Privacy Policy

Last Updated: September 5, 2025

1. Introduction

This Privacy Policy describes how we collect, use, and protect your information when you use our AI-powered image editing application ("App"). We are committed to protecting your privacy and ensuring transparency about our data practices.

Contact Information:
- Name: Mirkan Caliskan
- Email: mirkancaliskan@gmail.com
- Address: Izmir/Turkey

2. Information We Collect

2.1 Images and Media Content

Uploaded Images: Images you upload for AI processing and editing
Generated Content: AI-edited or generated images created through our service
Image Metadata: Technical information about images (resolution, format, size)

2.2 Authentication Data

Anonymous User IDs: Temporary identifiers created by Firebase Authentication
Session Data: Information to maintain your app session and preferences
Device Information: Device type, operating system, app version for technical support

2.3 Usage Analytics (Optional)

App Usage Patterns: Features used, editing preferences, session duration
Performance Data: Load times, error rates, crash reports for service improvement
Technical Logs: System errors and debugging information

2.4 Communication Data

Support Requests: Information you provide when contacting customer support
Feedback: Voluntary feedback and feature requests you submit

3. How We Use Your Information

3.1 Primary Purposes

Image Processing: Using AI models to edit and enhance your images
Service Delivery: Providing core app functionality and features
Account Management: Managing your anonymous user session
Technical Support: Resolving technical issues and providing customer support

3.2 Optional Uses (With Your Consent)

Service Improvement: Analyzing usage patterns to enhance app features
Analytics: Understanding how users interact with our app
Marketing Communications: Sending updates about new features (opt-in only)

3.3 Legal Basis for Processing (GDPR)

Contract Performance: Processing images to provide editing services
Legitimate Interest: Maintaining app functionality and security
Consent: Analytics, marketing, and optional data uses
Legal Compliance: Meeting regulatory requirements and preventing misuse

4. Third-Party Services

4.1 AI Processing Providers

fal.ai

Purpose: AI image generation and processing
Data Shared: Uploaded images and processing parameters
Retention: Images cached for 24-48 hours maximum, then automatically deleted
Location: Data processed in secure cloud infrastructure
Privacy Policy: https://fal.ai/privacy

Replicate

Purpose: Additional AI model access for specialized editing features
Data Shared: Images requiring specific AI model processing
Retention: Temporary processing only, no permanent storage
Location: Distributed cloud processing
Privacy Policy: https://replicate.com/privacy

4.2 Google/OpenAI AI Models

Purpose: Advanced AI editing and generation capabilities
Data Usage: Images processed via API calls only
Training: Your images are NOT used for AI model training
Retention: No data retention by model providers
Privacy Policies:
- OpenAI: https://openai.com/policies/privacy-policy/
- Google AI: https://policies.google.com/privacy

4.3 Authentication and Infrastructure

Firebase (Google)

Purpose: Anonymous user authentication, app analytics, crash reporting
Data Shared: Anonymous user IDs, app usage data, crash reports
Retention: Anonymous accounts deleted after 30 days of inactivity
Privacy Policy: https://firebase.google.com/support/privacy

5. Data Retention and Deletion

5.1 Image Data

Uploaded Images: Deleted immediately after processing (within 1 hour)
Generated Images: Stored temporarily in your session, deleted when session ends
Cache Data: Temporary processing cache cleared within 24-48 hours
Metadata: Stripped from images before AI processing

5.2 User Data

Anonymous Sessions: Deleted after 30 days of app inactivity
Usage Analytics: Retained for 2 years maximum for service improvement
Error Logs: Retained for 1 year for technical support purposes
Support Communications: Deleted after 3 years or upon request

5.3 Automated Deletion

We implement automated systems to ensure data is deleted according to our retention schedules
Users can request immediate deletion of their data at any time

6. Data Security

6.1 Technical Safeguards

Encryption in Transit: All data transmitted using TLS 1.3 encryption
Encryption at Rest: Data stored using AES-256 encryption
Secure APIs: All third-party communications use secure, authenticated APIs
Access Controls: Strict employee access controls and audit logging

6.2 Processing Security

Temporary Processing: Images processed in secure, isolated environments
No Permanent Storage: Images not stored on our servers beyond processing needs
Secure Deletion: Cryptographic erasure of temporary data
Regular Security Audits: Third-party security assessments and penetration testing

7. International Data Transfers

7.1 Processing Locations

Your data may be processed in the United States and other countries where our service providers operate
All transfers are protected by appropriate safeguards including Standard Contractual Clauses

7.2 Safeguards

We ensure adequate protection through legally recognized transfer mechanisms
Contact us for copies of relevant safeguard documentation

8. Your Privacy Rights

8.1 Access and Control Rights

Right to Access: Request information about data we process about you
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data
Right to Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Restrict: Request limitation of data processing

8.2 Consent Management

Withdraw Consent: Easily withdraw consent for optional data uses
Granular Controls: Separate consent options for different data uses
No Negative Impact: Withdrawing consent doesn't affect core app functionality

8.3 Exercising Your Rights

Email: mirkancaliskan@gmail.com
Response Time: We respond to requests within 30 days
Identity Verification: We may request verification before processing requests
No Cost: Rights requests are processed free of charge

9. AI-Specific Transparency

9.1 Automated Processing

AI Editing: All image enhancements use automated AI processing
No Decision Making: We don't use AI for decisions that significantly affect you
Human Oversight: Technical staff monitor AI processing for quality and safety

9.2 AI Model Training

Default Policy: Your images are NOT used for AI model training
Opt-In Only: You can voluntarily contribute to model improvement (coming soon)
Anonymization: Any contributed data is fully anonymized
Withdrawal: You can withdraw from training contributions at any time

9.3 Content Safety

Automated Screening: Images are automatically screened for safety and legal compliance
Human Review: Flagged content may be reviewed by human moderators
Content Retention: Violating content retained for 1 year for safety purposes

10. Cookies and Local Storage

10.1 Essential Data

Session Storage: Temporary storage for app functionality
Preference Settings: Your editing preferences and app settings
Authentication Tokens: Secure tokens for anonymous authentication

10.2 Optional Analytics

Usage Tracking: Anonymous usage analytics (with your consent)
Performance Monitoring: App performance and error tracking
Opt-Out: You can disable analytics tracking in app settings

11. Children's Privacy

We do not knowingly collect personal information from children under 13 (or applicable local age). If we discover we have collected information from a child without proper consent, we will delete it immediately.

12. Changes to Privacy Policy

12.1 Updates

We may update this Privacy Policy to reflect service changes or legal requirements
Notification: Users notified of material changes via app notification
Review Period: 30-day notice period for significant changes
Consent: New consent obtained for expanded data uses

12.2 Version Control

Effective Date: Changes effective from the date specified
Previous Versions: Available upon request
Continued Use: Using the app after changes indicates acceptance

13. Regional Privacy Rights

13.1 European Union (GDPR)

All rights outlined in Section 8 apply
Data Protection Officer: Mirkan Caliskan
Supervisory Authority: Right to lodge complaints with your local data protection authority
Legal Basis: Processing based on contract performance, legitimate interest, or consent

13.2 California (CCPA)

Right to Know: Categories of personal information collected and shared
Right to Delete: Request deletion of personal information
Right to Opt-Out: Opt out of sale of personal information (we don't sell data)
Non-Discrimination: Equal service regardless of privacy rights exercise

13.3 Other Jurisdictions

We comply with applicable privacy laws in all operating jurisdictions
Contact us for specific information about rights in your region

14. Data Breach Notification

In the unlikely event of a data breach affecting your personal information:

User Notification: Within 72 hours of discovery
Regulatory Notification: Authorities notified as required by law
Mitigation Steps: Immediate action to secure data and prevent further access
Support: Dedicated support for affected users

15. Business Transfers

If our company is acquired or merged, your information may be transferred. We will:

Notify Users: 30-day advance notice of ownership changes
Same Protections: Ensure equivalent privacy protections continue
Opt-Out Option: Provide data deletion option before transfer

16. Contact Information

16.1 Privacy Inquiries

Email: mirkancaliskan@gmail.com
Response Time: 48 hours for initial response
Escalation: Mirkan Caliskan for unresolved issues

16.2 Data Protection Officer (EU)

Email: mirkancaliskan@gmail.com
Role: Independent oversight of data protection practices
Direct Contact: Available for GDPR-specific concerns

16.3 Regulatory Contacts

EU Representative: Mirkan Caliskan
UK Representative: Mirkan Caliskan

Effective Date: September 5, 2025
Document Version: 2.0

By using our AI Image Editing App, you acknowledge that you have read, understood, and agree to this Privacy Policy.