Privacy Policy

1. Who we are

ProVisual is the data controller for the processing described here. For any privacy request, contact us at provisual.support@gmail.com.

2. What we collect

• Account data. On first launch we create an anonymous account (a random identifier) so we can store your token balance. If you choose Sign in with Apple, we receive your name and the email (or Apple’s private relay address) to identify your account across devices.
• Photos you upload. The source/face photos you add for generation.
• Generated images. The results produced from your photos and chosen template/effect.
• Purchases. Your subscription/purchase status and transaction identifiers, processed by Apple and RevenueCat. We never receive or store your card details.
• Token balance & transactions. Your in-app token balance and its history, stored on our servers.
• Notifications. If you enable notifications, a push token used to deliver them.
• Technical & support data. App version, OS version and device model (e.g. when you email support), and minimal diagnostics needed to operate the service.
• On-device preferences. Your language, notification toggle and local generation history are stored only on your device.

3. How we use your data

• To provide image generation and deliver your results.
• To manage your token balance, subscriptions and purchases.
• To sync your account and balance across your devices.
• To send notifications you have enabled.
• To respond to support requests.
• To keep the service secure and prevent abuse, and to comply with law.

We do not sell your personal data, and we do not use third-party advertising trackers.

4. Face data & AI processing

ProVisual collects face photographs you voluntarily upload for AI image generation. We collect standard photos only — not biometric templates, facial geometry maps, or facial recognition data.

• Collection. Face photos you explicitly submit in the app to generate an image.
• Third-party AI provider. Your photos are transmitted via encrypted HTTPS to fal.ai Inc. (California, USA), our AI model provider. fal.ai processes your photos solely to generate the requested images and does not retain them after processing.
• Temporary storage. Photos are held in Supabase cloud storage (encrypted, US/EU) only during the active generation session.
• Deletion. Source photos are automatically deleted from all storage within 2 minutes of generation completing. No face data is retained long-term.
• Purpose limitation. Your photos are never used for AI model training, facial recognition, profiling, advertising, or any purpose beyond the specific generation you request.

Generated results may be stored briefly so the app can deliver them to you; you save the ones you want to your own gallery. Your generation history is kept only on your device.

5. Service providers (sub-processors)

We share data only with providers that help us run the app, and only as needed to provide the service:

• Supabase — backend, database, file storage and authentication.
• fal.ai — AI image generation (processes your photos to create results).
• RevenueCat & Apple — purchase processing and validation.
• Apple — Sign in with Apple (authentication).
• Expo — delivery of push notifications.

Each provider acts under its own terms and privacy policy.

6. Legal bases (GDPR)

Where the GDPR applies, we rely on: performance of a contract (providing the app and generations); consent (optional Sign in with Apple, notifications); legitimate interests (security, abuse prevention, improving the service); and legal obligations.

7. Your rights

Depending on your location (e.g. EU/EEA, UK, California), you may have the right to access, correct, delete, export or restrict your data, to object to processing, and to withdraw consent. To exercise any right, email provisual.support@gmail.com. We do not sell personal information.

8. Account & data deletion

You can delete your account and the data associated with it (profile, token balance and history) directly in the app, or by emailing provisual.support@gmail.com. Source photos are already deleted automatically after each generation. Note: purchases processed by Apple are handled under Apple’s policies.

9. Data retention

• Source photos: deleted right after generation.
• Account, balance & transactions: kept while your account exists; removed when you delete it.
• On-device history & preferences: remain on your device until you clear them or uninstall.

10. International transfers

Our providers may process data on servers located outside your country. Where required, appropriate safeguards are applied to protect your data in transit and at rest (encrypted HTTPS, access controls).

11. Children

The app is not directed to children under 13 (or the minimum age of digital consent in your country). We do not knowingly collect data from children. If you believe a child provided us data, contact us and we will delete it.

12. Security

We use encrypted transport (HTTPS), access-scoped storage and server-side controls so each user can only access their own data. No method of transmission or storage is 100% secure, but we apply industry-standard measures.

13. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above, and continued use of the app after changes means you accept the updated policy.

14. Contact

Questions or requests: provisual.support@gmail.com