and support requests
• Informing you about important updates or feature changes

4. How We Store and Protect Your Data

4.1 Data Storage

Original photos: Processed in real-time; cached temporarily and deleted within 24 hours of processing.

Generated images: Stored securely in the cloud and linked to your account or device identifier so you can view and manage them in your gallery.

4.2 Security Measures

• TLS/HTTPS encryption for data in transit
• Encryption at rest on our servers
• Regular security audits and updates
• Role-based access controls and authentication
• Use of reputable and secure cloud infrastructure

4.3 Data Retention

• Original photos: Deleted after processing (within 24 hours)
• Generated images: Retained until deleted by you; deleted images removed from our systems within 30 days
• Usage data: Retained for up to 2 years for analytics and troubleshooting
• Account data: Retained while your subscription is active and for 30 days after cancellation

5. Data Sharing and Disclosure

5.1 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information, photos, or generated images to advertisers or any other third parties.

5.2 Service Providers

We may share limited data with trusted service providers who support our operations:

• AI Processing: Fal.ai for generating requested AI images
• Cloud Storage: Secure hosting of generated images
• Subscription Management: RevenueCat for subscription status
• Analytics & Crash Reporting: to improve stability and usability

All providers are contractually obligated to use data only for the stated purpose and to apply adequate security measures.

5.3 Legal Requirements

We may disclose data if required by law, court order, or governmental authority, or when disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or abuse
• Protect the safety of users or the public

6. Your Privacy Rights

6.1 Access and Control

You may request:

• A copy of your personal data
• Deletion of your images or account data
• Correction of inaccurate information
• Opt-out of analytics and non-essential data collection

6.2 Managing Your Images

You can delete individual images or your entire gallery at any time through the App. Deleted images are permanently removed from our systems within 30 days.

6.3 Revoking Permissions

You can revoke camera and photo-library access via your device settings. Doing so will prevent the App from functioning as intended.

7. Children's Privacy

GhostfaceAI is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us immediately; we will promptly delete it.

8. International Data Transfers

Your information may be processed in countries other than your own. We apply appropriate safeguards (such as standard contractual clauses) to ensure an adequate level of protection for your data.

9. Third-Party Services

9.1 Apple App Store

Subscription purchases are processed by Apple; Apple's privacy policy governs their handling of payment information.

9.2 Social Media Sharing

If you share generated images on social media, their own privacy policies apply.

10. AI and Machine Learning

By default, we do not use your uploaded photos for training or improving our AI models. If you wish, you can opt in via the App to allow anonymized photos to be used for improving our models. You can withdraw this consent at any time through the App or by contacting us.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by posting the updated version in the App and updating the "Last Updated" date above. Continued use of the App after such changes indicates your acceptance of the revised policy.

12. Contact Us

For questions, concerns, or data-related requests, you can contact us:

• Via the in-App support section
• Through our website contact form
• By email at the address provided in the App