Privacy Policy
Applies to our AI-powered apps, including StickerForge AI (神图贴纸), DreamPaint AI, and PetTalk AI.
Last updated: May 2026
1. What we collect
- Account: your Apple sign-in id and email (or Apple-relayed email) when you sign in with Apple.
- Generation input: the text prompts you submit, and any photo, selfie, or audio clip you choose to attach for AI generation.
- Usage: anonymized analytics events (e.g. when you generate content, watch a rewarded ad, or purchase credits) collected via Firebase Analytics; ad request signals and ad identifiers used by Google AdMob to serve rewarded ads (only in apps that include rewarded ads).
- Purchases: the StoreKit signed transaction for credit-pack or premium-IAP purchases, used to verify the purchase server-side and credit your account.
2. How we use it
We use this data to authenticate your account, run AI generations against your prompt and inputs, deliver and verify in-app purchases, prevent abuse, measure feature usage so we can improve the app, and (where applicable) serve rewarded ads to users who choose to watch them in exchange for credits.
3. How we share it
We never sell your data. We do share specific data with the following processors, each of whom is contractually required to provide the same or equivalent protection:
- AI service provider — receives your text prompt and any photo, selfie, or audio you attach, only to generate the result you requested. Outputs are returned to your device. The provider does not retain your inputs for training unrelated to this service.
- Cloudflare — runs our backend servers and image storage. Data passes through and is stored briefly to deliver the generation result to your device.
- Google (Firebase Analytics) — receives anonymized usage events to help us understand which features users rely on.
- Google (AdMob) — receives ad request signals and ad identifiers to deliver rewarded ads. We do not pass your prompt or photo to AdMob.
- Apple — handles sign-in and in-app purchases per Apple's privacy policy.
4. Your photos and audio
Photos, selfies, and audio clips uploaded for AI generation are stored short-term on our servers (Cloudflare R2) and deleted within 24 hours. They are not used to train models, are not shown to other users, and are not retained beyond what is required to complete the generation.
4.1 Face data
Some apps in this family (e.g. StickerForge AI's "Selfie" mode) accept a photo that contains a face so the AI can generate a sticker that resembles the person.
- What we collect: the photo itself, exactly as you supplied it, and an on-device boolean indicating whether Apple's Vision framework detected at least one face rectangle in that photo. We do not collect face landmarks, face embeddings, faceprints, or any biometric identifier.
- How it's collected: face detection runs entirely on your device through Apple's
VNDetectFaceRectanglesRequest. The result (a yes/no flag plus a bounding box) never leaves your device.
- How it's used: the on-device flag drives a "preserve identity" hint we send alongside the photo to our AI service so the generated sticker keeps the person's likeness. Without the flag the AI may produce a generic stylized result.
- Sharing: the on-device face-detection result is not shared with anyone. The photo (which contains the face) IS shared with our AI service provider strictly to generate the requested sticker — same processor disclosed in section 3.
- Retention: we retain the source photo on our servers for up to 24 hours, after which it is deleted. Generated stickers stay on your device unless you explicitly export them. We never build a face database from these photos.
- No biometric identification: we do not run face recognition, identity matching, age/gender estimation, or any other inference beyond "is at least one face present in the picture you uploaded."
5. App Tracking Transparency
On first run we ask permission via Apple's App Tracking Transparency prompt. Granting permission lets ads be slightly more relevant; declining means ads stay generic. The watch-ad-for-credits feature works exactly the same either way.
6. Your rights & control
Generated content stays on your device. You can delete your account at any time from Profile → Delete Account, which removes your account record, credit balance, and any cached generation data on our servers. You can also opt out of personalized ads at any time via the system Settings → Privacy & Security → Tracking.
7. Children's privacy
Our apps are not directed at children under 13 and do not knowingly collect data from them.
8. Changes to this policy
We may update this policy as the app evolves. Material changes will bump the "Last updated" date above and re-prompt for consent in-app.
9. Contact
Questions? Email support@autoapp.dev.