Privacy Policy

The controller of your personal data is Alperen Ciftlikci, an individual seller who operates Photogenic AI. For any privacy question or request, contact us at photogenicai.app@gmail.com.

We only collect what we need to run Photogenic AI:

• Account data: your email address, display name and profile picture if your sign-in provider shares them, your sign-in method, preferred language and account creation date.
• Photos you upload: the images you provide as input for a tool or chat edit.
• Creations: the results generated for you, together with the tool, settings, prompts and chat messages you used.
• Credit and plan data: your credit balance, credit history (grants, purchases, charges and refunds), redeemed promo codes and your current plan.
• Purchase data received from our payment provider: your billing country, subscription status, order references and a customer identifier. We never receive your full card details.
• Consent records: when you accepted the AI processing notice and confirmed that you have consent for the photos you upload.
• Technical data: security and error logs, such as IP address, browser type and request times, which our infrastructure records to keep the service secure and working.

We do not collect your precise location or your contacts, and we do not use advertising identifiers.

• To provide the service you signed up for: creating your account, processing your photos, saving your Library, managing credits and plans. Legal basis: performance of our contract with you.
• To run AI processing on your photos: we show you an AI processing notice and ask for your consent before your first generation. Legal basis: your consent, which you can withdraw at any time by no longer using the AI tools and deleting your content.
• To keep Photogenic AI safe: moderating uploads and results, preventing fraud, abuse and repeat free-credit claims, and securing our systems. Legal basis: our legitimate interest in a safe and fair service.
• To handle purchases, tax and accounting obligations, together with our payment provider. Legal basis: contract performance and legal obligations.
• To answer your messages and support requests. Legal basis: contract performance or our legitimate interest in replying to you.

We do not sell your personal data and we do not use it for advertising or profiling.

When you start a generation, your uploaded photo, the selected tool and your prompt are sent from our servers to Google's Gemini image models through Google Cloud Vertex AI. AI calls are made only from our servers, never directly from your browser.

Google acts as our data processor under its Google Cloud terms. Under Google Cloud's terms, customer data sent to Vertex AI is not used to train Google's models. We do not use your photos to train any AI model either.

Uploads, prompts and results also pass through automated moderation to block content that breaks our Terms of Service. This check is automated and is used only to decide whether a request may proceed; it does not identify people.

AI results can be imperfect. You decide whether to keep, download or delete each result.

Many Photogenic AI tools, such as retouching, hairstyles, headshots or age effects, work on photos that contain faces. Here is exactly how that content is handled:

• We do not perform facial recognition or biometric identification. Photogenic AI never tries to find out who is in a photo.
• We do not create biometric templates, face prints or face geometry profiles.
• Face content is processed only to perform the edit you requested.
• Face content is never sold, shared with advertisers or used for marketing or analytics.
• Google processes the photo as our processor to create the result, and under Google Cloud's terms customer data sent to Vertex AI is not used to train Google's models.
• Your input photo and its results are stored in your private Library until you delete them or delete your account.
• Photos that contain faces, and their results, are stored and processed in the United States (Google Cloud, region us-central1), like all other account data.

Please only upload photos of yourself or of people who have agreed to it.

Your photos and results are stored in Google Cloud Storage in a private folder that only your account can access, and the related details are stored in Google Cloud Firestore. Our services are hosted by Google Cloud and Firebase in the United States (Google Cloud region us-central1): your photos, results and account data are stored and processed there.

• Input photos are kept together with the creation they belong to, so that before and after comparison keeps working.
• Creations, chats and prompts stay in your Library until you delete them or delete your account.
• Deleting a creation deletes its input and output files.
• Credit history is kept for as long as your account exists.
• Security logs are kept by our infrastructure for a limited period and then deleted automatically.
• Public share links exist only if you create one. A link shows the watermarked result, and your original photo only if you choose to include it. Shared pages and their images ask search engines not to index them. A link stops working 30 days after you create it, or as soon as you stop sharing, and its public images are then deleted.

Our payment provider keeps its own transaction records for as long as tax and accounting laws require, under its own privacy policy.

You can delete your account at any time from your account settings, or by writing to photogenicai.app@gmail.com. Deleting your account permanently removes all your uploaded photos, results, chats, prompts, credit history and your profile.

We keep only a one-way hash of your email address, which cannot be turned back into the address, solely to prevent repeat claims of free starter credits. We do not use it for any other purpose.

We share data only with the providers needed to run Photogenic AI, each bound by a data processing agreement or their own terms as an independent controller:

• Google Cloud and Firebase (Google): hosting, authentication, database, file storage, server functions and AI processing via Vertex AI. Google also sends the sign-in emails for passwordless email links through Firebase Authentication.
• Dodo Payments (Dodo Payments Inc. and its group companies), our Merchant of Record and reseller: checkout, payment, invoicing, taxes and subscription management. When you buy a plan, credit pack or headshot pack, Dodo Payments processes your payment details and billing information directly as an independent controller under its own privacy policy (dodopayments.com/privacy-policy).
• Google, if you choose to sign in with it, receives the information needed to authenticate you.

We may also disclose data where required by law or to protect the rights and safety of our users and others.

Your data, including photos that contain faces, is stored and processed in the United States by Google Cloud. If you use Photogenic AI from the European Economic Area, the United Kingdom, Switzerland or Turkey, this means your data is transferred to the United States. These transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. Some of our providers may also access data from other countries, for example for support or security, under the same kind of safeguards. If you are in Turkey, your data is transferred abroad for the purpose of providing the service, in line with applicable data protection law.

Photogenic AI uses strictly necessary cookies and browser storage:

• Authentication session, so you stay signed in.
• Language preference.
• Your cookie and consent preferences.
• Security tokens that help protect our server functions from abuse.

Optional analytics: only if you choose "Allow analytics" in the cookie banner, we use Google Analytics 4 (through Firebase) to measure which pages and features are used. It runs in Google Consent Mode: until you agree, no analytics cookies are set. We do not use advertising cookies, do not sell data and IP addresses are anonymised. You can change your choice at any time with "Cookie settings" in the footer.

All data is encrypted in transit using HTTPS and encrypted at rest by Google Cloud. Access rules ensure that only your signed-in account can read your photos, results and history. Credits, plans and payments can only be changed by our servers, not by the browser. No system is perfectly secure, but we follow industry practice to protect your data and will notify you and the authorities of a data breach where the law requires.

Depending on where you live, including under the EU GDPR and Turkey's KVKK, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data, directly from your account settings or by email.
• Receive a copy of your data in a portable format, on request.
• Object to processing based on our legitimate interests.
• Withdraw your consent at any time, without affecting processing done before.
• Lodge a complaint with your data protection supervisory authority.

To exercise these rights, write to photogenicai.app@gmail.com from the email address linked to your account. We may ask you to confirm your identity before acting on a request, and we respond within the time limits set by law.

Photogenic AI is not directed to children. Accounts for people under 16 are not allowed, and we do not knowingly collect personal data from children under 16. If you believe a child has created an account or shared personal data with us, please contact us at photogenicai.app@gmail.com and we will delete it.

We may update this Privacy Policy when Photogenic AI or the law changes. The date at the top shows the latest version. If a change significantly affects how we use your data, we will let you know in the app or by email before it takes effect.