This Privacy Policy explains what information the Photo Anime and WedGlow apps (collectively, the “Apps”) collect, how your photos are processed, which third parties we rely on as data subprocessors, and the choices you have. By using the Apps you agree to the practices described here. A WedGlow-specific copy of this policy is also available at /privacy/wedglow.

Summary

• We do not perform facial recognition and do not create or store any biometric template, faceprint, or face embedding.
• Photos you submit are sent to Google LLC (Gemini API) as a data subprocessor solely to generate the stylized output you requested.
• Photos are processed transiently. We do not retain your photos after the transformation is delivered.
• We do not sell your data and we do not use your photos to train any AI model.
• If you choose the free, ad-supported path, we show rewarded ads via Google AdMob, which processes your advertising identifier and limited device data. This is optional — subscribers and users who decline never see ads. See Advertising.

Information We Collect

To provide the Apps we process the following limited categories of data:

• Photos you submit — the image you choose from your camera roll or capture in-app, which you submit for stylization.
• Anonymous device identifier — a random ID generated on your device, used for rate-limiting and to bind your subscription to your device.
• Subscription receipt — the App Store or Google Play subscription identifier used to verify your entitlement through RevenueCat. We do not access your payment card or bank details.
• Diagnostic and log data — IP address, country code, app build number, error and crash logs, and basic usage events used to operate the service and diagnose issues. We do not link this to your real-world identity.
• Advertising identifier & ad interaction data — only if you choose the free, ad-supported path. When you opt to watch a rewarded ad to unlock a free generation, Google AdMob processes your device's advertising identifier (IDFA on iOS / Advertising ID on Android), approximate (coarse) location, device and app information, and ad-interaction events to serve, cap, and measure ads and to prevent ad fraud. Subscribers and users who decline the ad path do not have this data collected. See Advertising below.

Other than the optional advertising data described under Advertising, we do not ask for your name, email address, phone number, government ID, health information, financial-account information, contacts, calendar, precise location, or any other personal identifiers that are not listed above.

Face Data

The Apps do not collect, derive, store, or share face data as that term is used in App Store Review Guideline 5.1.1 or by analogous regulators (e.g. BIPA, GDPR Article 9 biometric data).

• The Apps do not run facial recognition, face matching, face clustering, or face-liveness detection.
• The Apps do not generate or store a biometric template, faceprint, face embedding, face vector, or any other mathematical representation of a face.
• The Apps do not identify or attempt to identify the people depicted in your photos and do not link a face to any account, profile, or external dataset.
• The uploaded photo may contain a face — that is normal for portrait stylization. The image is handled as a regular image file and is sent to our AI subprocessor (see below) for stylization. No face-specific feature extraction is performed by the Apps.

How We Process Your Photo

When you tap “Generate” in either App:

1. Your photo is transmitted over HTTPS to our backend, hosted on Cloudflare Workers.
2. Our backend forwards the photo, along with the style prompt you selected, to Google's Gemini API for image-to-image transformation.
3. Google returns the generated image to our backend, which delivers it back to your device.
4. The transient working copy of your photo is discarded once the response is delivered. We do not maintain a long-term archive of submitted photos, and we do not back them up to any other system.

Photos are not reviewed by humans for editorial purposes, and they are notused to train, fine-tune, or evaluate any machine-learning model — neither ours nor Google's. Google's paid Gemini API terms prohibit use of API inputs for training.

Data Subprocessors

The Apps rely on the following third parties acting as data subprocessors on our behalf:

• Google LLC — provides the Gemini API used to generate your stylized photo. The submitted photo and the text prompt are sent to Google solely for the purpose of producing the requested image. See Google's Privacy Policy and Gemini API Additional Terms of Service.
• Cloudflare, Inc. — hosts the backend (Workers, R2, KV, D1) and provides the network edge over which requests are transmitted. See Cloudflare's Privacy Policy.
• RevenueCat, Inc. — verifies subscription receipts and entitlements. See RevenueCat's Privacy Policy.
• Apple Inc. — App Store distribution and In-App Purchase processing on iOS. See Apple's Privacy Policy.
• Google LLC (Google Play) — app distribution and Play Billing on Android.
• Sentry (Functional Software, Inc.) — receives crash and error reports. Photos are never included in crash reports.
• Google Firebase — anonymous analytics events (screen views, feature usage). Photos and personal identifiers are not sent to Firebase.
• Google AdMob — serves the rewarded ads shown on the optional free, ad-supported path and verifies ad completion. AdMob processes the advertising identifier and limited device data described under Advertising. See how Google uses AdMob data.

Advertising

The Apps offer an optional free, ad-supported path: instead of subscribing, you may watch a short rewarded video ad to unlock a free generation. These ads are served through Google AdMob. Watching ads is never required to use a paid subscription, and subscribers do not see ads.

• To serve, frequency-cap, and measure ads and to limit ad fraud, AdMob processes your device's advertising identifier (IDFA / Android Advertising ID), approximate (coarse) location, IP address, and device and app information.
• iOS App Tracking Transparency: on iOS we request your permission before any cross-app tracking. If you decline, ads are shown in a non-personalized, limited manner.
• EEA/UK consent: where required, we present a Google-certified consent screen (UMP) before ads are loaded, and your choice governs whether personalized ads are shown.
• Your controls: you can reset or limit your advertising identifier, and opt out of personalized ads, in your device settings (iOS: Settings → Privacy & Security → Tracking / Apple Advertising; Android: Settings → Privacy → Ads).
• Google acts as an independent controller for the ad data it receives, in accordance with its own policies. See How Google uses information from sites or apps that use its services.

Data Retention

Photos: processed transiently and not retained after the generation request is fulfilled. Any working copies held by our backend or our subprocessors for the duration of the request are discarded promptly afterward.

Subscription receipts and anonymous device identifiers: retained for as long as your subscription is active and for a short period afterward as required for accounting, fraud prevention, and legal compliance.

Diagnostic logs: rolling 30-day window, after which they are aggregated or deleted.

No Sale of Personal Information; No Model Training

We do not sell or rent personal information for money. We do not use your photos, prompts, or any content you submit to train, fine-tune, or evaluate AI models — neither ours nor any third party's.

If you use the optional free, ad-supported path, the advertising identifier and related signals shared with Google AdMob to show personalized ads may be considered a “sale” or “sharing” of personal information under certain U.S. state laws (e.g. CCPA/CPRA). You can opt out of personalized ads, and avoid this sharing entirely, by declining App Tracking Transparency (iOS), declining consent where prompted, limiting your advertising identifier in device settings, or simply not using the ad path.

Security

All traffic between the Apps and our backend is encrypted in transit using TLS. Subprocessor traffic is similarly encrypted. While we use commercially reasonable safeguards, no method of internet transmission or electronic storage is 100% secure.

Children's Privacy

The Apps are not directed to children under 13 (or the equivalent minimum age in your jurisdiction) and we do not knowingly collect personal information from children. If you believe a child has used either App without parental consent, please contact us so we can investigate and remove related data.

Your Rights

Depending on your jurisdiction (e.g. GDPR/UK GDPR, CCPA/CPRA), you may have the right to request access to, correction of, or deletion of personal information we hold about you, and to object to or restrict certain processing. Because we store so little about you (no name, no email, no profile), most requests amount to deleting the anonymous device identifier and subscription record associated with your device. Contact us using the address below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above; please review the policy periodically.

Contact

Questions or requests regarding this Privacy Policy can be sent to support@photoanimeapp.com.

© 2020-2026 RockieStar Inc. — Photo Anime & WedGlow