Privacy Policy

Effective Date: February 9, 2026

This Privacy Policy describes how ImageTransform ("we," "us," or "our") collects, uses, and shares information when you use our mobile application ("App"). By using the App, you agree to the collection and use of information as described in this policy.

1. Information We Collect

1.1 Account Information

When you create an account or sign in, we may collect:

• Anonymous Account: A unique user identifier generated automatically when you first use the App.
• Apple Sign-In: Your Apple ID user identifier, name (if you choose to share it), and email address (which may be a private relay address).
• Google Sign-In: Your Google account name, email address, and profile photo URL.

1.2 Photos and Images

When you use the App to transform images, we collect:

• Photos you select from your device's photo library or capture using your camera.
• AI-generated images and videos created from your photos.

Your photos are uploaded to our servers solely for the purpose of performing AI-based image transformation. Generated media is stored on our servers so you can access it from your history.

1.3 Face Data

Our App processes photos that may contain human faces. Below is a detailed explanation of how we handle face data:

What face data we collect:

• When you upload a photo for AI transformation, the image may contain your face or the faces of others. The uploaded photo, including any facial features visible in it, is sent to our servers for processing.
• We do not extract, store, or create facial recognition templates, face prints, facial geometry maps, or any biometric identifiers from your photos.
• We do not use facial recognition technology to identify individuals.

How we use face data:

• Face data contained in your uploaded photos is used exclusively to perform the AI-powered image and video transformations you request (e.g., applying artistic styles such as "Superhero" or "Batman" to your photo).
• Our AI models process the visual content of your photo, including any faces, to generate a stylized output image or video.
• Face data is never used for facial recognition, user identification, advertising, profiling, tracking, or any purpose other than generating the transformed media you requested.

Third-party sharing:

• Your photos containing face data are transmitted to our backend inference servers hosted on Google Cloud infrastructure (europe-west1 region) for AI processing.
• We do not sell, license, or share your face data with any third parties for their own purposes.
• Face data is not shared with advertisers, data brokers, analytics providers, or any other third parties.
• Third-party services used by the App (such as Mixpanel, AppsFlyer, and RevenueCat) do not receive or have access to your photos or face data.

Storage and retention of face data:

• Uploaded photos (which may contain face data) are stored on Firebase Cloud Storage (Google Cloud infrastructure, europe-west1 region).
• Your uploaded photos are retained on our servers for the duration of your account to enable re-generation and access to your history.
• Generated (transformed) images and videos are also retained on our servers for the duration of your account.
• If you delete your account, all uploaded photos and generated media — including any face data contained within them — will be permanently deleted from our servers within 30 days of the deletion request.
• You may also request deletion of specific photos or generated media at any time by contacting us at support@imagetransform.app.

1.4 Usage and Analytics Data

We automatically collect certain information about how you interact with the App, including:

• App usage events and feature interactions (via Mixpanel).
• Install attribution and campaign data (via AppsFlyer).
• Device type, operating system version, and app version.
• Crash reports and performance data.

1.5 Purchase Information

If you make in-app purchases, payment processing is handled entirely by Apple through the App Store. We do not collect or store your payment card details. We receive confirmation of your purchase and subscription status through RevenueCat, our subscription management service.

2. How We Use Your Information

We use the information we collect to:

• Provide our services: Process your photos through our AI models and deliver transformed images and videos.
• Manage your account: Authenticate your identity, maintain your credit balance, and track your generation history.
• Process purchases: Manage subscriptions and credit purchases through RevenueCat and the App Store.
• Improve the App: Analyze usage patterns to fix bugs, improve features, and develop new functionality.
• Marketing attribution: Understand how users discover and install the App.

3. Third-Party Services

We use the following third-party services that may collect and process your data:

4. Data Storage and Security

Your data is stored using Firebase Cloud Firestore and Firebase Cloud Storage, hosted on Google Cloud infrastructure. We implement reasonable security measures to protect your information, including:

• Encrypted data transmission using HTTPS/TLS.
• Firebase Authentication tokens for API authorization.
• Secure server-side processing of images.

While we take reasonable steps to protect your data, no method of electronic storage or transmission is 100% secure.

5. Data Retention

• Account data: Retained as long as your account is active.
• Uploaded photos (including face data): Stored on our servers for the duration of your account to enable re-generation and history features. Permanently deleted within 30 days of account deletion.
• Generated media: Retained on our servers as long as your account exists so you can access your generation history. Permanently deleted within 30 days of account deletion.
• Face data: We do not extract or store face data separately from your photos. Any facial information exists only as part of the uploaded photos and generated media, and follows the same retention and deletion policy described above.
• Analytics data: Retained according to the respective third-party service's retention policies. Analytics data does not include photos or face data.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Deletion: Request deletion of your account and associated data.
• Correction: Request correction of inaccurate personal data.
• Portability: Request your data in a portable format.
• Withdraw consent: Withdraw your consent to data processing at any time.

To exercise any of these rights, please contact us using the information provided below.

Photo Library Access

The App requests access to your photo library to allow you to select images for transformation. You can revoke this permission at any time through your device's Settings.

7. Children's Privacy

The App is not intended for use by children under the age of 13 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete such information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including countries within the European Economic Area (EEA) where our cloud infrastructure is hosted. By using the App, you consent to the transfer of your information to these countries.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this page. We encourage you to review this Privacy Policy periodically. Your continued use of the App after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: contact@palli.ai