Privacy policy
This policy explains what the Paparizzi app for Android and iOS (the "app") collects, why, who it's shared with, how long it's kept and the choices you have. "Paparizzi", "we" and "us" mean the developer of the app. If you have a question, write to support@paparizzi.app.
- Your photo library stays on your phone. We don't back it up or upload it.
- A photo leaves your phone only when you use AI Studio. It's sent to our server and to Google's Gemini AI to make your result, and our copy is deleted within 7 days.
- We keep your account ID, email address, credit balance and purchase records.
- No ads, no analytics or tracking tools, and we never sell or rent your data.
- You can delete your account and its data at any time from the app.
1. What we collect
Your account
You can sign in with Google or with Apple, through Google's Firebase Authentication. We receive your account ID, your email address and which sign-in method you used. Apple lets you hide your email address; then we receive a private relay address instead. Firebase also holds the name and profile photo from your Google or Apple account, which the app shows on your profile.
You can also use the app as a guest. A guest gets a random account ID with no name or email address.
Photos you choose
The app only sees the photos you pick with your phone's photo picker, and it doesn't use the camera. Your library and your edits are stored inside the app on your phone and are excluded from device backups. Adjustments and filters are applied on your phone.
When you generate in AI Studio, the app uploads:
- the photo with your edits applied, at up to 2048 pixels on its longest side;
- for Magic eraser, the area you brushed over;
- for effects that need one, the second photo you add (for example a childhood photo);
- your choices: the effect, edits and makeup you picked, their settings, and which people to remove.
For Remove people, the app also sends the photo to find the people in it, so you can choose who to keep. That photo isn't stored.
Processing that stays on your phone
The makeup preview and Motion blur find faces, skin, hair and the main subject in your photo using Google's MediaPipe and ML Kit, which run on your phone. These results never leave your phone. We don't create face templates or use faces to identify anyone. ML Kit may send Google basic diagnostics about how it runs, such as performance and errors, without your photos.
Credits and purchases
We keep your credit balance, a history of credits added and spent, and a record of each generation: your choices, its status and when it ran. Credit packs are bought through Google Play or the App Store and confirmed through RevenueCat. From them we receive the product, the store's transaction ID, the store, the date and the price. We never see your card or payment details.
Technical data
Our servers log each request: your IP address, the time, what was requested and the result. We use these logs to run the service, fix problems and prevent abuse. RevenueCat's software in the app also receives basic device and app details, such as the platform, system version, app version and language, to process purchases.
What we don't collect
We don't collect your location, contacts, microphone or camera input, or advertising identifiers, and the app contains no advertising or analytics tools.
2. How we use it
- To create your account, sign you in and keep it secure.
- To make the AI results you ask for and deliver them to your phone.
- To sell credit packs, add their credits and handle refunds.
- To keep the service running, fix problems and prevent fraud and abuse.
- To answer you when you contact us.
- To meet legal, tax and accounting obligations.
We don't use your photos or data to train AI models, for advertising or to build profiles about you. If you're in the European Economic Area or the UK, we rely on these legal bases: providing the service you asked for (contract), keeping it secure and free of abuse (legitimate interests), and our legal obligations.
3. How AI processing works
AI results are made by Google's Gemini API. Our server stores your upload in a private Google Cloud Storage bucket while it's processed and sends it to Gemini with instructions for your chosen look. The upload is deleted as soon as the generation finishes. The result is kept for up to 7 days so the app can download it, then deleted automatically. The app keeps its own copy on your phone.
We use Gemini as a paid service. Under Google's terms for paid use, Google doesn't use what we send or receive to improve its products. Google may keep it for a limited time only to detect abuse of its service.
4. Who we share it with
We share data only with the companies that run parts of the service for us, and only what each one needs. They process it on our behalf and under their own security and privacy commitments.
| Provider | What it does | Data it receives |
|---|---|---|
| Google Firebase Authentication | Sign-in | Account ID, email address, name and profile photo, sign-in method |
| Google Cloud | Hosting our server, temporary photo storage, job queue, logs | Uploads and results, request logs including IP addresses |
| Google Gemini API | Making AI results and finding people for Remove people | The photos and choices you send to AI Studio |
| Neon | Our database | Account ID, email address, credits, generation and purchase records |
| RevenueCat | Processing credit-pack purchases | Account ID, purchases, basic device and app details |
| Google Play and Apple App Store | Payments | Your purchases, under the store's own privacy policy |
We may also disclose data when the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the app, in which case this policy continues to apply to it. We never sell or rent your data, and we don't share it for advertising.
5. Where it's stored
Our providers may process data in the United States and other countries outside your own. Where the law requires it, these transfers are protected by safeguards such as the European Commission's standard contractual clauses.
6. How long we keep it
| Data | Kept for |
|---|---|
| Photos you upload | Until the generation finishes |
| AI results on our servers | Up to 7 days |
| Account, credits and generation records | Until you delete your account |
| Purchase records | Kept after account deletion, no longer linked to you, so a purchase can't be credited twice and for accounting |
| Server logs | About 30 days |
| Your library on your phone | Until you delete it, delete your account or uninstall the app |
7. Deleting your account
In the app, go to Profile › Delete account. This deletes your account, your credits, your generation records and any results still on our servers, and removes you from RevenueCat and Firebase sign-in. Unused credits are lost. It also deletes the photos stored in the app on that phone; photos you saved to your phone's gallery stay. You can also ask us to delete your account by email.
8. Your rights
Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, receive a copy, or object to or restrict how we use it. To use any of these rights, email support@paparizzi.app from the email address of your account. We'll answer within 30 days. You won't be treated differently for using them. If you're unhappy with our answer, you can complain to your local data protection authority.
If you're a California resident: we don't sell or share your personal information as those terms are defined in California law, and we don't use sensitive personal information to infer anything about you.
9. Security
All traffic between the app and our server is encrypted (HTTPS). Uploads and results are stored in a private bucket that only our server can access, and each account can reach only its own data. No system is perfectly secure, but we work to protect your data and will tell you if a breach affects it, as the law requires.
10. Children
Paparizzi isn't meant for children under 13, or the minimum age required in your country, and we don't knowingly collect their data. If you believe a child has given us data, email us and we'll delete it.
11. Changes to this policy
If we change this policy, we'll post the new version here with a new effective date. If the changes are significant, we'll also tell you in the app before they apply.
12. Contact
Questions or requests about your privacy: support@paparizzi.app.